scripts: utility to get base64 url encoded query for DoH GET

See merge request !1089

distro/tests: update distributions

See merge request !1088

dnssec-failed.org domain uses RSA/SHA1 algorithm, which is considered
insecure by Fedora 33+ policy.

- update fedora to 33
- update ubuntu rolling to groovy

new pretty printer

See merge request !1027

All strings should be properly escaped but some non-escaped versions
were leaking into error messages.

Functions like trust_anchors.summary() return strings including tabs and
newlines, so we do not escape those for human-readable output.

In case nothing (not even nil) is returned then do not print newline
after the zero-length message. This avoids unambiguous empty line in
output (is it an empty string which got printed?).

This change allows sandbox to pretty-print return values from functions
which return multiple values, e.g. future net.bufsize() from MR !1026.

This slightly changes table_print() output format.
table_print() output is not intended for machine consumption,
use krprint.serialize_lua() or JSON for that purpose.

Output from table_print is now a valid Lua expression
if the input contains only serializable data types
(number, string, bool, nil, table), which is nice for copy&pasting.

Functions etc. are also pretty-printed but cannot be deserialized.
Numbers are pretty-printed as well so their precision is reduced (as
compared to krprint.serialize_lua).

Code was copied from Lua sandbox, the old copy is to be removed once new
pretty-printer is finished.

At the moment it does not handle functions and other non-serializable
types.

Side-effect is that keys are grouped by their type, so numbers come
first and strings later..

5.2.0 doc polish

See merge request !1087

Reimplement map()

Closes #620 and #554

See merge request !1000

Error handling inside the test was incorrent and a detected error would
blow up the test routine.

Related: !1011, 3f5a826d

We don't have leader instance anymore, so each instance independently
provides Graphite statistics.

This commit also changes default Graphite prefix to solve problem
with conflicting instance names.

It now contains either content of SYSTEMD_INSTANCE environment variable
or stringified version of getpid() value.

Main motivation is that the old worker.id was broken on systemd,
i.e. the default installation.

Related: #631

Petr Špaček authored 4 years ago and Tomas Krizek committed 4 years ago

Fixup for c0b5faf2.

Petr Špaček authored 4 years ago and Tomas Krizek committed 4 years ago

We don't have leader instance anymore, so any instance can provide
Prometheus statistics.

For performance reasons an instance does not store past statistics
when no client is connected to HTTP socket. As a consequence chart in
web interface is empty when client loads the page and then gradually
chart fills up.

Petr Špaček authored 4 years ago and Tomas Krizek committed 4 years ago

Obviously this is is racy and cannot be relied upon.
Caller still has to handle connection errors.

Petr Špaček authored 4 years ago and Tomas Krizek committed 4 years ago

New map() creates control/ sockets in current working directory so it
pollutes worktree when developers run it in worktree.

I've also added files with ephemeral certificates and pytests test report
which were missing as well.

Petr Špaček authored 4 years ago and Tomas Krizek committed 4 years ago

Three instances send commands and DNS queries to each other.

Petr Špaček authored 4 years ago and Tomas Krizek committed 4 years ago

Control protocol uses \n as command delimiter so we cannot allow \n
inside commands. Users should be able to Lua-escape \n with \010.