Closes #78

Frantisek Tobias authored 7 months ago and Vladimír Čunát committed 7 months ago

conftest: detect libjemalloc: test all binaries for libjemalloc, remove -force-run option from config

--force-run is now available as a cli argument as well as kresd.yaml->additional. Default deckard behaviour now exits with code 77 if force-run wasn't required and tested server is linked with libjemalloc

CI fixes after distro update

See merge request !222

They unified it, using the same property for both IPv6 and IPv4.

`libfaketime` and `jemalloc` is an incompatible combination.

This makes the scripts compatible with setups where they use commands
from somewhere other than `/bin` or `/usr/bin`, a prominent OS doing
this being NixOS.

But also, anyone may wish to just override things for their particular
setup. Especially with Python, this enables the proper use of
virtualenvs.

Replace deleted --boxed with --forked from pytest-forked

See merge request !219

The test was removed by commit 5573a6dd.

For now at least.  This basically reverts 68abde7f which tried
to make it work, but this negative trust anchor was a really bad idea.
The test (also) relies on names underneath getting validated
and used by aggressive cache later.
(They are also signed as belonging to the root zone, so it's ugly.)

With "previous" kresd versions the problematic NSEC inside
somehow validated as secure, but I don't want to be restricted here.

Support for BIND

See merge request !217

Older versions of BIND require commenting out qname-minimization configuration.

BIND builds linked to jemalloc or Clang ASAN will fail to start
on systems with libfaketime versions > 0.9.6:
- jemalloc https://github.com/wolfcw/libfaketime/issues/130
- Clang ASAN https://github.com/wolfcw/libfaketime/issues/365

BIND 9.17.22 treated the old responses as "non-improving delegation".

ci: fix some pylint issues

See merge request !215

improve links and e-mail contact

See merge request !216

It was migrated long ago.  The old URLs still work (redirect)
at this point, but I see no reason to keep using them.

It's not ideal, but so far the communication traffic has been very low.

template/kresd: replace verbose log with request log

See merge request !213

Since kresd 5.4.0, using both debug level logging _and_ request log
will duplicate the request log lines in the output.

I think it is sufficient to log just everything related to the request
and otherwise stick with the default log level. This makes the resulting
log more readable.

val_iter_high.rpl: new tests for NSEC3 with many iterations

See merge request !212

It works with Unbound, too.  The wildcard part triggers an assertion
in kresd 5.3.1.

I wanted to pass --junitxml=path/file.xml and the logs from the
currently empty set of tests were overwriting the interesting ones;
the other way it will be just fine ;-)

iter_formerr.rpl: remove for now

See merge request !210