| | 1 | ### -*-makefile-*- |
| | 2 | ### |
| | 3 | ### Makefile for the DNS zones I maintain. |
| | 4 | ### |
| | 5 | ### (c) 2011 Mark Wooding |
| | 6 | |
| | 7 | ###-------------------------------------------------------------------------- |
| | 8 | ### Silent-rules machinery. |
| | 9 | |
| | 10 | V = 0 |
| | 11 | v_tag = $(call v_tag_$V,$1) |
| | 12 | v_tag_0 = @printf " %-6s %s\n" "$1" "$@"; |
| | 13 | |
| | 14 | V_AT = $(V_AT_$V) |
| | 15 | V_AT_0 = @ |
| | 16 | |
| | 17 | ###-------------------------------------------------------------------------- |
| | 18 | ### Programs and options. |
| | 19 | |
| | 20 | ## Zone checking. |
| | 21 | CHECKZONE = named-checkzone -i full \ |
| | 22 | -k fail -M fail -n fail -S fail -W fail |
| | 23 | |
| | 24 | ## Zone installation. |
| | 25 | MASTER = localhost |
| | 26 | inside_MASTER = precision |
| | 27 | |
| | 28 | ifeq ($(MASTER),localhost) |
| | 29 | ZONEINST = userv zoneconf install |
| | 30 | else |
| | 31 | ZONEINST = ssh zoneconf@$(MASTER) |
| | 32 | endif |
| | 33 | |
| | 34 | ###-------------------------------------------------------------------------- |
| | 35 | ### Utility functions. |
| | 36 | |
| | 37 | dir-nosl = $(patsubst %/,%,$(dir $1)) |
| | 38 | |
| | 39 | ###-------------------------------------------------------------------------- |
| | 40 | ### Keeping all of the files straight. |
| | 41 | |
| | 42 | ## Establish a default target. We'll sort out what it does later. |
| | 43 | all: |
| | 44 | .PHONY: all |
| | 45 | |
| | 46 | ## Things to clean. |
| | 47 | CLEANFILES = |
| | 48 | CLEANDIRS = |
| | 49 | REALCLEANFILES = $(CLEANFILES) |
| | 50 | REALCLEANDIRS = $(CLEANDIRS) |
| | 51 | |
| | 52 | ## We work in terms of `zonesets'. Each one corresponds to a Lisp source |
| | 53 | ## file to be passed to `zone'. A zoneset has a number of different nets |
| | 54 | ## associated with it, in the variable zoneset_NETS, and we must run it |
| | 55 | ## through `zone' once for each net. The zoneset will make a number of |
| | 56 | ## zones, listed in zoneset_ZONES. |
| | 57 | ZONESETS = |
| | 58 | |
| | 59 | ###-------------------------------------------------------------------------- |
| | 60 | ### The distorted.org.uk zones. |
| | 61 | |
| | 62 | ZONESETS += distorted |
| | 63 | |
| | 64 | distorted_VIEWS = inside outside |
| | 65 | distorted_outside_NETS = dmz |
| | 66 | distorted_inside_NETS = any unsafe vpn upn |
| | 67 | |
| | 68 | distorted_all_ZONES += distorted.org.uk |
| | 69 | |
| | 70 | distorted_all_ZONES += 195.113.2.81.in-addr.arpa |
| | 71 | distorted_all_ZONES += 128-143.238.187.81.in-addr.arpa |
| | 72 | distorted_all_ZONES += 64-79.12.169.217.in-addr.arpa |
| | 73 | distorted_all_ZONES += 2.9.c.0.0.b.8.0.1.0.0.2.ip6.arpa |
| | 74 | distorted_all_ZONES += 9.d.1.0.8.a.b.0.1.0.0.2.ip6.arpa |
| | 75 | |
| | 76 | distorted_all_ZONES += 199.29.172.in-addr.arpa |
| | 77 | |
| | 78 | distorted_outside_NSDIFF = -sradius.dmz.distorted.org.uk |
| | 79 | |
| | 80 | ###-------------------------------------------------------------------------- |
| | 81 | ### Other zones. |
| | 82 | |
| | 83 | ## binswood.org.uk |
| | 84 | ZONESETS += binswood |
| | 85 | binswood_VIEWS = outside |
| | 86 | binswood_all_ZONES += binswood.org.uk |
| | 87 | binswood_all_ZONES += 27.165.10.in-addr.arpa |
| | 88 | |
| | 89 | ## escorted.org.uk |
| | 90 | ZONESETS += escorted |
| | 91 | escorted_VIEWS = outside |
| | 92 | escorted_all_ZONES += escorted.org.uk |
| | 93 | |
| | 94 | ## odin.gg |
| | 95 | ZONESETS += odin |
| | 96 | odin_VIEWS = outside |
| | 97 | odin_all_ZONES = odin.gg |
| | 98 | |
| | 99 | ###-------------------------------------------------------------------------- |
| | 100 | ### Zone construction machinery. |
| | 101 | |
| | 102 | ZONE = zone |
| | 103 | V_ZONE = $(call v_tag,ZONE)$(ZONE) |
| | 104 | ZONEOPTS = |
| | 105 | |
| | 106 | .SECONDEXPANSION: #sorry |
| | 107 | |
| | 108 | ## For each net/zoneset pair, we make a stamp file net/zoneset.stamp to |
| | 109 | ## remember that we've made the corresponding zones. |
| | 110 | ALL_ZONESTAMPS = $(foreach s,$(ZONESETS), \ |
| | 111 | $(patsubst %,%/$s.zonestamp,$($s_VIEWS))) |
| | 112 | $(ALL_ZONESTAMPS) : %.zonestamp : $$(notdir $$*).lisp hosts.lisp |
| | 113 | $(V_AT)mkdir -p $(dir $*) |
| | 114 | $(V_ZONE) -d$(dir $*) -fview/$(call dir-nosl,$*)$(hack \ |
| | 115 | hack) $(addprefix -s, \ |
| | 116 | $($(notdir $*)_$(call dir-nosl,$*)_NETS)) $(ZONEOPTS) $< |
| | 117 | $(V_AT)touch $@ |
| | 118 | all: $(ALL_ZONESTAMPS) |
| | 119 | CLEANFILES += $(sort $(foreach s,$(ZONESETS), \ |
| | 120 | $(foreach v,$($s_VIEWS), \ |
| | 121 | $v/*.zonestamp $v/*.zone))) |
| | 122 | REALCLEANFILES += $(sort $(foreach s,$(ZONESETS), \ |
| | 123 | $(foreach v,$($s_VIEWS), \ |
| | 124 | $v/*.serial))) |
| | 125 | REALCLEANDIRS += $(sort $(foreach s,$(ZONESETS),$($s_VIEWS))) |
| | 126 | |
| | 127 | ## Now explain that each generated zone file depends on the corresponding |
| | 128 | ## zonestamp. This is where things start getting a little hairy. |
| | 129 | $(foreach s,$(ZONESETS), \ |
| | 130 | $(foreach v,$($s_VIEWS), \ |
| | 131 | $(foreach z,$($s_all_ZONES) $($s_$v_ZONES), \ |
| | 132 | $(eval $v/$z.zone: $v/$s.zonestamp)))) |
| | 133 | |
| | 134 | ## Prepare a mapping from zone names back to their owning zonesets. |
| | 135 | $(foreach s,$(ZONESETS), \ |
| | 136 | $(foreach z,$(sort $(foreach v,$($s_VIEWS), \ |
| | 137 | $($s_all_ZONES) $($s_$v_ZONES))), \ |
| | 138 | $(eval $z_ZONESET = $s))) |
| | 139 | |
| | 140 | ## Now we have to check the individual zone files. |
| | 141 | ALL_ZONECHECKS = $(foreach s,$(ZONESETS), \ |
| | 142 | $(foreach v,$($s_VIEWS), \ |
| | 143 | $(foreach z,$($s_all_ZONES) $($s_$v_ZONES), \ |
| | 144 | $v/$z.check))) |
| | 145 | $(ALL_ZONECHECKS) : %.check : %.zone |
| | 146 | $(call v_tag,CHECK)\ |
| | 147 | { $(CHECKZONE) $(notdir $*) $^ || kill $$$$; } | \ |
| | 148 | { grep -Ev 'loaded serial|OK' || :; } |
| | 149 | check: $(ALL_ZONECHECKS) |
| | 150 | .PHONY: check $(ALL_ZONECHECKS) |
| | 151 | |
| | 152 | ## If nsdiff(1) is available then we can show what changes we will make if |
| | 153 | ## we install the new zone files. |
| | 154 | ALL_ZONEDIFFS = $(foreach s,$(ZONESETS), \ |
| | 155 | $(foreach v,$($s_VIEWS), \ |
| | 156 | $(foreach z,$($s_all_ZONES) $($s_$v_ZONES), \ |
| | 157 | $v/$z.zonediff))) |
| | 158 | run-nsdiff = nsdiff -v "" $2 \ |
| | 159 | $($($(call notdir,$1)_ZONESET)_$(call dir-nosl,$1)_NSDIFF) \ |
| | 160 | $(call notdir,$1) $1.zone |
| | 161 | $(ALL_ZONEDIFFS) : %.zonediff : %.zone |
| | 162 | $(call v_tag,NSDIFF)$(call run-nsdiff,$*,-q); \ |
| | 163 | rc=$$?; case $$rc in 1) $(call run-nsdiff,$*); rc=$$? ;; esac; \ |
| | 164 | case $$rc in 0 | 1) : ;; *) exit $$rc ;; esac |
| | 165 | diff: $(ALL_ZONEDIFFS) |
| | 166 | |
| | 167 | ## Finally we have to install the zone files. |
| | 168 | ALL_INSTALLS = $(foreach s,$(ZONESETS), \ |
| | 169 | $(foreach v,$($s_VIEWS), \ |
| | 170 | $(foreach z,$($s_all_ZONES) $($s_$v_ZONES), \ |
| | 171 | $v/$z.inst))) |
| | 172 | $(ALL_INSTALLS) : %.inst : %.check |
| | 173 | $(call v_tag,INST)$(ZONEINST) \ |
| | 174 | $(call dir-nosl,$*) $(notdir $*) <$*.zone |
| | 175 | install: $(ALL_INSTALLS) |
| | 176 | .PHONY: install $(ALL_INSTALLS) |
| | 177 | |
| | 178 | ## Files to clean. |
| | 179 | clean: |
| | 180 | rm -f $(CLEANFILES) |
| | 181 | [ "$(CLEANDIRS)x" = x ] || rmdir $(CLEANDIRS) || : |
| | 182 | realclean: |
| | 183 | rm -f $(REALCLEANFILES) |
| | 184 | [ "$(REALCLEANDIRS)x" = x ] || rmdir $(REALCLEANDIRS) || : |
| | 185 | .PHONY: clean realclean |
| | 186 | |
| | 187 | ###----- That's all, folks -------------------------------------------------- |
~mdw / zones / blame_incremental