• Re: [gentoo-user] Re: Why does bind-tools 9.18 depend on bind?

    From Michael Orlitzky@21:1/5 to Grant Edwards on Fri Oct 25 12:00:02 2024
    On 2024-10-25 00:47:27, Grant Edwards wrote:

    Try net-dns/doggo[2]

    Cool, and it doens't want to install 4 other new packages like
    bind-tools does. [OK, two are just account/group packages, so it's
    not quite as bad as it sounds.]

    It's a Go package though, so it will quietly install a mountain a
    random outdated static libraries from github.

    Try it:

    $ emerge --fetchonly --nodeps doggo
    $ tar -tf /var/cache/distfiles/doggo-1.0.5-deps.tar.xz

    BIND may actually be the least bad option. The Knot DNS server
    provides alternatives like kdig, but you'll still wind up with a
    full-fledged DNS server on your hands.

    Depending on how serious this is, you could use package.provided and INSTALL_MASK to block everything you don't want.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From =?UTF-8?Q?Holger_Hoffst=c3=a4tte?=@21:1/5 to Michael Orlitzky on Fri Oct 25 13:10:02 2024
    On 2024-10-25 11:59, Michael Orlitzky wrote:
    On 2024-10-25 00:47:27, Grant Edwards wrote:

    Try net-dns/doggo[2]

    Cool, and it doens't want to install 4 other new packages like
    bind-tools does. [OK, two are just account/group packages, so it's
    not quite as bad as it sounds.]

    It's a Go package though, so it will quietly install a mountain a
    random outdated static libraries from github.

    What? No, it will not. Those dependencies are absolutely not installed,
    they are only used for building & linking the executable.

    $equery f doggo
    * Searching for doggo ...
    * Contents of net-dns/doggo-1.0.5:
    /usr
    /usr/bin
    /usr/bin/doggo
    /usr/share
    /usr/share/bash-completion
    /usr/share/bash-completion/completions /usr/share/bash-completion/completions/doggo
    /usr/share/zsh
    /usr/share/zsh/site-functions
    /usr/share/zsh/site-functions/_doggo

    I could not agree more that Go is dumb and basically useless for shared infrastructure, but that train has sailed.

    Holger

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Eray Aslan@21:1/5 to Grant Edwards on Sat Oct 26 10:20:01 2024
    On Fri, Oct 25, 2024 at 01:53:05PM -0000, Grant Edwards wrote:
    On 2024-10-25, Michael Orlitzky <mjo@gentoo.org> wrote:
    BIND may actually be the least bad option.

    Indeed.

    Seconded. I find that net-dns/bind is good for authoritative dns servers
    and for its tools so it tends to get installed even on laptops. Gentoo
    does not start daemons on install so really no need to have a fragile
    separate package only for bind provided tools.

    fwiw, net-dns/unbound is a good choice for a resolver even if you are
    running in a systemd environment.

    --
    Eray





    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Peter Humphrey@21:1/5 to All on Sat Oct 26 12:50:01 2024
    On Saturday 26 October 2024 09:10:44 BST Eray Aslan wrote:

    fwiw, net-dns/unbound is a good choice for a resolver even if you are
    running in a systemd environment.

    Interesting. I run dnsmasq here; would unbound be better, or less good? I've had no trouble with dnsmasq - it just does the job.

    --
    Regards,
    Peter.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Eray Aslan@21:1/5 to Peter Humphrey on Sun Oct 27 10:00:02 2024
    On Sat, Oct 26, 2024 at 11:42:32AM +0100, Peter Humphrey wrote:
    On Saturday 26 October 2024 09:10:44 BST Eray Aslan wrote:
    fwiw, net-dns/unbound is a good choice for a resolver even if you are running in a systemd environment.

    Interesting. I run dnsmasq here; would unbound be better, or less good? I've had no trouble with dnsmasq - it just does the job.

    I should have qualified that statement. Sorry. dnsmasq is optimized and arguably a better choice for client systems, esp with intermittent
    internet access (phones, laptops etc). And I find unbound to be a better
    choice for server environments.

    Since I am familiar with unbound, I tend to use it everywhere but that
    is just personal choice.

    --
    Eray

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)