Per the BIND 9.16 ARM page 309:
•Compile-time settings enabled by the --with-tuning=large option for configure are now in effect by default. Previously used default compile-time settings can be enabled by passing --with-tuning=small to configure. [GL !2989]
The TUNING_LARGE port option should be changed to TUNING_SMALL, and should be OFF by default.
Same for LARGE_FILE; it swapped around also; it's now
--disable-largefile omit support for large files
And also for GeoIP it now seems turned the other way around
--disable-geoip support GeoIP2 geolocation ACLs if available
--with-geoip2 deprecated, use --with-maxminddb
--with-maxminddb=PATH Build with MaxMind GeoIP2 support (auto|yes|no|path)
Created attachment 211923 [details]
bind916 new defaults
My attempt to address it all.
Comment on attachment 211923 [details]
bind916 new defaults
On second thought...
Since the history of geoip / the new defaults,
then maybe it wont hurt to change
GEOIP_CONFIGURE_OFF= --disable-geoip \
(In reply to Leo Vandewoestijne from comment #1)
Good catch on these other options.
Mathieu, while we're here, can we also visit #237861 from last May?
Another "problem" in the OPTIONS that I noticed is that you can't have the isc python module without installing bind-tools.
Something which is not needed if you don't removing the PYTHON option.
(In reply to Leo Vandewoestijne from comment #7)
I don't understand the problem you have with the Python option, it only exists with bind-tools. (and you cannot install bind916 without installing bind-tools.)
(In reply to Mathieu Arnold from comment #8)
I wish to have python without having the bind-tools - which is possible, and just a matter of the adaption I made.
If you however think that overcomplicates, then installing bind tools is a reasonable compromis.
So, let me explain a bit more.
The "things" that are enabled by the PYTHON options are only command line tools.
The BIND9 software is splitted into two ports.
The first part is the command line tools, dig, delv, nsupdate, dnssec-keygen...
The second part is the server part, which is in one of the bind911, bind914, bind916 and bind9-devel
It makes no sense to enable the PYTHON option for the server ports, it would not install or build anything,
(In reply to Mathieu Arnold from comment #10)
I think the d in rndc stands for daemon and the c for control.
The python module contains isc.rndc
It's useful to add/delete zones and other daemon control.
And faster than executing seperate system commands.
So I desire none of the tools you sum up, but want python able to control my daemon.
Right now I take the tools for granted, but they aren't needed, as the bind port could also install the python module.
Created attachment 216119 [details]
Too much issues addressed at once?
In that case let's breakdown in parts. So by these:
- one patch to either adjust the tuning option, or
- another to remove the option entirely.
Despite the mutation being super-simple I still tested them (successfully) in poudriere.
Created attachment 216120 [details]
The patch to remove the option entirely.
A commit references this bug:
Date: Wed Aug 26 13:32:18 UTC 2020
New revision: 546281
Remove the TUNING_LARGE option, it is now a no-op.
Submitted by: Leo Vandewoestijne