distorted.lisp, escorted.lisp, odin.lisp: Add DKIM infrastructure.
[zones] / Makefile
1 ### -*-makefile-*-
2 ###
3 ### Makefile for the DNS zones I maintain.
4 ###
5 ### (c) 2011 Mark Wooding
6
7 ###--------------------------------------------------------------------------
8 ### Silent-rules machinery.
9
10 V = 0
11 v_tag = $(call v_tag_$V,$1)
12 v_tag_0 = @printf " %-6s %s\n" "$1" "$@";
13
14 V_AT = $(V_AT_$V)
15 V_AT_0 = @
16
17 ###--------------------------------------------------------------------------
18 ### Programs and options.
19
20 ## Zone checking.
21 CHECKZONE = named-checkzone -i full \
22 -k fail -M fail -n fail -S fail -W fail
23
24 ## Zone installation.
25 MASTER = localhost
26 inside_MASTER = precision
27
28 ifeq ($(MASTER),localhost)
29 ZONEINST = userv zoneconf install
30 else
31 ZONEINST = ssh zoneconf@$(MASTER)
32 endif
33
34 ###--------------------------------------------------------------------------
35 ### Utility functions.
36
37 dir-nosl = $(patsubst %/,%,$(dir $1))
38
39 ###--------------------------------------------------------------------------
40 ### Keeping all of the files straight.
41
42 ## Establish a default target. We'll sort out what it does later.
43 all:
44 .PHONY: all
45
46 ## Things to clean.
47 CLEANFILES =
48 CLEANDIRS =
49 REALCLEANFILES = $(CLEANFILES)
50 REALCLEANDIRS = $(CLEANDIRS)
51
52 ## We work in terms of `zonesets'. Each one corresponds to a Lisp source
53 ## file to be passed to `zone'. A zoneset has a number of different nets
54 ## associated with it, in the variable zoneset_NETS, and we must run it
55 ## through `zone' once for each net. The zoneset will make a number of
56 ## zones, listed in zoneset_ZONES.
57 ZONESETS =
58
59 ###--------------------------------------------------------------------------
60 ### The distorted.org.uk zones.
61
62 ZONESETS += distorted
63
64 distorted_VIEWS = inside outside
65 distorted_outside_NETS = dmz
66 distorted_inside_NETS = any unsafe colo vpn upn
67
68 distorted_all_ZONES += distorted.org.uk
69
70 distorted_all_ZONES += 195.113.2.81.in-addr.arpa
71 distorted_all_ZONES += 128-143.238.187.81.in-addr.arpa
72 distorted_all_ZONES += 64-79.12.169.217.in-addr.arpa
73 distorted_all_ZONES += 2.9.c.0.0.b.8.0.1.0.0.2.ip6.arpa
74
75 distorted_all_ZONES += 199.29.172.in-addr.arpa
76
77 distorted_outside_NSDIFF = -sradius.dmz.distorted.org.uk
78
79 ###--------------------------------------------------------------------------
80 ### Other zones.
81
82 ## binswood.org.uk
83 ZONESETS += binswood
84 binswood_VIEWS = outside
85 binswood_all_ZONES += binswood.org.uk
86 binswood_all_ZONES += 27.165.10.in-addr.arpa
87
88 ## escorted.org.uk
89 ZONESETS += escorted
90 escorted_VIEWS = outside
91 escorted_all_ZONES += escorted.org.uk
92
93 ## odin.gg
94 ZONESETS += odin
95 odin_VIEWS = outside
96 odin_all_ZONES = odin.gg
97
98 ###--------------------------------------------------------------------------
99 ### Zone construction machinery.
100
101 ZONE = zone
102 V_ZONE = $(call v_tag,ZONE)$(ZONE)
103 ZONEOPTS =
104
105 .SECONDEXPANSION: #sorry
106
107 ## For each net/zoneset pair, we make a stamp file net/zoneset.stamp to
108 ## remember that we've made the corresponding zones.
109 ALL_ZONESTAMPS = $(foreach s,$(ZONESETS), \
110 $(patsubst %,%/$s.zonestamp,$($s_VIEWS)))
111 $(ALL_ZONESTAMPS) : %.zonestamp : $$(notdir $$*).lisp hosts.lisp
112 $(V_AT)mkdir -p $(dir $*)
113 $(V_ZONE) -d$(dir $*) -fview/$(call dir-nosl,$*)$(hack \
114 hack) $(addprefix -s, \
115 $($(notdir $*)_$(call dir-nosl,$*)_NETS)) $(ZONEOPTS) $<
116 $(V_AT)touch $@
117 all: $(ALL_ZONESTAMPS)
118 CLEANFILES += $(sort $(foreach s,$(ZONESETS), \
119 $(foreach v,$($s_VIEWS), \
120 $v/*.zonestamp $v/*.zone)))
121 REALCLEANFILES += $(sort $(foreach s,$(ZONESETS), \
122 $(foreach v,$($s_VIEWS), \
123 $v/*.serial)))
124 REALCLEANDIRS += $(sort $(foreach s,$(ZONESETS),$($s_VIEWS)))
125
126 ## Now explain that each generated zone file depends on the corresponding
127 ## zonestamp. This is where things start getting a little hairy.
128 $(foreach s,$(ZONESETS), \
129 $(foreach v,$($s_VIEWS), \
130 $(foreach z,$($s_all_ZONES) $($s_$v_ZONES), \
131 $(eval $v/$z.zone: $v/$s.zonestamp))))
132
133 ## Prepare a mapping from zone names back to their owning zonesets.
134 $(foreach s,$(ZONESETS), \
135 $(foreach z,$(sort $(foreach v,$($s_VIEWS), \
136 $($s_all_ZONES) $($s_$v_ZONES))), \
137 $(eval $z_ZONESET = $s)))
138
139 ## Now we have to check the individual zone files.
140 ALL_ZONECHECKS = $(foreach s,$(ZONESETS), \
141 $(foreach v,$($s_VIEWS), \
142 $(foreach z,$($s_all_ZONES) $($s_$v_ZONES), \
143 $v/$z.check)))
144 $(ALL_ZONECHECKS) : %.check : %.zone
145 $(call v_tag,CHECK)\
146 { $(CHECKZONE) $(notdir $*) $^ || kill $$$$; } | \
147 { grep -Ev 'loaded serial|OK' || :; }
148 check: $(ALL_ZONECHECKS)
149 .PHONY: check $(ALL_ZONECHECKS)
150
151 ## If nsdiff(1) is available then we can show what changes we will make if
152 ## we install the new zone files.
153 ALL_ZONEDIFFS = $(foreach s,$(ZONESETS), \
154 $(foreach v,$($s_VIEWS), \
155 $(foreach z,$($s_all_ZONES) $($s_$v_ZONES), \
156 $v/$z.zonediff)))
157 run-nsdiff = nsdiff -v "" $2 \
158 $($($(call notdir,$1)_ZONESET)_$(call dir-nosl,$1)_NSDIFF) \
159 $(call notdir,$1) $1.zone
160 $(ALL_ZONEDIFFS) : %.zonediff : %.zone
161 $(call v_tag,NSDIFF)$(call run-nsdiff,$*,-q); \
162 rc=$$?; case $$rc in 1) $(call run-nsdiff,$*); rc=$$? ;; esac; \
163 case $$rc in 0 | 1) : ;; *) exit $$rc ;; esac
164 diff: $(ALL_ZONEDIFFS)
165
166 ## Finally we have to install the zone files.
167 ALL_INSTALLS = $(foreach s,$(ZONESETS), \
168 $(foreach v,$($s_VIEWS), \
169 $(foreach z,$($s_all_ZONES) $($s_$v_ZONES), \
170 $v/$z.inst)))
171 $(ALL_INSTALLS) : %.inst : %.check
172 $(call v_tag,INST)$(ZONEINST) \
173 $(call dir-nosl,$*) $(notdir $*) <$*.zone
174 install: $(ALL_INSTALLS)
175 .PHONY: install $(ALL_INSTALLS)
176
177 ## Files to clean.
178 clean:
179 rm -f $(CLEANFILES)
180 [ "$(CLEANDIRS)x" = x ] || rmdir $(CLEANDIRS) || :
181 realclean:
182 rm -f $(REALCLEANFILES)
183 [ "$(REALCLEANDIRS)x" = x ] || rmdir $(REALCLEANDIRS) || :
184 .PHONY: clean realclean
185
186 ###----- That's all, folks --------------------------------------------------