303975 |
11-Aug-2016 |
gjb |
Copy stable/11@r303970 to releng/11.0 as part of the 11.0-RELEASE cycle.
Prune svn:mergeinfo from the new branch, and rename it to RC1.
Update __FreeBSD_version.
Use the quarterly branch for the default FreeBSD.conf pkg(8) repo and the dvd1.iso packages population.
Approved by: re (implicit) Sponsored by: The FreeBSD Foundation |
302408 |
08-Jul-2016 |
gjb |
Copy head@r302406 to stable/11 as part of the 11.0-RELEASE cycle. Prune svn:mergeinfo from the new branch, as nothing has been merged here.
Additional commits post-branch will follow.
Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
|
298107 |
16-Apr-2016 |
gjb |
Merge the projects/release-pkg branch to head.
This allows packaging the base system with pkg(8), including but not limited to providing the ability to provide upstream binary update possibilities for non-tier-1 architectures.
This merge is a requirement of the 11.0-RELEASE, and as such, thank you to everyone that has tested the project branch.
Documentation in build(7) etc. is still somewhat sparse, but updates to those parts will follow.
Sponsored by: The FreeBSD Foundation
|
296677 |
11-Mar-2016 |
jhibbits |
Add to CFLAGS, rather than replacing.
This allows additional CFLAGS, as set in bsd.cpu.mk, to go through.
|
295535 |
11-Feb-2016 |
des |
Use the new insecure-lan-zones option instead of listing each AS112 zone separately.
MFC after: 3 days
|
295533 |
11-Feb-2016 |
des |
Remove unbound-contrl-setup since we use a local control socket which does not require keys.
MFC after: 3 days Relnotes: yes
|
291563 |
01-Dec-2015 |
bdrewery |
META MODE: Update dependencies with 'the-lot' and add missing directories.
This is not properly respecting WITHOUT or ARCH dependencies in target/. Doing so requires a massive effort to rework targets/ to do so. A better approach will be to either include the SUBDIR Makefiles directly and map to DIRDEPS or just dynamically lookup the SUBDIR. These lose the benefit of having a userland/lib, userland/libexec, etc, though and results in a massive package. The current implementation of targets/ is very unmaintainable.
Currently rescue/rescue and sys/modules are still not connected.
Sponsored by: EMC / Isilon Storage Division
|
288266 |
26-Sep-2015 |
bdrewery |
Add more SUBDIR_PARALLEL.
MFC after: 3 weeks Sponsored by: EMC / Isilon Storage Division
|
287880 |
16-Sep-2015 |
des |
If forwarders were specified on the command line, create an empty resolvconf.conf so that resolvconf won't replace the manually configured forwarders with dynamically configured ones the next time the lease is renewed.
|
276702 |
05-Jan-2015 |
des |
Enable remote control using a local socket in the default configuration.
|
275054 |
25-Nov-2014 |
bapt |
Convert usr.sbin to LIBADD Reduce overlinking
|
271255 |
08-Sep-2014 |
des |
Fix support for IPv6 nameservers.
PR: 188931 Submitted by: Takefu <takefu@airport.fm> MFC after: 3 days
|
269648 |
06-Aug-2014 |
bapt |
Rework privatelib/internallib
Make sure everything linking to a privatelib and/or an internallib does it directly from the OBJDIR rather than DESTDIR. Add src.libnames.mk so bsd.libnames.mk is not polluted by libraries not existsing in final installation Introduce the LD* variable which is what ld(1) is expecting (via LDADD) to link to internal/privatelib Directly link to the .so in case of private library to avoid having to complexify LDFLAGS.
Phabric: https://phabric.freebsd.org/D553 Reviewed by: imp, emaste
|
268840 |
18-Jul-2014 |
des |
Use a combination of unblock-lan-zones (r268839) and domain-insecure to fix reverse lookups on networks using private addresses.
|
266863 |
29-May-2014 |
des |
Create /var/unbound/conf.d for additional configuration files. Ensure that it is used if present.
MFH: 3 weeks
|
255826 |
23-Sep-2013 |
des |
Prevent resolvconf from updating /etc/resolv.conf. As Jakob Schlyter pointed out, having additional nameservers listed in /etc/resolv.conf can break DNSSEC verification by providing a false positive if unbound returns SERVFAIL due to an invalid signature. The downside is that the domain / search path won't get updated either, but we can live with that.
Approved by: re (blanket)
|
255819 |
23-Sep-2013 |
des |
Ensure that resolvconf(8) preserves the edns0 setting.
Approved by: re (blanket)
|
255809 |
23-Sep-2013 |
des |
Add a setup script for unbound(8) called local-unbound-setup. It generates a configuration suitable for running unbound as a caching forwarding resolver, and configures resolvconf(8) to update unbound's list of forwarders in addition to /etc/resolv.conf. The initial list is taken from the existing resolv.conf, which is rewritten to point to localhost. Alternatively, a list of forwarders can be provided on the command line.
To assist this script, add an rc.subr command called "enabled" which does nothing except return 0 if the service is enabled and 1 if it is not, without going through the usual checks. We should consider doing the same for "status", which is currently pointless.
Add an rc script for unbound, called local_unbound. If there is no configuration file, the rc script runs local-unbound-setup to generate one.
Note that these scripts place the unbound configuration files in /var/unbound rather than /etc/unbound. This is necessary so that unbound can reload its configuration while chrooted. We should probably provide symlinks in /etc.
Approved by: re (blanket)
|
255602 |
15-Sep-2013 |
des |
Set NO_WERROR for unbound until I can figure out how to unbreak the non-clang build.
Approved by: re (blanket)
|
255597 |
15-Sep-2013 |
des |
Build and install the Unbound caching DNS resolver daemon.
Approved by: re (blanket)
|