main/dns-root-hints: new aport

Based on tcely commit but it is reproducible

https://github.com/alpinelinux/aports/pull/5950

4 files changed, 228 insertions, 0 deletions

diff --git a/main/dns-root-hints/APKBUILD b/main/dns-root-hints/APKBUILD
new file mode 100644
index 0000000000..104742480c
--- /dev/null
+++ b/main/dns-root-hints/APKBUILD
@@ -0,0 +1,86 @@
+# Contributor: Leonardo Arena <rnalrd@alpinelinux.org>
+# Contributor: tcely <dnshints-root+aports@tcely.33mail.com>
+# Maintainer: tcely <dnshints-root+aports@tcely.33mail.com>
+pkgname=dns-root-hints
+pkgver=2019031302
+pkgrel=0
+pkgdesc="The DNS root hint(s)"
+url="https://www.internic.net/domain"
+arch="noarch"
+license="Public-Domain"
+makedepends="curl gnupg"
+options="net"
+source="verisign-grs-nstld-key.asc named.root named.root.sig"
+builddir="$srcdir/$pkgname-$pkgver"
+
+build() {
+	mkdir -p "$builddir"
+}
+
+package() {
+	cd "$builddir"
+	install -D -m 644 -o root -g root "$srcdir"/named.root \
+		"$pkgdir"/usr/share/$pkgname/named.root
+	install -D -m 644 -o root -g root "$srcdir"/named.root.sig \
+		"$pkgdir"/usr/share/$pkgname/named.root.sig
+	install -D -m 644 -o root -g root "$srcdir"/verisign-grs-nstld-key.asc \
+		"$pkgdir"/usr/share/$pkgname/verisign-grs-nstld-key.asc
+
+	# compatibility links
+	cd "$pkgdir/usr/share/$pkgname"
+	ln -s named.root named.cache
+	ln -s named.root db.cache
+}
+
+check() {
+	cd "$builddir"
+	local _awkprog='
+		/related version of root zone:/ {
+			rootver=$NF;
+			if (pkgver != rootver) {
+				$1="ERROR:";
+				print;
+				exit 1;
+			};
+			printf "OK: %s\n", rootver;
+			quit;
+		}'
+	awk -v pkgver="$pkgver" "$_awkprog" "$srcdir"/named.root
+}
+
+# check new versions of root hints and commit
+snapshot() {
+	# use a temporary dir for new files
+	export _tmp=$(mktemp -d -p .)
+	for file in named.root named.root.sig; do
+		curl -sLR "${url}/${file}" -o "${_tmp}/${file}"
+	done
+
+	# compare new and current versions
+	local _drh_new_ver=$(grep "related version of root zone:" ${_tmp}/named.root | egrep -o '[0-9]{10}')
+	local _drh_current_ver=$(grep "related version of root zone:" named.root | egrep -o '[0-9]{10}')
+
+	# commit if new version is found
+	if [ "$_drh_new_ver" != "$_drh_current_ver" ]; then
+		check_sig
+		mv ${_tmp}/named.root named.root
+		mv ${_tmp}/named.root.sig named.root.sig
+		git add named.root named.root.sig
+		abump $pkgname-$_drh_new_ver
+	fi
+
+	# cleanup
+	rm "${_tmp}"/* || true
+	rmdir "${_tmp}"
+}
+
+check_sig() {
+	local GNUPGHOME="$builddir/.gpg"
+	install -d -m 0700 "$GNUPGHOME"
+	gpg --import < verisign-grs-nstld-key.asc
+	gpg --verify "${_tmp}/named.root.sig" "${_tmp}/named.root"
+}
+
+sha512sums="3ecf5d66e506526ad98ea0b371202f0763b987322bd4407b40fcd95415202bddb18fd06c82eb397566b393e214dc88cb17ec94f3908328e8a55f5f68cc730993  verisign-grs-nstld-key.asc
+ad14d7b6c6c52ebdd6c21448aa79d0560701df3b92576fab7ed1611314a5279e317dcfbcb05f2f2cb9d9b0a8932f56e6a03c7a52709fc75929d568267aa64f8b  named.root
+774ac61ee930611a1876447c981e20f0340ad25c49703b2d068164a681c3d5bac8f5c8f6fc0a4ba98e04d9aa4b922d4ea8936029cf2336b94e7cd6588ee6ba69  named.root.sig"
diff --git a/main/dns-root-hints/named.root b/main/dns-root-hints/named.root
new file mode 100644
index 0000000000..52a6077d0e
--- /dev/null
+++ b/main/dns-root-hints/named.root
@@ -0,0 +1,92 @@
+;       This file holds the information on root name servers needed to 
+;       initialize cache of Internet domain name servers
+;       (e.g. reference this file in the "cache  .  <file>"
+;       configuration file of BIND domain name servers). 
+; 
+;       This file is made available by InterNIC 
+;       under anonymous FTP as
+;           file                /domain/named.cache 
+;           on server           FTP.INTERNIC.NET
+;       -OR-                    RS.INTERNIC.NET
+; 
+;       last update:     March 13, 2019 
+;       related version of root zone:     2019031302
+; 
+; FORMERLY NS.INTERNIC.NET 
+;
+.                        3600000      NS    A.ROOT-SERVERS.NET.
+A.ROOT-SERVERS.NET.      3600000      A     198.41.0.4
+A.ROOT-SERVERS.NET.      3600000      AAAA  2001:503:ba3e::2:30
+; 
+; FORMERLY NS1.ISI.EDU 
+;
+.                        3600000      NS    B.ROOT-SERVERS.NET.
+B.ROOT-SERVERS.NET.      3600000      A     199.9.14.201
+B.ROOT-SERVERS.NET.      3600000      AAAA  2001:500:200::b
+; 
+; FORMERLY C.PSI.NET 
+;
+.                        3600000      NS    C.ROOT-SERVERS.NET.
+C.ROOT-SERVERS.NET.      3600000      A     192.33.4.12
+C.ROOT-SERVERS.NET.      3600000      AAAA  2001:500:2::c
+; 
+; FORMERLY TERP.UMD.EDU 
+;
+.                        3600000      NS    D.ROOT-SERVERS.NET.
+D.ROOT-SERVERS.NET.      3600000      A     199.7.91.13
+D.ROOT-SERVERS.NET.      3600000      AAAA  2001:500:2d::d
+; 
+; FORMERLY NS.NASA.GOV
+;
+.                        3600000      NS    E.ROOT-SERVERS.NET.
+E.ROOT-SERVERS.NET.      3600000      A     192.203.230.10
+E.ROOT-SERVERS.NET.      3600000      AAAA  2001:500:a8::e
+; 
+; FORMERLY NS.ISC.ORG
+;
+.                        3600000      NS    F.ROOT-SERVERS.NET.
+F.ROOT-SERVERS.NET.      3600000      A     192.5.5.241
+F.ROOT-SERVERS.NET.      3600000      AAAA  2001:500:2f::f
+; 
+; FORMERLY NS.NIC.DDN.MIL
+;
+.                        3600000      NS    G.ROOT-SERVERS.NET.
+G.ROOT-SERVERS.NET.      3600000      A     192.112.36.4
+G.ROOT-SERVERS.NET.      3600000      AAAA  2001:500:12::d0d
+; 
+; FORMERLY AOS.ARL.ARMY.MIL
+;
+.                        3600000      NS    H.ROOT-SERVERS.NET.
+H.ROOT-SERVERS.NET.      3600000      A     198.97.190.53
+H.ROOT-SERVERS.NET.      3600000      AAAA  2001:500:1::53
+; 
+; FORMERLY NIC.NORDU.NET
+;
+.                        3600000      NS    I.ROOT-SERVERS.NET.
+I.ROOT-SERVERS.NET.      3600000      A     192.36.148.17
+I.ROOT-SERVERS.NET.      3600000      AAAA  2001:7fe::53
+; 
+; OPERATED BY VERISIGN, INC.
+;
+.                        3600000      NS    J.ROOT-SERVERS.NET.
+J.ROOT-SERVERS.NET.      3600000      A     192.58.128.30
+J.ROOT-SERVERS.NET.      3600000      AAAA  2001:503:c27::2:30
+; 
+; OPERATED BY RIPE NCC
+;
+.                        3600000      NS    K.ROOT-SERVERS.NET.
+K.ROOT-SERVERS.NET.      3600000      A     193.0.14.129
+K.ROOT-SERVERS.NET.      3600000      AAAA  2001:7fd::1
+; 
+; OPERATED BY ICANN
+;
+.                        3600000      NS    L.ROOT-SERVERS.NET.
+L.ROOT-SERVERS.NET.      3600000      A     199.7.83.42
+L.ROOT-SERVERS.NET.      3600000      AAAA  2001:500:9f::42
+; 
+; OPERATED BY WIDE
+;
+.                        3600000      NS    M.ROOT-SERVERS.NET.
+M.ROOT-SERVERS.NET.      3600000      A     202.12.27.33
+M.ROOT-SERVERS.NET.      3600000      AAAA  2001:dc3::35
+; End of file
diff --git a/main/dns-root-hints/named.root.sig b/main/dns-root-hints/named.root.sig
new file mode 100644
index 0000000000..484ecc9225
--- /dev/null
+++ b/main/dns-root-hints/named.root.sig
diff --git a/main/dns-root-hints/verisign-grs-nstld-key.asc b/main/dns-root-hints/verisign-grs-nstld-key.asc
new file mode 100644
index 0000000000..01e63552b5
--- /dev/null
+++ b/main/dns-root-hints/verisign-grs-nstld-key.asc
@@ -0,0 +1,50 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+
+mQGiBFafqDIRBACHHOCeRBfQePebenPDNbMyI65Jv2v7a+hcw99EkYsdnlx7+HM2vEsmGxqP
+LGBwxwUGUtpjGH4389OtKSyjhVVM0xmXZDoisEnqPPYdfIlYK6LzbcDFus9guMK3F9X0E4or
+Ocs1f2eKnEvzujAgWgN2SdktFjRm4r/I26nQOFjc3wCg2ny2ohDoWphSw/9hFK/nxM/gChcD
+/jAAkH/9vc48ePBVQaTxIaZEBa6qu5TQK9vknPJnGrRIQAnnhL3Zlf8/FAc5LLs6r33NXJsV
+/exDiVRisE8y7wT5eoUAwQkm7GUuSx1d9u9hCrF7BHhykH7hpvRes5DviCO6E0qoCWR59TKo
+EeglqTY5DA5u5Qzhcr6VZy64iodGA/49sZnCbQP2lTa/3IwnDTGdNnsn+kaCfLqaVMEfkmfc
+2MyFVgeMxfdTJoMfFgT5p2hazhYquJOfnkg5kXkoOsPf89OwkJ8bdkRC4pB4rekMWma/IEs9
+rfqup2hHByvlqRWIsLcFnqLRzT/jrl3SRBYeI2gQqggKnw59jJmyK4KJ6rQvUmVnaXN0cnkg
+QWRtaW5pc3RyYXRvciA8bnN0bGRAdmVyaXNpZ24tZ3JzLmNvbT6IRgQQEQIABgUCVp+o7wAK
+CRCE+oaeC9BzlRPjAJ4ss9U8RRZJG6U0tG1jImDUMMx+SACeMjv4yTV9zdDuBxiz6eWHPoNU
+VI6IRgQQEQoABgUCVp/ePwAKCRByYkrnw87PnYo7AKCPuo3QsZaGOxGtmjKactjwZ5IlrQCe
+KKkWdKZqmXCM1JFoaHhyxlV13ROIXgQQEQgABgUCVrOAWQAKCRCVKN/XJ3FTDAcNAQC27GMb
+VBdU3jhbjfs+vMUTt7hHG/KBV2CoSLF5Kjc3eQEAthQpy12st4RxDTfhis1Ev91YP+oIWe2T
+wjMJ58OmhX2IZgQTEQIAJgIbAwYLCQgHAwIEFQIIAwQWAgMBAh4BAheABQJavpfDBQkFDD2R
+AAoJEJN7uGnjojjFBusAn20g/1MJTz6cAtrsuZvVbNwueNSfAJ94Cn2y2Ql6LN2H1wU+L9/6
+aUGhRIhmBBMRAgAmAhsDBgsJCAcDAgQVAggDBBYCAwECHgECF4AFAltgau0FCQiDKbsACgkQ
+k3u4aeOiOMXcogCgwMo2V3wWKeZjxsOqP0oq7gcdFIsAoNUohJ9XmL/UIzK1TQFlWUi6h28z
+iGYEExECACYFAlafqDICGwMFCQQesAAGCwkIBwMCBBUCCAMEFgIDAQIeAQIXgAAKCRCTe7hp
+46I4xdEtAJwK5pXkEXF0sphtDm3yEGV6rUbX6wCglkIUq1ILH3+uIe1/br0pA/xNZq6JARwE
+EAECAAYFAlafqogACgkQ8IFc6zzLgKQ/2wf/dd2P39GJYGupmquvzorxyGZYJgWIXsXlioFH
+gXoQEp7lU7U3nIFnEU7PzCJg+Qk+Cf52a0J8m0SgR7Vd9niulltLne8hq47xEhlZaN3sDHwo
+wI4gPrvKBlmMicFr93gepvnZC5eQ1rSFbSlrIfcRdcY081gaxieMMN74ViUY49jCCp64R/vN
+KBUgK49uCGBaMMLT0kUVUia00jRd4InnhBdi/NRh8V8ZRsVPuQJ+eqoJNDKlINFqmphDO7yW
+H/uNlpM+vXrk9lUSMH+YASpagtR8U9O5OS81prv9LnUNRqJ/fGspqfXWtxhoQDWrkz0r9GmB
+1yGyh5YHJSC/oUOekokBHAQQAQIABgUCVrNp7AAKCRBz5vqY1Tyle2EoB/49m4a5O3VwlObi
+H1oetsCdGUxfUAKTZlkx9RaMTVQCQMp6VRo+zu+D1gOva2XmS6Fy2+wFLe/blw9f8qBJDRrS
+Vcw1bJKTMtnyXoi4LG98pbJoT+Bo9trRCF80tmV9CH4jLIjh0RpW7OZsX99FADMictqObgYY
+aRgHtIrD7cuBduUjIvzNk3vD+TnKaPb+iVzjR90LNRAyiHpiOqo88ZtbwUi2PQq5Y32OoFJL
+V1cjBSc9ZdRDreGp/4OSv2tPUNgdktNGjbTSsWLP6t7JZyYvwYuJ1ig/D0vJ6G+VmChvxhJH
+JG943yYbX1z/yNxwtLGMG1JywbybpL91L5L6Gq3OiQEcBBABCAAGBQJWtT/wAAoJEGyZpGmo
+wJiNmx8IAIA3w2mEahj2PbyNtneR3T3vYiB8XVvzDbNJhYNiA3ChJD1thSr9f42fV34U6SLg
+PlQsfV8WW6bpddTMkbDGEodcHto7iDrBw9IEfcVeI8dUebhdJXe8fFqOn8t9Soud4piQe+8w
+AeUaaBDFWXv5CCBOfRB+TfuuD4MDHjFhimAck1uEeBWB27cWXsXtVwUT3apIi+odwDWd8mWq
+Udy+fvGMKLbnkgxHRZjTo//5eUdwtHoSTWjXH6UcHz2mzYPIqwlBvYWfWgj3rrd3vAHoSdvM
+O/kC7wGE8K11bBGNvQkp7llgv42W7CkATv4ZCh+CEfd1Vn3fRsye/LQrPikOH3yJARwEEAEI
+AAYFAla8qu8ACgkQSjX5vgDspw9u9Qf+JFPGeXMweL6+WiIV5ulzZPTzxwRo48LqRMMKq+1S
+JMptR2cs6nYxtn8ZVprW5D4lkJ4Q0r+k2iqBzVLXDsm+W/HCto7IkCiNcTliLfvXi2BuarBg
+jKvMWUDbLh9MdD4yKpCA6p4Xs1mLBNYgotosLCMxx8PF3z9n2Z6Gcsy/fDSnC2fvdyakiUba
++gGzByLitQi6mo1aizI4GxlmyJMa945A7ZbgmO9E4nqRD4Tf91Bqo4Rg5G0xsXiPR9N7gZZm
+3dW9FNT4iC0Q/VX24xnGcLTRSp4Pvfo2rh61sSuC/SUd1z+p/hfaVQeRj1uF9v9ciC7vHysf
++baS4uL18HMPaokBMwQQAQgAHRYhBPO2/7E8zT/qmeTUHMNBLU7yitHiBQJbx8gMAAoJEMNB
+LU7yitHiGVEH/2GYOjSIj9x56xgSkzg6HbqrjW9ZerhYGpGzOEOc7hc9/jZneYVxRpnRDjjn
+2DuVmWoyb3x71OH5hzut/EI66gYHe7OQ5kLLIxVgfPbRpw34mAz6IB5bojX+egd1O+iY7Q1J
+YEhY8HMf7+37ByO3F8DTV1FljQdPpQ1HSiTm+EL2jxaFB+vLdXqH9RGdlEIFOa0iQYGlP+/A
+/Xttcy/ReO7UnqdWLTKEu/vwjTU7ZciBDiOZmdyEzpVwmoPZ/IvhXDS9Cq07wcH/RCoro2Ab
+wNRarOMrkpKVPw5rDd3eM5QWb7qPPMgcDL69HhoWPY6Y2HtI96cDOQ/QCGZV7O2LjHo=
+=bzf2
+-----END PGP PUBLIC KEY BLOCK-----