{ stdenv , lib , fetchurl , perl , pkg-config , libcap , libidn2 , libtool , libxml2 , openssl , libuv , nghttp2 , jemalloc , enablePython ? false , python3 , enableGSSAPI ? true , libkrb5 , buildPackages , cmocka , tzdata # for passthru.tests # , nixosTests # , gitUpdater }: stdenv.mkDerivation rec { pname = "bind"; version = "9.18.26"; src = fetchurl { url = "https://downloads.isc.org/isc/bind9/${version}/${pname}-${version}.tar.xz"; hash = "sha256-df/uUnMelgTISbZY3ynpJ/HE8B1aceo+vL62NwLLZlE="; }; outputs = [ "out" "lib" "dev" "man" "dnsutils" "host" ]; patches = [ ./dont-keep-configure-flags.patch ]; nativeBuildInputs = [ perl pkg-config ]; buildInputs = [ libidn2 libtool libxml2 openssl libuv nghttp2 jemalloc ] ++ lib.optional stdenv.isLinux libcap ++ lib.optional enableGSSAPI libkrb5 ++ lib.optional enablePython (python3.withPackages (ps: with ps; [ ply ])); depsBuildBuild = [ buildPackages.stdenv.cc ]; configureFlags = [ "--localstatedir=/var" "--without-lmdb" "--with-libidn2" ] ++ lib.optional enableGSSAPI "--with-gssapi=${libkrb5.dev}/bin/krb5-config" ++ lib.optional (stdenv.hostPlatform != stdenv.buildPlatform) "BUILD_CC=$(CC_FOR_BUILD)"; postInstall = '' moveToOutput bin/bind9-config $dev moveToOutput bin/host $host moveToOutput bin/dig $dnsutils moveToOutput bin/delv $dnsutils moveToOutput bin/nslookup $dnsutils moveToOutput bin/nsupdate $dnsutils for f in "$lib/lib/"*.la "$dev/bin/"bind*-config; do sed -i "$f" -e 's|-L${openssl.dev}|-L${lib.getLib openssl}|g' done cat <$out/etc/rndc.conf include "/etc/bind/rndc.key"; options { default-key "rndc-key"; default-server 127.0.0.1; default-port 953; }; EOF ''; enableParallelBuilding = true; doCheck = false; # TODO: investigate failures; see this and linked discussions: # https://github.com/NixOS/nixpkgs/pull/192962 /* doCheck = with stdenv.hostPlatform; !isStatic && !(isAarch64 && isLinux) # https://gitlab.isc.org/isc-projects/bind9/-/issues/4269 && !is32bit; */ checkTarget = "unit"; checkInputs = [ cmocka ] ++ lib.optionals (!stdenv.hostPlatform.isMusl) [ tzdata ]; preCheck = lib.optionalString stdenv.hostPlatform.isMusl '' # musl doesn't respect TZDIR, skip timezone-related tests sed -i '/^ISC_TEST_ENTRY(isc_time_formatISO8601L/d' tests/isc/time_test.c '' + lib.optionalString stdenv.hostPlatform.isDarwin '' # Test timeouts on Darwin sed -i '/^ISC_TEST_ENTRY(tcpdns_recv_one/d' tests/isc/netmgr_test.c ''; # passthru = { # tests = { # inherit (nixosTests) bind; # prometheus-exporter = nixosTests.prometheus-exporters.bind; # kubernetes-dns-single-node = nixosTests.kubernetes.dns-single-node; # kubernetes-dns-multi-node = nixosTests.kubernetes.dns-multi-node; # }; # updateScript = gitUpdater { # # No nicer place to find latest stable release. # url = "https://gitlab.isc.org/isc-projects/bind9.git"; # rev-prefix = "v"; # # Avoid unstable 9.19 releases. # odd-unstable = true; # }; # }; meta = with lib; { homepage = "https://www.isc.org/bind/"; description = "Domain name server"; license = licenses.mpl20; changelog = "https://downloads.isc.org/isc/bind9/cur/${lib.versions.majorMinor version}/CHANGES"; maintainers = with maintainers; [ globin ]; platforms = platforms.unix; outputsToInstall = [ "out" "dnsutils" "host" ]; }; }