Official packages for other platforms
I am trying to deploy Knot Resolver on armhf, arm64, and amd64 servers.
Would it be possible to publish official packages for multiple architectures?
Thank you for this wonderful software.
Activity
Hello Sebastiaan,
right now we publish packages only for x86_64 ("amd64"), these are available from https://www.knot-resolver.cz/download/ .
aarch64 ("arm64") does not work at the moment because of #216 (closed) - if you have time to fix it we would be happy to accept patches!
BTW we did some benchmarks on multi-core aarch64 platforms and as far as we can tell it sucks performance-wise so we will most likely not invest in this platform ourselves for now - so do not be surprised by its performance. (Of course we will reevaluate when a better HW is available.)
@pspacek Thanks for the quick response. Will take a look and try to get it working.
FWIW, most of my edge servers are actually tiny Odroid machines with 4+4 cores ARMv7. A few times faster than a Raspberry Pi but probably slower than the cheapest Intel/AMD CPUs today.
There are also companies like Cloudflare investing into more powerful modern ARMv8-based servers and optimised software.
Rest assured that we are in touch with Cloudflare ;-)
For experimentation you can try e.g. Fedora packages which are built for 32-bit ARM as well but we never touch that by hand so we are not sure if the packages shipped by distro actually work. (In contrast we test 64 bit Intel packages ourselves.)
@sebdeckers Packages for
armv7lare now available from our repositories for Debian and Fedora. They have built successfully, but I don't have any hardware to test their functionality.If you try any of them, please let us know whether they actually work, or if there is some issue. Thanks!
@tkrizek Wow, that's wonderful! Thank you very much.
Is there any difference between the Debian package and one for Ubuntu? If so, would you be able to publish a specific Ubuntu package?
Is there a way I can help you build and test the official arm7l packages? Happy to sponsor an Odroid, or set one up remotely for you.
I run Ubuntu 18.04 LTS as the image & kernel are provided by HardKernel for Odroid XU4 (HC1/HC2).
I was able to install the Debian 9.0 package you created. I followed these instructions: https://software.opensuse.org//download.html?project=home%3ACZ-NIC%3Aknot-resolver-latest&package=knot-resolver
root@odroid:~# apt-cache show knot-resolver=3* Package: knot-resolver Version: 3.0.0-1 Architecture: armhf Maintainer: Knot Resolver Installed-Size: 444 Depends: adduser, dns-root-data, libkres8 (= 3.0.0-1), lua-sec, lua-socket, libbsd0 (>= 0.0), libc6 (>= 2.8), libdnssec6 (>= 2.3.0), libedit2 (>= 2.11-20080614), libgcc1 (>= 1:3.5), libgnutls30 (>= 3.5.6), libknot8 (>= 2.7.0), liblmdb0 (>= 0.9.6), libluajit-5.1-2, libncurses5 (>= 6), libstdc++6 (>= 5), libsystemd0 (>= 227), libtinfo5 (>= 6), libuv1 (>= 1.7.0), libzscanner2 (>= 2.3.0) Recommends: knot-resolver-module-http Filename: ./armhf/knot-resolver_3.0.0-1_armhf.deb Size: 142100 MD5sum: 69376df83c6a96807863d8dc404f6a3a SHA1: c69da70dc0f63753a938b2ef07dafb5a6a129b96 SHA256: e026f4643ed072077bd6ca1a7d9cc43fe44f93bf0fb694422e3a04108ff8b7f3 Section: net Priority: optional Homepage: https://www.knot-resolver.cz/ Description: caching, DNSSEC-validating DNS resolver The Knot Resolver is a caching full resolver implementation written in C and LuaJIT, including both a resolver library and a daemon. Modular architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. There are three built-in modules - iterator, cache, validator, and many external. . The Lua modules, switchable and shareable cache, and fast FFI bindings makes it great to tap into resolution process, or be used for your recursive DNS service. It's the OpenResty of DNS. . The server adopts a different scaling strategy than the rest of the DNS recursors - no threading, shared-nothing architecture (except MVCC cache that may be shared). You can start and stop additional nodes depending on the contention without downtime. Description-md5: bf37c31effb987d90b9c0c9623e2590b
root@odroid:
# apt-get install knot-resolver=3* Reading package lists... Done Building dependency treerc1+git+ac3201d-4 [57.3 kB] Get:7 http://ports.ubuntu.com/ubuntu-ports bionic/universe armhf lua-sec armhf 0.6-4 [24.0 kB] Get:8 http://ports.ubuntu.com/ubuntu-ports bionic/universe armhf libluajit-5.1-common all 2.1.0
Reading state information... Done Selected version '3.0.0-1' (home:CZ-NIC:knot-resolver-latest:download.opensuse.org [armhf]) for 'knot-resolver' The following package was automatically installed and is no longer required: kernel-common Use 'apt autoremove' to remove it. The following additional packages will be installed: javascript-common knot-resolver-module-http libdnssec6 libjs-bootstrap libjs-d3 libjs-jquery libknot8 libkres8 liblmdb0 libluajit-5.1-2 libluajit-5.1-common libuv1 libzscanner2 lua-basexx lua-bit32 lua-compat53 lua-cqueues lua-fifo lua-http lua-lpeg lua-lpeg-patterns lua-luaossl lua-mmdb lua-sec lua-socket Suggested packages: apache2 | lighttpd | httpd The following NEW packages will be installed: javascript-common knot-resolver knot-resolver-module-http libdnssec6 libjs-bootstrap libjs-d3 libjs-jquery libknot8 libkres8 liblmdb0 libluajit-5.1-2 libluajit-5.1-common libuv1 libzscanner2 lua-basexx lua-bit32 lua-compat53 lua-cqueues lua-fifo lua-http lua-lpeg lua-lpeg-patterns lua-luaossl lua-mmdb lua-sec lua-socket 0 upgraded, 26 newly installed, 0 to remove and 75 not upgraded. Need to get 1883 kB of archives. After this operation, 7244 kB of additional disk space will be used. Do you want to continue? [Y/n] Get:1 http://download.opensuse.org/repositories/home:/CZ-NIC:/knot-resolver-latest/Debian_9.0 libdnssec6 2.7.2-1 [34.9 kB] Get:2 http://ports.ubuntu.com/ubuntu-ports bionic/main armhf javascript-common all 11 [6066 B] Get:3 http://ports.ubuntu.com/ubuntu-ports bionic/universe armhf liblmdb0 armhf 0.9.21-1 [37.4 kB] Get:4 http://ports.ubuntu.com/ubuntu-ports bionic/main armhf libuv1 armhf 1.18.0-3 [53.5 kB] Get:5 http://download.opensuse.org/repositories/home:/CZ-NIC:/knot-resolver-latest/Debian_9.0 libknot8 2.7.2-1 [72.6 kB] Get:6 http://ports.ubuntu.com/ubuntu-ports bionic/universe armhf lua-socket armhf 3.0beta3+dfsg-5.1 [44.3 kB] Get:9 http://download.opensuse.org/repositories/home:/CZ-NIC:/knot-resolver-latest/Debian_9.0 libkres8 3.0.0-1 [88.0 kB] Get:10 http://download.opensuse.org/repositories/home:/CZ-NIC:/knot-resolver-latest/Debian_9.0 libzscanner2 2.7.2-1 [124 kB] Get:11 http://ports.ubuntu.com/ubuntu-ports bionic/universe armhf libluajit-5.1-2 armhf 2.1.0beta3+dfsg-5.1 [189 kB] Get:12 http://ports.ubuntu.com/ubuntu-ports bionic/universe armhf libjs-bootstrap all 3.3.7+dfsg-2 [228 kB] Get:13 http://download.opensuse.org/repositories/home:/CZ-NIC:/knot-resolver-latest/Debian_9.0 knot-resolver 3.0.0-1 [142 kB] Get:14 http://download.opensuse.org/repositories/home:/CZ-NIC:/knot-resolver-latest/Debian_9.0 knot-resolver-module-http 3.0.0-1 [139 kB] Get:15 http://ports.ubuntu.com/ubuntu-ports bionic/universe armhf libjs-d3 all 3.5.17-2 [131 kB] Get:16 http://ports.ubuntu.com/ubuntu-ports bionic/main armhf libjs-jquery all 3.2.1-1 [152 kB] Get:17 http://ports.ubuntu.com/ubuntu-ports bionic/universe armhf lua-basexx all 0.3-2 [3916 B] Get:18 http://ports.ubuntu.com/ubuntu-ports bionic/universe armhf lua-bit32 armhf 5.3.0-3 [8408 B] Get:19 http://ports.ubuntu.com/ubuntu-ports bionic/universe armhf lua-compat53 armhf 0.3-3 [34.7 kB] Get:20 http://ports.ubuntu.com/ubuntu-ports bionic/universe armhf lua-cqueues armhf 20161214-2build1 [145 kB] Get:21 http://ports.ubuntu.com/ubuntu-ports bionic/universe armhf lua-fifo all 0.2-3 [4544 B] Get:22 http://ports.ubuntu.com/ubuntu-ports bionic/universe armhf lua-lpeg armhf 1.0.0-2 [24.6 kB] Get:23 http://ports.ubuntu.com/ubuntu-ports bionic/universe armhf lua-lpeg-patterns all 0.4-1 [16.6 kB] Get:24 http://ports.ubuntu.com/ubuntu-ports bionic/universe armhf lua-luaossl armhf 20161214-1build1 [60.6 kB] Get:25 http://ports.ubuntu.com/ubuntu-ports bionic/universe armhf lua-http all 0.1-3 [54.9 kB] Get:26 http://ports.ubuntu.com/ubuntu-ports bionic/universe armhf lua-mmdb all 0.1-1 [6634 B] Fetched 1883 kB in 2s (804 kB/s)
perl: warning: Setting locale failed. perl: warning: Please check that your locale settings: LANGUAGE = (unset), LC_ALL = (unset), LC_CTYPE = "UTF-8", LANG = (unset) are supported and installed on your system. perl: warning: Falling back to the standard locale ("C"). locale: Cannot set LC_CTYPE to default locale: No such file or directory locale: Cannot set LC_ALL to default locale: No such file or directory Selecting previously unselected package javascript-common. (Reading database ... 55293 files and directories currently installed.) Preparing to unpack .../00-javascript-common_11_all.deb ... Unpacking javascript-common (11) ... Selecting previously unselected package libdnssec6:armhf. Preparing to unpack .../01-libdnssec6_2.7.2-1_armhf.deb ... Unpacking libdnssec6:armhf (2.7.2-1) ... Selecting previously unselected package liblmdb0:armhf. Preparing to unpack .../02-liblmdb0_0.9.21-1_armhf.deb ... Unpacking liblmdb0:armhf (0.9.21-1) ... Selecting previously unselected package libknot8:armhf. Preparing to unpack .../03-libknot8_2.7.2-1_armhf.deb ... Unpacking libknot8:armhf (2.7.2-1) ... Selecting previously unselected package libuv1:armhf. Preparing to unpack .../04-libuv1_1.18.0-3_armhf.deb ... Unpacking libuv1:armhf (1.18.0-3) ... Selecting previously unselected package libkres8. Preparing to unpack .../05-libkres8_3.0.0-1_armhf.deb ... Unpacking libkres8 (3.0.0-1) ... Selecting previously unselected package lua-socket:armhf. Preparing to unpack .../06-lua-socket_3.0rc1+git+ac3201d-4_armhf.deb ... Unpacking lua-socket:armhf (3.0rc1+git+ac3201d-4) ... Selecting previously unselected package lua-sec:armhf. Preparing to unpack .../07-lua-sec_0.6-4_armhf.deb ... Unpacking lua-sec:armhf (0.6-4) ... Selecting previously unselected package libluajit-5.1-common. Preparing to unpack .../08-libluajit-5.1-common_2.1.0beta3+dfsg-5.1_all.deb ... Unpacking libluajit-5.1-common (2.1.0beta3+dfsg-5.1) ... Selecting previously unselected package libluajit-5.1-2:armhf. Preparing to unpack .../09-libluajit-5.1-2_2.1.0beta3+dfsg-5.1_armhf.deb ... Unpacking libluajit-5.1-2:armhf (2.1.0beta3+dfsg-5.1) ... Selecting previously unselected package libzscanner2:armhf. Preparing to unpack .../10-libzscanner2_2.7.2-1_armhf.deb ... Unpacking libzscanner2:armhf (2.7.2-1) ... Selecting previously unselected package knot-resolver. Preparing to unpack .../11-knot-resolver_3.0.0-1_armhf.deb ... Unpacking knot-resolver (3.0.0-1) ... Selecting previously unselected package libjs-bootstrap. Preparing to unpack .../12-libjs-bootstrap_3.3.7+dfsg-2_all.deb ... Unpacking libjs-bootstrap (3.3.7+dfsg-2) ... Selecting previously unselected package libjs-d3. Preparing to unpack .../13-libjs-d3_3.5.17-2_all.deb ... Unpacking libjs-d3 (3.5.17-2) ... Selecting previously unselected package libjs-jquery. Preparing to unpack .../14-libjs-jquery_3.2.1-1_all.deb ... Unpacking libjs-jquery (3.2.1-1) ... Selecting previously unselected package lua-basexx. Preparing to unpack .../15-lua-basexx_0.3-2_all.deb ... Unpacking lua-basexx (0.3-2) ... Selecting previously unselected package lua-bit32:armhf. Preparing to unpack .../16-lua-bit32_5.3.0-3_armhf.deb ... Unpacking lua-bit32:armhf (5.3.0-3) ... Selecting previously unselected package lua-compat53:armhf. Preparing to unpack .../17-lua-compat53_0.3-3_armhf.deb ... Unpacking lua-compat53:armhf (0.3-3) ... Selecting previously unselected package lua-cqueues:armhf. Preparing to unpack .../18-lua-cqueues_20161214-2build1_armhf.deb ... Unpacking lua-cqueues:armhf (20161214-2build1) ... Selecting previously unselected package lua-fifo. Preparing to unpack .../19-lua-fifo_0.2-3_all.deb ... Unpacking lua-fifo (0.2-3) ... Selecting previously unselected package lua-lpeg:armhf. Preparing to unpack .../20-lua-lpeg_1.0.0-2_armhf.deb ... Unpacking lua-lpeg:armhf (1.0.0-2) ... Selecting previously unselected package lua-lpeg-patterns. Preparing to unpack .../21-lua-lpeg-patterns_0.4-1_all.deb ... Unpacking lua-lpeg-patterns (0.4-1) ... Selecting previously unselected package lua-luaossl:armhf. Preparing to unpack .../22-lua-luaossl_20161214-1build1_armhf.deb ... Unpacking lua-luaossl:armhf (20161214-1build1) ... Selecting previously unselected package lua-http. Preparing to unpack .../23-lua-http_0.1-3_all.deb ... Unpacking lua-http (0.1-3) ... Selecting previously unselected package lua-mmdb. Preparing to unpack .../24-lua-mmdb_0.1-1_all.deb ... Unpacking lua-mmdb (0.1-1) ... Selecting previously unselected package knot-resolver-module-http. Preparing to unpack .../25-knot-resolver-module-http_3.0.0-1_all.deb ... Unpacking knot-resolver-module-http (3.0.0-1) ... Setting up libjs-jquery (3.2.1-1) ... Setting up lua-socket:armhf (3.0rc1+git+ac3201d-4) ... Setting up lua-luaossl:armhf (20161214-1build1) ... Setting up libluajit-5.1-common (2.1.0beta3+dfsg-5.1) ... Setting up liblmdb0:armhf (0.9.21-1) ... Setting up libuv1:armhf (1.18.0-3) ... Setting up lua-sec:armhf (0.6-4) ... Setting up lua-cqueues:armhf (20161214-2build1) ... Setting up lua-bit32:armhf (5.3.0-3) ... Setting up libjs-d3 (3.5.17-2) ... Setting up lua-basexx (0.3-2) ... Setting up libzscanner2:armhf (2.7.2-1) ... Processing triggers for libc-bin (2.27-3ubuntu1) ... Setting up lua-fifo (0.2-3) ... Setting up lua-compat53:armhf (0.3-3) ... Setting up libdnssec6:armhf (2.7.2-1) ... Setting up lua-mmdb (0.1-1) ... Processing triggers for systemd (237-3ubuntu10) ... Setting up libluajit-5.1-2:armhf (2.1.0~beta3+dfsg-5.1) ... Setting up libknot8:armhf (2.7.2-1) ... Processing triggers for man-db (2.8.3-2) ... Setting up libjs-bootstrap (3.3.7+dfsg-2) ... Setting up javascript-common (11) ... Setting up lua-lpeg:armhf (1.0.0-2) ... Setting up libkres8 (3.0.0-1) ... Setting up lua-lpeg-patterns (0.4-1) ... Setting up lua-http (0.1-3) ... Setting up knot-resolver-module-http (3.0.0-1) ... Setting up knot-resolver (3.0.0-1) ... Processing triggers for libc-bin (2.27-3ubuntu1) ... Processing triggers for systemd (237-3ubuntu10) ...
BTW this weekend we managed to deploy a DOH service powered by Knot Resolver.
We went with kresd v2.1.1 from the Ubuntu 18.04 official repo for our Odroid HC1 (armv7l) and Linode VPS (x86_64) network. It works great! Would love to be able to upgrade to the official v3+ packages. Little to no traffic, of course, since we are just getting started.
Edited by Sebastiaan Deckers-
I've turned on the armv7l package builds for Ubuntu as well.
The testing procedure for distribution packages is basically the following:
- install package from our repo
- start
kresd@1.service - attempt to resolve a domain name
- make a couple queries to verify DNSSEC validation is working and turned on
It is automated using Ansible, and to test all distros, we use virtualization (vagrant + libvirt). Some description and related code can be found in distro/tests.
With this workflow, I can test x86_64 packages for all supported distros in about 5-10 minutes on my laptop before release. If I could use the same workflow for ARM, I could test these as well.
However, I'm not sure whether virtualization and vagrant boxes would work on ARM the same way. It would also require hardware that's powerful enough to run VMs, ideally in parallel.
Edited by Tomas Krizek Nice! This is similar to our Ansible role for Knot Resolver v2.1.1.
I will look into virtualisation. One issue is that these are typically low memory boards (1-4 GB).
If you are using GitLab CI, we could try Docker and Gitlab Runner. To make it run in parallel we could set up multiple boards in a cluster.
@sebdeckers Beware that 2.y versions are not supported anymore and contain known security bugs. You really should not be using them in anything, especially if it is public facing.
Thanks for the heads-up. I will update to these Knot Resolver v3.0.0 / Ubuntu 18.04 packages ASAP.
FYI there might be an issue with the OpenSUSE download server. Not sure if it is a temporary glitch. The host does not accept HTTPS connections.
curl -v -L https://download.opensuse.org/repositories/home:CZ-NIC:knot-resolver-latest/xUbuntu_18.04_Ports/Release.key * Trying 195.135.221.134... * TCP_NODELAY set * Connected to download.opensuse.org (195.135.221.134) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH * successfully set certificate verify locations: * CAfile: /etc/ssl/cert.pem CApath: none * TLSv1.2 (OUT), TLS handshake, Client hello (1): * error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol * stopped the pause stream! * Closing connection 0 curl: (35) error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol
It works via HTTP, albeit with several pathname and hostname redirects, but unencrypted HTTP is not a safe way to download repo certificates.
curl -v -L http://download.opensuse.org/repositories/home:CZ-NIC:knot-resolver-latest/xUbuntu_18.04_Ports/Release.key * Trying 195.135.221.134... * TCP_NODELAY set * Connected to download.opensuse.org (195.135.221.134) port 80 (#0) > GET /repositories/home:CZ-NIC:knot-resolver-latest/xUbuntu_18.04_Ports/Release.key HTTP/1.1 > Host: download.opensuse.org > User-Agent: curl/7.54.0 > Accept: */* > < HTTP/1.1 302 Found < Date: Wed, 03 Oct 2018 01:33:42 GMT < Server: Apache/2.4.23 (Linux/SUSE) < Location: http://provo-mirror.opensuse.org/repositories/home:CZ-NIC:knot-resolver-latest/xUbuntu_18.04_Ports/Release.key < Content-Length: 385 < Content-Type: text/html; charset=iso-8859-1 < * Ignoring the response-body * Connection #0 to host download.opensuse.org left intact * Issue another request to this URL: 'http://provo-mirror.opensuse.org/repositories/home:CZ-NIC:knot-resolver-latest/xUbuntu_18.04_Ports/Release.key' * Trying 130.57.72.10... * TCP_NODELAY set * Connected to provo-mirror.opensuse.org (130.57.72.10) port 80 (#1) > GET /repositories/home:CZ-NIC:knot-resolver-latest/xUbuntu_18.04_Ports/Release.key HTTP/1.1 > Host: provo-mirror.opensuse.org > User-Agent: curl/7.54.0 > Accept: */* > < HTTP/1.1 301 Moved Permanently < Date: Wed, 03 Oct 2018 01:33:42 GMT < Server: Apache/2.4.23 (Linux/SUSE) < Location: http://download.opensuse.org/repositories/home:CZ-NIC:/knot-resolver-latest/xUbuntu_18.04_Ports/Release.key < Content-Length: 410 < Content-Type: text/html; charset=iso-8859-1 < * Ignoring the response-body * Connection #1 to host provo-mirror.opensuse.org left intact * Issue another request to this URL: 'http://download.opensuse.org/repositories/home:CZ-NIC:/knot-resolver-latest/xUbuntu_18.04_Ports/Release.key' * Found bundle for host download.opensuse.org: 0x7fc2d951f860 [can pipeline] * Re-using existing connection! (#0) with host download.opensuse.org * Connected to download.opensuse.org (195.135.221.134) port 80 (#0) > GET /repositories/home:CZ-NIC:/knot-resolver-latest/xUbuntu_18.04_Ports/Release.key HTTP/1.1 > Host: download.opensuse.org > User-Agent: curl/7.54.0 > Accept: */* > < HTTP/1.1 302 Found < Date: Wed, 03 Oct 2018 01:33:42 GMT < Server: Apache/2.4.23 (Linux/SUSE) < Location: http://provo-mirror.opensuse.org/repositories/home:CZ-NIC:/knot-resolver-latest/xUbuntu_18.04_Ports/Release.key < Content-Length: 386 < Content-Type: text/html; charset=iso-8859-1 < * Ignoring the response-body * Connection #0 to host download.opensuse.org left intact * Issue another request to this URL: 'http://provo-mirror.opensuse.org/repositories/home:CZ-NIC:/knot-resolver-latest/xUbuntu_18.04_Ports/Release.key' * Found bundle for host provo-mirror.opensuse.org: 0x7fc2d97000b0 [can pipeline] * Re-using existing connection! (#1) with host provo-mirror.opensuse.org * Connected to provo-mirror.opensuse.org (130.57.72.10) port 80 (#1) > GET /repositories/home:CZ-NIC:/knot-resolver-latest/xUbuntu_18.04_Ports/Release.key HTTP/1.1 > Host: provo-mirror.opensuse.org > User-Agent: curl/7.54.0 > Accept: */* > < HTTP/1.1 301 Moved Permanently < Date: Wed, 03 Oct 2018 01:33:43 GMT < Server: Apache/2.4.23 (Linux/SUSE) < Location: http://download.opensuse.org/repositories/home:/CZ-NIC:/knot-resolver-latest/xUbuntu_18.04_Ports/Release.key < Content-Length: 411 < Content-Type: text/html; charset=iso-8859-1 < * Ignoring the response-body * Connection #1 to host provo-mirror.opensuse.org left intact * Issue another request to this URL: 'http://download.opensuse.org/repositories/home:/CZ-NIC:/knot-resolver-latest/xUbuntu_18.04_Ports/Release.key' * Found bundle for host download.opensuse.org: 0x7fc2d951f860 [can pipeline] * Re-using existing connection! (#0) with host download.opensuse.org * Connected to download.opensuse.org (195.135.221.134) port 80 (#0) > GET /repositories/home:/CZ-NIC:/knot-resolver-latest/xUbuntu_18.04_Ports/Release.key HTTP/1.1 > Host: download.opensuse.org > User-Agent: curl/7.54.0 > Accept: */* > < HTTP/1.1 302 Found < Date: Wed, 03 Oct 2018 01:33:43 GMT < Server: Apache/2.4.23 (Linux/SUSE) < Location: http://provo-mirror.opensuse.org/repositories/home:/CZ-NIC:/knot-resolver-latest/xUbuntu_18.04_Ports/Release.key < Content-Length: 387 < Content-Type: text/html; charset=iso-8859-1 < * Ignoring the response-body * Connection #0 to host download.opensuse.org left intact * Issue another request to this URL: 'http://provo-mirror.opensuse.org/repositories/home:/CZ-NIC:/knot-resolver-latest/xUbuntu_18.04_Ports/Release.key' * Found bundle for host provo-mirror.opensuse.org: 0x7fc2d97000b0 [can pipeline] * Re-using existing connection! (#1) with host provo-mirror.opensuse.org * Connected to provo-mirror.opensuse.org (130.57.72.10) port 80 (#1) > GET /repositories/home:/CZ-NIC:/knot-resolver-latest/xUbuntu_18.04_Ports/Release.key HTTP/1.1 > Host: provo-mirror.opensuse.org > User-Agent: curl/7.54.0 > Accept: */* > < HTTP/1.1 200 OK < Date: Wed, 03 Oct 2018 01:33:43 GMT < Server: Apache/2.4.23 (Linux/SUSE) < X-Prefix: 66.96.218.0/24 < X-AS: 56300 < Last-Modified: Tue, 02 Oct 2018 10:43:17 GMT < ETag: "446-5773c96edd6d7" < Accept-Ranges: bytes < Content-Length: 1094 < -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v2.0.15 (GNU/Linux)
mQENBFqFjysBCADWVYuSgTuduZNAUpq4w+X9EnBwDMibkJCZuNvjvwXNaFeWKOHf YEwcSFETOazApzjLxBj/eDTHtl0w0wvJUWsbTOEdJjue1X05X3nxQIiyXXIqjtzY OmMyJa2Y9zUWwdAj+miI81EaWN0aDSoa4LG+9cqlYIOO4jZnAQ3uVvCRypB9Lx6r 2HGTSWaw77l3CHTPD0YVLbv90a5ChNsb3JMpiPhhK8F3pQxu8CfTz/0npEHxbRlK xWNIr773bhDonnGsapGPfrdy5afb/AxCiUuflKCrG0qg1l8M5OT4LxnnB8sqTXwH EFwHaWkwhiBG2hRG/Jco3k4sytnwr82VFKD1ABEBAAG0OGhvbWU6Q1otTklDIE9C UyBQcm9qZWN0IDxob21lOkNaLU5JQ0BidWlsZC5vcGVuc3VzZS5vcmc+iQE+BBMB CAAoBQJahY8rAhsDBQkEHrAABgsJCAcDAgYVCAIJCgsEFgIDAQIeAQIXgAAKCRB0 Bi2zah9ACWtKB/9CB5Ms/zC1kbYP6I7FrDi0KzfekQ/SrXq4acf/UrJwguVGniFs f/SevD7Knyvg9MBrVXguzE14oOpahJe0jHnDQCFe6S6mT7VybtylOUECx2f3zd2S MYQ96kzNQiP1yfaWi/bOi+ykpVZC7GYL9rMW2uzKisZSB64KT7Efd+0FQf57np0I ZnW54m62Oaf1ltX6Y0VNLhz8jOM4xK1EqxwMncj1/a+yB0+a8w1j8gR2yluQTfdG 9QsUNU4VT86he5aYivVTJnY0XgqZYvXrqM0D0YfabjyGosc1zrnWwO5wVrGhcVYM obTkcAN+C2nm01R2ip2bjJ8fz8nYvYzNGkpniEYEExECAAYFAlqFjywACgkQOzAR t2udZSNgVACgiu9vroIHHXRMIx/w8JJrNEq/LaoAn2UVyQrPbspOV6mlToaKEa3r YheD =IUCb -----END PGP PUBLIC KEY BLOCK-----
- Connection #1 (closed) to host provo-mirror.opensuse.org left intact
It seems like that final redirect location is available over HTTPS. Think I will use that instead for now.
curl -v -L https://provo-mirror.opensuse.org/repositories/home:/CZ-NIC:/knot-resolver-latest/xUbuntu_18.04_Ports/Release.key * Trying 130.57.72.10... * TCP_NODELAY set * Connected to provo-mirror.opensuse.org (130.57.72.10) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH * successfully set certificate verify locations: * CAfile: /etc/ssl/cert.pem CApath: none * TLSv1.2 (OUT), TLS handshake, Client hello (1): * TLSv1.2 (IN), TLS handshake, Server hello (2): * TLSv1.2 (IN), TLS handshake, Certificate (11): * TLSv1.2 (IN), TLS handshake, Server key exchange (12): * TLSv1.2 (IN), TLS handshake, Server finished (14): * TLSv1.2 (OUT), TLS handshake, Client key exchange (16): * TLSv1.2 (OUT), TLS change cipher, Client hello (1): * TLSv1.2 (OUT), TLS handshake, Finished (20): * TLSv1.2 (IN), TLS change cipher, Client hello (1): * TLSv1.2 (IN), TLS handshake, Finished (20): * SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384 * ALPN, server accepted to use http/1.1 * Server certificate: * subject: CN=opensuse.org * start date: Sep 5 14:53:34 2018 GMT * expire date: Dec 4 14:53:34 2018 GMT * subjectAltName: host "provo-mirror.opensuse.org" matched cert's "*.opensuse.org" * issuer: C=US; O=Let's Encrypt; CN=Let's Encrypt Authority X3 * SSL certificate verify ok. > GET /repositories/home:/CZ-NIC:/knot-resolver-latest/xUbuntu_18.04_Ports/Release.key HTTP/1.1 > Host: provo-mirror.opensuse.org > User-Agent: curl/7.54.0 > Accept: */* > < HTTP/1.1 200 OK < Date: Wed, 03 Oct 2018 01:43:55 GMT < Server: Apache/2.4.23 (Linux/SUSE) < X-Prefix: 66.96.218.0/24 < X-AS: 56300 < Last-Modified: Tue, 02 Oct 2018 10:43:17 GMT < ETag: "446-5773c96edd6d7" < Accept-Ranges: bytes < Content-Length: 1094 < -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v2.0.15 (GNU/Linux)
mQENBFqFjysBCADWVYuSgTuduZNAUpq4w+X9EnBwDMibkJCZuNvjvwXNaFeWKOHf YEwcSFETOazApzjLxBj/eDTHtl0w0wvJUWsbTOEdJjue1X05X3nxQIiyXXIqjtzY OmMyJa2Y9zUWwdAj+miI81EaWN0aDSoa4LG+9cqlYIOO4jZnAQ3uVvCRypB9Lx6r 2HGTSWaw77l3CHTPD0YVLbv90a5ChNsb3JMpiPhhK8F3pQxu8CfTz/0npEHxbRlK xWNIr773bhDonnGsapGPfrdy5afb/AxCiUuflKCrG0qg1l8M5OT4LxnnB8sqTXwH EFwHaWkwhiBG2hRG/Jco3k4sytnwr82VFKD1ABEBAAG0OGhvbWU6Q1otTklDIE9C UyBQcm9qZWN0IDxob21lOkNaLU5JQ0BidWlsZC5vcGVuc3VzZS5vcmc+iQE+BBMB CAAoBQJahY8rAhsDBQkEHrAABgsJCAcDAgYVCAIJCgsEFgIDAQIeAQIXgAAKCRB0 Bi2zah9ACWtKB/9CB5Ms/zC1kbYP6I7FrDi0KzfekQ/SrXq4acf/UrJwguVGniFs f/SevD7Knyvg9MBrVXguzE14oOpahJe0jHnDQCFe6S6mT7VybtylOUECx2f3zd2S MYQ96kzNQiP1yfaWi/bOi+ykpVZC7GYL9rMW2uzKisZSB64KT7Efd+0FQf57np0I ZnW54m62Oaf1ltX6Y0VNLhz8jOM4xK1EqxwMncj1/a+yB0+a8w1j8gR2yluQTfdG 9QsUNU4VT86he5aYivVTJnY0XgqZYvXrqM0D0YfabjyGosc1zrnWwO5wVrGhcVYM obTkcAN+C2nm01R2ip2bjJ8fz8nYvYzNGkpniEYEExECAAYFAlqFjywACgkQOzAR t2udZSNgVACgiu9vroIHHXRMIx/w8JJrNEq/LaoAn2UVyQrPbspOV6mlToaKEa3r YheD =IUCb -----END PGP PUBLIC KEY BLOCK-----
- Connection #0 to host provo-mirror.opensuse.org left intact
Edit: Apparently there is an ongoing partial outage. Will check back later.
Edited by Sebastiaan DeckersClosing since the packages are now available. Much appreciated!
Deployed v3 packages: https://gitlab.com/commonshost/ansible/merge_requests/39
