build/pkg/unbound/build

VERSION="1.9.0"
SRCDIR="unbound-${VERSION}"
TARBALL="${SRCDIR}.tar.gz"
URL="https://www.unbound.net/downloads"
SHA256SUM="415af94b8392bc6b2c52e44ac8f17935cc6ddf2cc81edfb47c5be4ad205ab917"
DEPENDS="openssl-dev expat-dev libbsd-dev toolchain"
SUBPKG="unbound libunbound libunbound-dev"

prepare() {
	return
}

build() {
	run_configure "$1" --with-pidfile=/run/unbound.pid \
		     --with-libexpat="$TCDIR/$TARGET" \
		     --with-ssl="$TCDIR/$TARGET"

	make -j $NUMJOBS
}

deploy() {
	local tag alg type digest

	make DESTDIR="$PKGDEPLOYDIR" install
	cp $SCRIPTDIR/pkg/$PKGNAME/*.{files,desc} "$PKGDEPLOYDIR"

	cat_file_override "unbound.conf" > "$PKGDEPLOYDIR/etc/unbound/unbound.conf"

	echo "generating trust anchor root.key"

	curl --silent -L https://data.iana.org/root-anchors/root-anchors.xml |\
	sed ':a;N;$!ba;s/\n//g' |\
	grep -o -P -e "<KeyDigest.*?</KeyDigest>" |\
	while read line; do
		tag=$(echo $line | grep -o -e "<KeyTag>[0-9]*</" | grep -o -w "[0-9]*")
		alg=$(echo $line | grep -o -e "<Algorithm>[0-9]*</" | grep -o -w "[0-9]*")
		type=$(echo $line | grep -o -e "<DigestType>[0-9]*</" | grep -o -w "[0-9]*")
		digest=$(echo $line | grep -o -e "<Digest>[A-F0-9]*</" | grep -o -w "[A-F0-9]*")

		echo ". IN DS $tag $alg $type $digest" >> "$PKGDEPLOYDIR/etc/unbound/root.key"
	done
}

check_update() {
	check_update_simple "$URL" "unbound-" "tar.gz"
}