[Opendnssec-develop] Dependencies & stock distributions

Rickard Bellgrim rickard.bellgrim at iis.se
Mon Dec 14 11:14:47 UTC 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

> Summarising: I would like to advocate a check of dependencies on common
> distributions - I for instance would be happy to report the issues I
> run
> into on RHEL. Furthermore, I'd like to propose an "external feature
> freeze", i.e. not upgrading to newer versions of dependencies unless it
> is absolutely necessary; in my opinion, there is a real risk that this
> problem will stop people from deploying OpenDNSSEC in production
> environment because of the maintenance hassle (and the cost deriving
> from that).
>
> Your thoughts are welcome.

I think we require the latest versions (or almost latest versions) of dnsruby, ldns, and botan. These are the fundamental libraries that we use in OpenDNSSEC. We have found bugs in them that were critical to fix.

You could also argue that OpenDNSSEC isn't packaged for RHEL, but when it is packaged then our dependencies also would get packaged. For now, we could add some more install notes for each OS on http://trac.opendnssec.org/wiki/Signer/Using/Installation/Dependencies

.SE are running on Ubuntu 8.0.4, so we need to maintain our own package repository to lower the workload on the system administrators. And that is what you have to do in order to run new software on an old OS.

// Rickard

-----BEGIN PGP SIGNATURE-----
Version: 9.8.3 (Build 4028)
Charset: utf-8

wsBVAwUBSyYeJ+CjgaNTdVjaAQjsAAgApAT2SY+PlyOA+aqcWGUZieogB//o7dNr
95BUxWXjodfk4DPdLHF++zqFwVup2UpQM1jLLEd6RNlVnkufbBGr0zN9XXyrhHir
ruLI5wOT/SqqnARHw9ucNIGvRlBgxC4F4hIYDrr4rStT8ntLTEIXQxN1Yn7yklxV
vubVWg0gbq5IzdMQc3LkShDWyBJ/nYZpwIt+SLxtFkAqwQb6QtX7HGOX7dJVczRQ
PEzJMIA+D4gGyXwNjxOkEhgo9Cpzk73b81NszjH44rqmy90ijkePDV2BeEGESW0V
X33Y3s5pkKGlkuDuTuulahi/G36LnVkBMFHmaY2HTPDuqjDU5PmyYg==
=TYk/
-----END PGP SIGNATURE-----


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opendnssec.org/pipermail/opendnssec-develop/attachments/20091214/02c5965e/attachment.htm>


More information about the Opendnssec-develop mailing list