<86>Mar 29 15:08:20 userdel[2029019]: delete user 'rooter' <86>Mar 29 15:08:20 userdel[2029019]: removed group 'rooter' owned by 'rooter' <86>Mar 29 15:08:20 userdel[2029019]: removed shadow group 'rooter' owned by 'rooter' <86>Mar 29 15:08:20 groupadd[2029102]: group added to /etc/group: name=rooter, GID=1841 <86>Mar 29 15:08:20 groupadd[2029102]: group added to /etc/gshadow: name=rooter <86>Mar 29 15:08:20 groupadd[2029102]: new group: name=rooter, GID=1841 <86>Mar 29 15:08:20 useradd[2029175]: new user: name=rooter, UID=1841, GID=1841, home=/root, shell=/bin/bash, from=none <86>Mar 29 15:08:20 userdel[2029265]: delete user 'builder' <86>Mar 29 15:08:20 userdel[2029265]: removed group 'builder' owned by 'builder' <86>Mar 29 15:08:20 userdel[2029265]: removed shadow group 'builder' owned by 'builder' <86>Mar 29 15:08:20 groupadd[2029322]: group added to /etc/group: name=builder, GID=1842 <86>Mar 29 15:08:20 groupadd[2029322]: group added to /etc/gshadow: name=builder <86>Mar 29 15:08:20 groupadd[2029322]: new group: name=builder, GID=1842 <86>Mar 29 15:08:20 useradd[2029396]: new user: name=builder, UID=1842, GID=1842, home=/usr/src, shell=/bin/bash, from=none <13>Mar 29 15:08:24 rpmi: libidn2-2.3.7-alt1 sisyphus+339505.100.1.2 1706718968 installed <13>Mar 29 15:08:24 rpmi: libnettle8-3.9.1-alt1 sisyphus+322548.100.1.2 1686176879 installed <13>Mar 29 15:08:24 rpmi: strace-6.8-alt1 sisyphus+343145.100.1.1 1710923032 installed <13>Mar 29 15:08:24 rpmi: libgdbm-1.8.3-alt10 sisyphus+278100.1600.1.1 1626058413 installed <13>Mar 29 15:08:24 rpmi: libexpat-2.5.0-alt1 sisyphus+309227.100.1.1 1667075764 installed <13>Mar 29 15:08:24 rpmi: less-633-alt1 sisyphus+328181.300.2.1 1693321749 installed <13>Mar 29 15:08:24 rpmi: libtcl-8.6.13-alt1 sisyphus+310696.100.1.1 1669548266 installed <13>Mar 29 15:08:24 rpmi: libp11-kit-1:0.25.3-alt2 sisyphus+336533.100.1.1 1702645560 installed <13>Mar 29 15:08:24 rpmi: libtasn1-4.19.0-alt3 sisyphus+327816.100.1.1 1692802615 installed <13>Mar 29 15:08:24 rpmi: tcl-8.6.13-alt1 sisyphus+310696.100.1.1 1669548266 installed <13>Mar 29 15:08:24 rpmi: libhogweed6-3.9.1-alt1 sisyphus+322548.100.1.2 1686176879 installed <13>Mar 29 15:08:24 rpmi: libgnutls30-3.8.4-alt1 sisyphus+343729.100.2.1 1711571288 installed <13>Mar 29 15:08:24 rpmi: libngtcp2.16-1.2.0-alt1 sisyphus+339162.100.1.1 1706355118 installed <13>Mar 29 15:08:24 rpmi: libngtcp2_crypto_gnutls8-1.2.0-alt1 sisyphus+339162.100.1.1 1706355118 installed <13>Mar 29 15:08:24 rpmi: groff-base-1.22.3-alt2 sisyphus+275306.100.2.1 1624538375 installed <13>Mar 29 15:08:24 rpmi: libpipeline-1.5.7-alt1_1 sisyphus+312433.100.1.1 1671879773 installed <13>Mar 29 15:08:24 rpmi: sudo-1:1.9.15p5-alt1 sisyphus+337671.100.2.2 1705639461 installed <13>Mar 29 15:08:24 rpmi: libmpdec3-2.5.1-alt3 sisyphus+314490.500.5.1 1675432004 installed <13>Mar 29 15:08:24 rpmi: libb2-0.98.1-alt1_1 sisyphus+291614.100.1.1 1638962877 installed <13>Mar 29 15:08:24 rpmi: publicsuffix-list-dafsa-20240130-alt1 sisyphus+339506.100.1.1 1706719111 installed <13>Mar 29 15:08:24 rpmi: libpsl-0.21.5-alt1 sisyphus+338474.100.1.1 1705684769 installed <13>Mar 29 15:08:24 rpmi: libnghttp3.9-1.1.0-alt1 sisyphus+339163.100.1.1 1706355266 installed <13>Mar 29 15:08:24 rpmi: libnghttp2-1.59.0-alt1 sisyphus+339160.100.1.1 1706354719 installed <13>Mar 29 15:08:24 rpmi: openldap-common-2.6.7-alt1 sisyphus+343335.200.1.1 1711113916 installed <13>Mar 29 15:08:24 rpmi: libntlm-1.5-alt1 sisyphus+278100.3300.1.1 1626058899 installed <13>Mar 29 15:08:24 rpmi: libidn-1.37-alt2 sisyphus+300849.100.1.1 1653769687 installed <13>Mar 29 15:08:24 rpmi: libbrotlicommon-1.1.0-alt1 sisyphus+328501.100.1.1 1693598419 installed <13>Mar 29 15:08:24 rpmi: libbrotlidec-1.1.0-alt1 sisyphus+328501.100.1.1 1693598419 installed <13>Mar 29 15:08:24 rpmi: libxxhash-0.8.2-alt1 sisyphus+336514.200.7.1 1702672118 installed <13>Mar 29 15:08:24 rpmi: liblz4-1:1.9.4-alt1 sisyphus+309416.100.1.1 1667412981 installed <13>Mar 29 15:08:24 rpmi: libverto-0.3.2-alt1_1 sisyphus+321176.2200.10.2 1684803947 installed <13>Mar 29 15:08:24 rpmi: liblmdb-0.9.32-alt1 sisyphus+342426.100.1.1 1710124288 installed <13>Mar 29 15:08:24 rpmi: libkeyutils-1.6.3-alt1 sisyphus+266061.100.1.1 1612919566 installed <13>Mar 29 15:08:24 rpmi: libcom_err-1.46.4.0.5.4cda-alt1 sisyphus+283826.100.1.1 1629975345 installed <13>Mar 29 15:08:24 rpmi: libedit3-3.1.20230828-alt1 sisyphus+330914.200.3.1 1696922743 installed <13>Mar 29 15:08:24 rpmi: diffstat-1.64-alt1 sisyphus+278100.700.1.1 1626056683 installed <13>Mar 29 15:08:24 rpmi: rpm-macros-alternatives-0.5.2-alt2 sisyphus+315270.200.2.1 1676457367 installed <13>Mar 29 15:08:24 rpmi: alternatives-0.5.2-alt2 sisyphus+315270.200.2.1 1676457367 installed <13>Mar 29 15:08:24 rpmi: ca-certificates-2024.02.24-alt1 sisyphus+341362.100.1.1 1708791001 installed <13>Mar 29 15:08:24 rpmi: ca-trust-0.1.5-alt1 sisyphus+340049.100.1.1 1707326464 installed <13>Mar 29 15:08:24 rpmi: p11-kit-trust-1:0.25.3-alt2 sisyphus+336533.100.1.1 1702645560 installed <13>Mar 29 15:08:25 rpmi: libcrypto3-3.1.5-alt1 sisyphus+339669.100.1.1 1706908440 installed <13>Mar 29 15:08:25 rpmi: libssl3-3.1.5-alt1 sisyphus+339669.100.1.1 1706908440 installed <86>Mar 29 15:08:25 groupadd[2053543]: group added to /etc/group: name=_keytab, GID=999 <86>Mar 29 15:08:25 groupadd[2053543]: group added to /etc/gshadow: name=_keytab <86>Mar 29 15:08:25 groupadd[2053543]: new group: name=_keytab, GID=999 <13>Mar 29 15:08:25 rpmi: libkrb5-1.21.2-alt2 sisyphus+338902.100.2.1 1706700934 installed <13>Mar 29 15:08:25 rpmi: python3-3.12.2-alt1 sisyphus+341702.200.1.1 1709232871 installed <13>Mar 29 15:08:25 rpmi: python3-base-3.12.2-alt1 sisyphus+341702.200.1.1 1709232871 installed <13>Mar 29 15:08:25 rpmi: libgsasl-2.2.0-alt1 sisyphus+333173.100.1.1 1698696954 installed <86>Mar 29 15:08:25 groupadd[2056009]: group added to /etc/group: name=sasl, GID=998 <86>Mar 29 15:08:25 groupadd[2056009]: group added to /etc/gshadow: name=sasl <86>Mar 29 15:08:25 groupadd[2056009]: new group: name=sasl, GID=998 <13>Mar 29 15:08:25 rpmi: libsasl2-3-2.1.28-alt2 sisyphus+343335.100.1.1 1711112544 installed <13>Mar 29 15:08:25 rpmi: libldap2-2.6.7-alt1 sisyphus+343335.200.1.1 1711113916 installed <13>Mar 29 15:08:25 rpmi: openssh-common-9.6p1-alt1 sisyphus+338324.200.2.1 1706093654 installed <86>Mar 29 15:08:25 groupadd[2056085]: group added to /etc/group: name=sshagent, GID=997 <86>Mar 29 15:08:25 groupadd[2056085]: group added to /etc/gshadow: name=sshagent <86>Mar 29 15:08:25 groupadd[2056085]: new group: name=sshagent, GID=997 <13>Mar 29 15:08:25 rpmi: openssh-clients-9.6p1-alt1 sisyphus+338324.200.2.1 1706093654 installed <13>Mar 29 15:08:25 rpmi: rsync-3.2.7-alt1 sisyphus+325006.2000.1.1 1689497333 installed <13>Mar 29 15:08:25 rpmi: libssh2-1.11.0-alt2 sisyphus+339356.100.1.1 1706593137 installed <13>Mar 29 15:08:25 rpmi: libcurl-8.7.1-alt1 sisyphus+343696.100.2.2 1711555843 installed <13>Mar 29 15:08:26 rpmi: git-core-2.42.1-alt1 sisyphus+333661.100.1.1 1699193182 installed <13>Mar 29 15:08:26 rpmi: firejail-0.9.72-alt1 sisyphus+317164.100.1.1 1679407004 installed <13>Mar 29 15:08:26 rpmi: libssl-devel-3.1.5-alt1 sisyphus+339669.100.1.1 1706908440 installed <13>Mar 29 15:08:26 rpmi: man-db-2.12.0-alt1 sisyphus+336930.2100.1.1 1703107121 installed <13>Mar 29 15:08:26 rpmi: expect-1:5.45.4-alt4 sisyphus+276236.100.1.2 1624923739 installed <13>Mar 29 15:08:26 rpmi: libseccomp-devel-2.5.5-alt1 sisyphus+335558.200.2.1 1701474989 installed Building target platforms: x86_64 Building for target x86_64 Wrote: /usr/src/in/nosrpm/fdns-0.9.72-alt1.nosrc.rpm (w1.gzdio) Installing fdns-0.9.72-alt1.src.rpm Building target platforms: x86_64 Building for target x86_64 Executing(%prep): /bin/sh -e /usr/src/tmp/rpm-tmp.4932 + umask 022 + /bin/mkdir -p /usr/src/RPM/BUILD + cd /usr/src/RPM/BUILD + cd /usr/src/RPM/BUILD + rm -rf fdns-0.9.72 + echo 'Source #0 (fdns-0.9.72.tar):' Source #0 (fdns-0.9.72.tar): + /bin/tar -xf /usr/src/RPM/SOURCES/fdns-0.9.72.tar + cd fdns-0.9.72 + echo 'Source #1 (fdns-0.9.72-etc-blocklists.tar):' Source #1 (fdns-0.9.72-etc-blocklists.tar): + /bin/tar -xf /usr/src/RPM/SOURCES/fdns-0.9.72-etc-blocklists.tar + /bin/chmod -c -Rf u+rwX,go-w . + echo 'Patch #0 (fdns-0.9.72-alt.patch):' Patch #0 (fdns-0.9.72-alt.patch): + /usr/bin/patch -p1 patching file src/fdns/fdns.h patching file src/fdns/main.c patching file src/fdns/server.c patching file src/fdns/ssl.c patching file test/fdns/all-interfaces.exp patching file test/fdns/blocklist-file.exp patching file test/fdns/blocklist.exp patching file test/fdns/dotvsh2.exp patching file test/fdns/fallback.exp patching file test/fdns/filter-doh.exp patching file test/fdns/filter.exp patching file test/fdns/forwarder.exp patching file test/fdns/help-man.exp patching file test/fdns/invalid-server.exp patching file test/fdns/ipv6.exp patching file test/fdns/keepalive.exp patching file test/fdns/list-adblocker.exp patching file test/fdns/list-all.exp patching file test/fdns/list-anycast.exp patching file test/fdns/list-family.exp patching file test/fdns/list-opennic.exp patching file test/fdns/list-security.exp patching file test/fdns/list.exp patching file test/fdns/local-doh.exp patching file test/fdns/monitor.exp patching file test/fdns/multiserver.exp patching file test/fdns/nofilter.exp patching file test/fdns/print-requests.exp patching file test/fdns/restart-workers.exp patching file test/fdns/server-anycast.exp patching file test/fdns/test-servers-anycast.exp patching file test/fdns/test-servers.exp patching file test/fdns/test-url-list.exp patching file test/fdns/test-url.exp patching file test/fdns/test-user.sh patching file test/fdns/test.sh patching file test/fdns/transport-udp.exp patching file test/fdns/transport.exp patching file test/fdns/unlisted.exp patching file test/fdns/wget.exp patching file test/fdns/whitelist-file.exp patching file test/fdns/whitelist.exp patching file test/fdns/workers.exp + exit 0 Executing(%build): /bin/sh -e /usr/src/tmp/rpm-tmp.4932 + umask 022 + /bin/mkdir -p /usr/src/RPM/BUILD + cd /usr/src/RPM/BUILD + cd fdns-0.9.72 + CFLAGS='-pipe -frecord-gcc-switches -Wall -g -O2 -flto=auto' + export CFLAGS + CXXFLAGS='-pipe -frecord-gcc-switches -Wall -g -O2 -flto=auto' + export CXXFLAGS + FFLAGS='-pipe -frecord-gcc-switches -Wall -g -O2 -flto=auto' + export FFLAGS + FCFLAGS='-pipe -frecord-gcc-switches -Wall -g -O2 -flto=auto' + export FCFLAGS + '[' -n '' ']' ++ printf %s '-pipe -frecord-gcc-switches -Wall -g -O2 -flto=auto' ++ sed -r 's/(^|[[:space:]]+)-[^m][^[:space:]]*//g' + ASFLAGS= + export ASFLAGS + export lt_cv_deplibs_check_method=pass_all + lt_cv_deplibs_check_method=pass_all + readlink -e -- ./configure + xargs -ri dirname -- '{}' + xargs -ri find '{}' -type f '(' -name config.sub -or -name config.guess ')' -printf '%h/\n' + sort -u + xargs -rn1 install -pm755 -- /usr/share/gnu-config/config.sub /usr/share/gnu-config/config.guess + configure_runstatedir_flags= + grep -qF runstatedir=DIR ./configure + configure_runstatedir_flags=--runstatedir=/var/run + ./configure --build=x86_64-alt-linux --host=x86_64-alt-linux --prefix=/usr --exec-prefix=/usr --bindir=/usr/bin --sbindir=/usr/sbin --sysconfdir=/etc --datadir=/usr/share --includedir=/usr/include --libdir=/usr/lib64 --libexecdir=/usr/lib --localstatedir=/var/lib --sharedstatedir=/var/lib --mandir=/usr/share/man --infodir=/usr/share/info --disable-dependency-tracking --disable-silent-rules --runstatedir=/var/run --without-included-gettext configure: WARNING: unrecognized options: --disable-dependency-tracking, --disable-silent-rules, --without-included-gettext checking for x86_64-alt-linux-gcc... x86_64-alt-linux-gcc checking whether the C compiler works... yes checking for C compiler default output file name... a.out checking for suffix of executables... checking whether we are cross compiling... no checking for suffix of object files... o checking whether the compiler supports GNU C... yes checking whether x86_64-alt-linux-gcc accepts -g... yes checking for x86_64-alt-linux-gcc option to enable C11 features... none needed checking for a BSD-compatible install... /bin/ginstall -c checking for x86_64-alt-linux-ranlib... no checking for ranlib... ranlib checking whether C compiler accepts -mindirect-branch=thunk... yes checking whether C compiler accepts -mretpoline... no checking whether C compiler accepts -fstack-clash-protection... yes checking whether C compiler accepts -fstack-protector-strong... yes checking for main in -lpthread... yes checking for stdio.h... yes checking for stdlib.h... yes checking for string.h... yes checking for inttypes.h... yes checking for stdint.h... yes checking for strings.h... yes checking for sys/stat.h... yes checking for sys/types.h... yes checking for unistd.h... yes checking for pthread.h... yes checking for x86_64-alt-linux-pkg-config... no checking for pkg-config... pkg-config checking whether compiling and linking against OpenSSL works... yes OpenSSL library found checking for main in -lseccomp... yes checking for seccomp.h... yes configure: creating ./config.status config.status: creating Makefile config.status: creating src/common.mk config.status: creating src/fdns/Makefile config.status: creating src/nxdomain/Makefile configure: WARNING: unrecognized options: --disable-dependency-tracking, --disable-silent-rules, --without-included-gettext Configuration options: prefix: /usr sysconfdir: /etc systemd directory: /etc/fdns Spectre compiler patch: yes apparmor: seccomp: -DHAVE_SECCOMP EXTRA_LDFLAGS: EXTRA_CFLAGS: -mindirect-branch=thunk -fstack-clash-protection -fstack-protector-strong fatal warnings: Gcov instrumentation: + make -j16 make -C src/fdns make -C src/nxdomain make: Entering directory '/usr/src/RPM/BUILD/fdns-0.9.72' ./mkman.sh 0.9.72 src/man/nxdomain.txt nxdomain.1 make: Leaving directory '/usr/src/RPM/BUILD/fdns-0.9.72' make: Entering directory '/usr/src/RPM/BUILD/fdns-0.9.72' ./mkman.sh 0.9.72 src/man/fdns.txt fdns.1 make: Leaving directory '/usr/src/RPM/BUILD/fdns-0.9.72' make[1]: Entering directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' x86_64-alt-linux-gcc -pipe -frecord-gcc-switches -Wall -g -O2 -flto=auto -ggdb -O2 -DVERSION='"0.9.72"' -DHAVE_SECCOMP -DPREFIX='"/usr"' -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib64"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security -mindirect-branch=thunk -fstack-clash-protection -fstack-protector-strong -c hpack_static.c -o hpack_static.o : warning: "_FORTIFY_SOURCE" redefined : note: this is the location of the previous definition make[1]: Leaving directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' make[1]: Entering directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/nxdomain' x86_64-alt-linux-gcc -pipe -frecord-gcc-switches -Wall -g -O2 -flto=auto -ggdb -O2 -DVERSION='"0.9.72"' -DHAVE_SECCOMP -DPREFIX='"/usr"' -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib64"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security -mindirect-branch=thunk -fstack-clash-protection -fstack-protector-strong -c resolver.c -o resolver.o : warning: "_FORTIFY_SOURCE" redefined : note: this is the location of the previous definition make[1]: Leaving directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/nxdomain' make[1]: Entering directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' x86_64-alt-linux-gcc -pipe -frecord-gcc-switches -Wall -g -O2 -flto=auto -ggdb -O2 -DVERSION='"0.9.72"' -DHAVE_SECCOMP -DPREFIX='"/usr"' -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib64"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security -mindirect-branch=thunk -fstack-clash-protection -fstack-protector-strong -c cache.c -o cache.o : warning: "_FORTIFY_SOURCE" redefined : note: this is the location of the previous definition make[1]: Leaving directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' make[1]: Entering directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' x86_64-alt-linux-gcc -pipe -frecord-gcc-switches -Wall -g -O2 -flto=auto -ggdb -O2 -DVERSION='"0.9.72"' -DHAVE_SECCOMP -DPREFIX='"/usr"' -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib64"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security -mindirect-branch=thunk -fstack-clash-protection -fstack-protector-strong -c dot.c -o dot.o : warning: "_FORTIFY_SOURCE" redefined : note: this is the location of the previous definition make[1]: Leaving directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' make[1]: Entering directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' x86_64-alt-linux-gcc -pipe -frecord-gcc-switches -Wall -g -O2 -flto=auto -ggdb -O2 -DVERSION='"0.9.72"' -DHAVE_SECCOMP -DPREFIX='"/usr"' -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib64"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security -mindirect-branch=thunk -fstack-clash-protection -fstack-protector-strong -c forwarder.c -o forwarder.o : warning: "_FORTIFY_SOURCE" redefined : note: this is the location of the previous definition make[1]: Leaving directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' make[1]: Entering directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' x86_64-alt-linux-gcc -pipe -frecord-gcc-switches -Wall -g -O2 -flto=auto -ggdb -O2 -DVERSION='"0.9.72"' -DHAVE_SECCOMP -DPREFIX='"/usr"' -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib64"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security -mindirect-branch=thunk -fstack-clash-protection -fstack-protector-strong -c dns.c -o dns.o : warning: "_FORTIFY_SOURCE" redefined : note: this is the location of the previous definition make[1]: Leaving directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' make[1]: Entering directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/nxdomain' x86_64-alt-linux-gcc -pipe -frecord-gcc-switches -Wall -g -O2 -flto=auto -ggdb -O2 -DVERSION='"0.9.72"' -DHAVE_SECCOMP -DPREFIX='"/usr"' -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib64"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security -mindirect-branch=thunk -fstack-clash-protection -fstack-protector-strong -c nxdomain.c -o nxdomain.o : warning: "_FORTIFY_SOURCE" redefined : note: this is the location of the previous definition nxdomain.c: In function 'test': nxdomain.c:92:14: warning: unused variable 'buf' [-Wunused-variable] 92 | char buf[LINE_MAX]; | ^~~ make[1]: Leaving directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/nxdomain' make[1]: Entering directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' x86_64-alt-linux-gcc -pipe -frecord-gcc-switches -Wall -g -O2 -flto=auto -ggdb -O2 -DVERSION='"0.9.72"' -DHAVE_SECCOMP -DPREFIX='"/usr"' -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib64"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security -mindirect-branch=thunk -fstack-clash-protection -fstack-protector-strong -c dnsdb.c -o dnsdb.o : warning: "_FORTIFY_SOURCE" redefined : note: this is the location of the previous definition make[1]: Leaving directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' make[1]: Entering directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' x86_64-alt-linux-gcc -pipe -frecord-gcc-switches -Wall -g -O2 -flto=auto -ggdb -O2 -DVERSION='"0.9.72"' -DHAVE_SECCOMP -DPREFIX='"/usr"' -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib64"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security -mindirect-branch=thunk -fstack-clash-protection -fstack-protector-strong -c huffman.c -o huffman.o : warning: "_FORTIFY_SOURCE" redefined : note: this is the location of the previous definition make[1]: Leaving directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' make[1]: Entering directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' x86_64-alt-linux-gcc -pipe -frecord-gcc-switches -Wall -g -O2 -flto=auto -ggdb -O2 -DVERSION='"0.9.72"' -DHAVE_SECCOMP -DPREFIX='"/usr"' -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib64"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security -mindirect-branch=thunk -fstack-clash-protection -fstack-protector-strong -c h11.c -o h11.o : warning: "_FORTIFY_SOURCE" redefined : note: this is the location of the previous definition make[1]: Leaving directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' make[1]: Entering directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' x86_64-alt-linux-gcc -pipe -frecord-gcc-switches -Wall -g -O2 -flto=auto -ggdb -O2 -DVERSION='"0.9.72"' -DHAVE_SECCOMP -DPREFIX='"/usr"' -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib64"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security -mindirect-branch=thunk -fstack-clash-protection -fstack-protector-strong -c filter.c -o filter.o : warning: "_FORTIFY_SOURCE" redefined : note: this is the location of the previous definition make[1]: Leaving directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' make[1]: Entering directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' x86_64-alt-linux-gcc -pipe -frecord-gcc-switches -Wall -g -O2 -flto=auto -ggdb -O2 -DVERSION='"0.9.72"' -DHAVE_SECCOMP -DPREFIX='"/usr"' -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib64"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security -mindirect-branch=thunk -fstack-clash-protection -fstack-protector-strong -c log.c -o log.o : warning: "_FORTIFY_SOURCE" redefined : note: this is the location of the previous definition make[1]: Leaving directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' make[1]: Entering directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' x86_64-alt-linux-gcc -pipe -frecord-gcc-switches -Wall -g -O2 -flto=auto -ggdb -O2 -DVERSION='"0.9.72"' -DHAVE_SECCOMP -DPREFIX='"/usr"' -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib64"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security -mindirect-branch=thunk -fstack-clash-protection -fstack-protector-strong -c lint.c -o lint.o : warning: "_FORTIFY_SOURCE" redefined : note: this is the location of the previous definition make[1]: Leaving directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' make[1]: Entering directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' x86_64-alt-linux-gcc -pipe -frecord-gcc-switches -Wall -g -O2 -flto=auto -ggdb -O2 -DVERSION='"0.9.72"' -DHAVE_SECCOMP -DPREFIX='"/usr"' -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib64"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security -mindirect-branch=thunk -fstack-clash-protection -fstack-protector-strong -c frontend.c -o frontend.o : warning: "_FORTIFY_SOURCE" redefined : note: this is the location of the previous definition frontend.c: In function 'frontend': frontend.c:489:121: warning: left-hand operand of comma expression has no effect [-Wunused-value] 489 | stats.query_time = (s.query_time * 0.18) + (stats.query_time * 0,82); | ^ make[1]: Leaving directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' make[1]: Entering directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' x86_64-alt-linux-gcc -pipe -frecord-gcc-switches -Wall -g -O2 -flto=auto -ggdb -O2 -DVERSION='"0.9.72"' -DHAVE_SECCOMP -DPREFIX='"/usr"' -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib64"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security -mindirect-branch=thunk -fstack-clash-protection -fstack-protector-strong -c h2.c -o h2.o : warning: "_FORTIFY_SOURCE" redefined : note: this is the location of the previous definition make[1]: Leaving directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' make[1]: Entering directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' x86_64-alt-linux-gcc -pipe -frecord-gcc-switches -Wall -g -O2 -flto=auto -ggdb -O2 -DVERSION='"0.9.72"' -DHAVE_SECCOMP -DPREFIX='"/usr"' -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib64"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security -mindirect-branch=thunk -fstack-clash-protection -fstack-protector-strong -c timetrace.c -o timetrace.o : warning: "_FORTIFY_SOURCE" redefined : note: this is the location of the previous definition make[1]: Leaving directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' make[1]: Entering directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' x86_64-alt-linux-gcc -pipe -frecord-gcc-switches -Wall -g -O2 -flto=auto -ggdb -O2 -DVERSION='"0.9.72"' -DHAVE_SECCOMP -DPREFIX='"/usr"' -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib64"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security -mindirect-branch=thunk -fstack-clash-protection -fstack-protector-strong -c main.c -o main.o : warning: "_FORTIFY_SOURCE" redefined : note: this is the location of the previous definition make[1]: Leaving directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' make[1]: Entering directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' x86_64-alt-linux-gcc -pipe -frecord-gcc-switches -Wall -g -O2 -flto=auto -ggdb -O2 -DVERSION='"0.9.72"' -DHAVE_SECCOMP -DPREFIX='"/usr"' -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib64"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security -mindirect-branch=thunk -fstack-clash-protection -fstack-protector-strong -c net.c -o net.o : warning: "_FORTIFY_SOURCE" redefined : note: this is the location of the previous definition make[1]: Leaving directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' make[1]: Entering directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' x86_64-alt-linux-gcc -pipe -frecord-gcc-switches -Wall -g -O2 -flto=auto -ggdb -O2 -DVERSION='"0.9.72"' -DHAVE_SECCOMP -DPREFIX='"/usr"' -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib64"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security -mindirect-branch=thunk -fstack-clash-protection -fstack-protector-strong -c procs.c -o procs.o : warning: "_FORTIFY_SOURCE" redefined : note: this is the location of the previous definition make[1]: Leaving directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' make[1]: Entering directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' x86_64-alt-linux-gcc -pipe -frecord-gcc-switches -Wall -g -O2 -flto=auto -ggdb -O2 -DVERSION='"0.9.72"' -DHAVE_SECCOMP -DPREFIX='"/usr"' -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib64"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security -mindirect-branch=thunk -fstack-clash-protection -fstack-protector-strong -c security.c -o security.o : warning: "_FORTIFY_SOURCE" redefined : note: this is the location of the previous definition make[1]: Leaving directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' make[1]: Entering directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' x86_64-alt-linux-gcc -pipe -frecord-gcc-switches -Wall -g -O2 -flto=auto -ggdb -O2 -DVERSION='"0.9.72"' -DHAVE_SECCOMP -DPREFIX='"/usr"' -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib64"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security -mindirect-branch=thunk -fstack-clash-protection -fstack-protector-strong -c shmem.c -o shmem.o : warning: "_FORTIFY_SOURCE" redefined : note: this is the location of the previous definition make[1]: Leaving directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' make[1]: Entering directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' x86_64-alt-linux-gcc -pipe -frecord-gcc-switches -Wall -g -O2 -flto=auto -ggdb -O2 -DVERSION='"0.9.72"' -DHAVE_SECCOMP -DPREFIX='"/usr"' -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib64"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security -mindirect-branch=thunk -fstack-clash-protection -fstack-protector-strong -c resolver.c -o resolver.o : warning: "_FORTIFY_SOURCE" redefined : note: this is the location of the previous definition make[1]: Leaving directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' make[1]: Entering directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' x86_64-alt-linux-gcc -pipe -frecord-gcc-switches -Wall -g -O2 -flto=auto -ggdb -O2 -DVERSION='"0.9.72"' -DHAVE_SECCOMP -DPREFIX='"/usr"' -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib64"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security -mindirect-branch=thunk -fstack-clash-protection -fstack-protector-strong -c whitelist.c -o whitelist.o : warning: "_FORTIFY_SOURCE" redefined : note: this is the location of the previous definition make[1]: Leaving directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' make[1]: Entering directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' x86_64-alt-linux-gcc -pipe -frecord-gcc-switches -Wall -g -O2 -flto=auto -ggdb -O2 -DVERSION='"0.9.72"' -DHAVE_SECCOMP -DPREFIX='"/usr"' -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib64"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security -mindirect-branch=thunk -fstack-clash-protection -fstack-protector-strong -c server.c -o server.o : warning: "_FORTIFY_SOURCE" redefined : note: this is the location of the previous definition make[1]: Leaving directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' make[1]: Entering directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' x86_64-alt-linux-gcc -pipe -frecord-gcc-switches -Wall -g -O2 -flto=auto -ggdb -O2 -DVERSION='"0.9.72"' -DHAVE_SECCOMP -DPREFIX='"/usr"' -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib64"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security -mindirect-branch=thunk -fstack-clash-protection -fstack-protector-strong -c ssl.c -o ssl.o : warning: "_FORTIFY_SOURCE" redefined : note: this is the location of the previous definition make[1]: Leaving directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' make[1]: Entering directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/nxdomain' x86_64-alt-linux-gcc -pie -Wl,-z,relro -Wl,-z,now -lpthread -lseccomp -o nxdomain nxdomain.o resolver.o make[1]: Leaving directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/nxdomain' make[1]: Entering directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' x86_64-alt-linux-gcc -pie -Wl,-z,relro -Wl,-z,now -lpthread -lseccomp -o fdns cache.o dns.o dnsdb.o dot.o filter.o forwarder.o frontend.o h11.o h2.o hpack_static.o huffman.o lint.o log.o main.o net.o procs.o resolver.o security.o server.o shmem.o ssl.o timetrace.o whitelist.o -lssl -lcrypto -lrt -lseccomp make[1]: Leaving directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' + exit 0 Executing(%install): /bin/sh -e /usr/src/tmp/rpm-tmp.3253 + umask 022 + /bin/mkdir -p /usr/src/RPM/BUILD + cd /usr/src/RPM/BUILD + /bin/chmod -Rf u+rwX -- /usr/src/tmp/fdns-buildroot + : + /bin/rm -rf -- /usr/src/tmp/fdns-buildroot + PATH=/usr/libexec/rpm-build:/usr/src/bin:/bin:/usr/bin:/usr/X11R6/bin:/usr/games + cd fdns-0.9.72 + make 'INSTALL=/usr/libexec/rpm-build/install -p' install DESTDIR=/usr/src/tmp/fdns-buildroot SYSTEMD_DIR=/lib/systemd/system make: Entering directory '/usr/src/RPM/BUILD/fdns-0.9.72' make -C src/fdns make[1]: Entering directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' make[1]: Nothing to be done for 'all'. make[1]: Leaving directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/fdns' make -C src/nxdomain make[1]: Entering directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/nxdomain' make[1]: Nothing to be done for 'all'. make[1]: Leaving directory '/usr/src/RPM/BUILD/fdns-0.9.72/src/nxdomain' make realinstall make[1]: Entering directory '/usr/src/RPM/BUILD/fdns-0.9.72' # fdns executable install -m 0755 -d /usr/src/tmp/fdns-buildroot//usr/bin install -c -m 0755 src/fdns/fdns /usr/src/tmp/fdns-buildroot//usr/bin/. install -c -m 0755 src/nxdomain/nxdomain /usr/src/tmp/fdns-buildroot//usr/bin/. # documents install -m 0755 -d /usr/src/tmp/fdns-buildroot//usr/share/doc/fdns install -c -m 0644 COPYING /usr/src/tmp/fdns-buildroot//usr/share/doc/fdns/. install -c -m 0644 README /usr/src/tmp/fdns-buildroot//usr/share/doc/fdns/. install -c -m 0644 RELNOTES /usr/src/tmp/fdns-buildroot//usr/share/doc/fdns/. # etc files install -m 0755 -d /usr/src/tmp/fdns-buildroot/etc/fdns install -m 0644 -t /usr/src/tmp/fdns-buildroot/etc/fdns etc/list.adblocker etc/list.coinblocker etc/list.fp-trackers etc/list.phishing etc/list.tld-blacklist etc/resolver.seccomp install -m 0644 -t /usr/src/tmp/fdns-buildroot/etc/fdns etc/servers etc/list.trackers # install server cusomization file sh -c "if [ ! -f /usr/src/tmp/fdns-buildroot//etc/fdns/servers.local ]; then install -c -m 0644 etc/servers.local /usr/src/tmp/fdns-buildroot//etc/fdns/servers.local; fi;" # systemd service unit install -Dm0644 etc/fdns.service /usr/src/tmp/fdns-buildroot/lib/systemd/system/fdns.service # man pages echo "**********************************" ********************************** echo fdns.1 nxdomain.1 fdns.1 nxdomain.1 echo "**********************************" ********************************** install -m 0755 -d /usr/src/tmp/fdns-buildroot//usr/share/man/man1 for man in fdns.1 nxdomain.1; do \ rm -f $man.gz; \ gzip -9n $man; \ case "$man" in \ *.1) install -c -m 0644 $man.gz /usr/src/tmp/fdns-buildroot//usr/share/man/man1/; ;; \ esac; \ done rm -f fdns.1 nxdomain.1 fdns.1.gz nxdomain.1.gz # bash completion install -m 0755 -d /usr/src/tmp/fdns-buildroot//usr/share/bash-completion/completions install -c -m 0644 src/bash_completion/fdns.bash_completion /usr/src/tmp/fdns-buildroot//usr/share/bash-completion/completions/fdns make[1]: Leaving directory '/usr/src/RPM/BUILD/fdns-0.9.72' make: Leaving directory '/usr/src/RPM/BUILD/fdns-0.9.72' + /usr/lib/rpm/brp-alt Cleaning files in /usr/src/tmp/fdns-buildroot (auto) Verifying and fixing files in /usr/src/tmp/fdns-buildroot (binconfig,pkgconfig,libtool,desktop,gnuconfig) Checking contents of files in /usr/src/tmp/fdns-buildroot/ (default) Compressing files in /usr/src/tmp/fdns-buildroot (auto) Verifying systemd units in /usr/src/tmp/fdns-buildroot Adjusting library links in /usr/src/tmp/fdns-buildroot ./lib: (from :0) Verifying ELF objects in /usr/src/tmp/fdns-buildroot (arch=normal,fhs=normal,lfs=relaxed,lint=relaxed,rpath=normal,stack=normal,textrel=normal,unresolved=normal) Splitting links to aliased files under /{,s}bin in /usr/src/tmp/fdns-buildroot Executing(%check): /bin/sh -e /usr/src/tmp/rpm-tmp.16684 + umask 022 + /bin/mkdir -p /usr/src/RPM/BUILD + cd /usr/src/RPM/BUILD + cd fdns-0.9.72 + export PATH=/usr/src/bin:/bin:/usr/bin:/usr/X11R6/bin:/usr/games:/usr/src/tmp/fdns-buildroot/usr/bin + PATH=/usr/src/bin:/bin:/usr/bin:/usr/X11R6/bin:/usr/games:/usr/src/tmp/fdns-buildroot/usr/bin + export SHELL + export SERVER_LIST=/usr/src/tmp/fdns-buildroot/etc/fdns/servers + SERVER_LIST=/usr/src/tmp/fdns-buildroot/etc/fdns/servers + cd test/fdns + ./test-user.sh TESTING: help/man (test/fdns/help-man.exp) spawn /bin/bash fdns --server-list=/usr/src/tmp/fdns-buildroot/etc/fdns/servers --help [builder@localhost fdns]$ tmp [builder@localhost fdns]$ cat tmp FDNS(1) fdns man page FDNS(1) NAME fdns - Firejail DNS over HTTPS/TLS proxy SYNOPSIS Start the server (root user): fdns [OPTIONS] Start the monitor (regular user): fdns --monitor DESCRIPTION FDNS is an encrypted DNS proxy server for small networks and Linux desktops. To speed up the name resolution FDNS caches the responses, and uses a configurable adblocker and privacy filter to cut down the unnecessary traffic. We preconfigure FDNS with a large list of DoH/DoT service providers. For privacy reasons we use only services from non-logging providers. We prefer servers run out-of-pocket by students, engineers, open-source enthusiasts, privacy-oriented non-profit organizations, etc. Currently there are more than 100 such servers on our list. We also track a corporate category with several providers: Adguard, CleanBrowsing, Cloudflare, and Quad9. All have a non-logging privacy policy that will work in most parts of the world. The servers are organized using a simple geographically-aware tagging system. This allows the user to request specialized services such as adblocking, security, family filters, etc. Once started, FDNS chooses a server at random, as close geographically as possible. We derive the computer location from the timezone set- ting. There are no IP packets sent out to geolocation services. Three geographical zones are defined so far: Americas, AsiaPacific and Europe. Use --list=all option to print all the servers and the corre- sponding tags. OPTIONS --allow-all-queries Allow all DNS query types; by default only A queries are allowed. In case --ipv6 is set, AAAA queries are also allowed. --allow-expired-certs Allow expired SSL certificates during SSL connection. --allow-self-signed-certs Allow self-signed SSL certificates during SSL connection. Use this option for bringing up new servers. --blocklist=domain Block domain and return NXDOMAIN. Note: Blocking domains can also be requested in /etc/fdns/hosts file. This setting is global, and it will block the domains in all fdns instances running on your computer. Use --blocklist when you have multiple fdns proxies running, each instance with a different blocklist. Example: $ fdns --blocklist=fonts.googleaps.com --blocklist-file=filename Block all domains listed in the file. --cache-ttl=seconds Change DNS cache TTL, in seconds. By default we use a fixed cache TTL of 40 minutes. --certfile=filename Use an SSL certificate file in PEM format. By default we use the certificates installed by OpenSSL. Example: $ sudo fdns --certfile=/etc/ssl/certs/ca-certificates.crt --daemonize Detach from the controlling terminal and run as a Unix daemon. The typical way to start FDNS as network proxy is $ sudo fdns --proxy-addr-any --daemonize --debug Print debug messages. --debug-transport Print HTTP2 debug messages. --debug-ssl Print SSL/TLS debug messages. --details SSL connection information, HTTP headers and network traces are printed on the screen during the testing phase of the connec- tion. Example: $ fdns --test-server=cloudflare --details Testing server cloudflare Tags: anycast, Americas, AsiaPacific, Europe URL: https://cloudflare-dns.com/dns-query Bootstrap IP address: 1.1.1.1 Port: 443 TLSv1.3, ALPN h2, SNI no HTTP Header: ----------------------------- | (HPACK dynamic table size: 4096) | :status: 200 | server: cloudflare | date: Mon, 19 Jun 2023 11:20:53 GMT | content-type: application/dns-message | access-control-allow-origin: * | content-length: 77 | cf-ray: 7d9b62a62ff3ff84-BOS ----------------------------- SSL/TLS connection: 519.42 ms Network Trace: -----> rx 60 bytes: IP + TCP + TLS + H2-WINDOW-UPDATE -----> rx 187 bytes: IP + TCP + TLS + H2-HEADERS + H2-DATA (end stream) DoH query average: 64.38 ms Header uncompressed | compressed | ratio: 185 | 28 | 6.61:1 DoH/Do53 bandwidth ratio: 2.50 Keepalive: 40 seconds Testing completed --disable-local-doh Disable DoH services for applications running on the local net- work. NOTE: Applications can still use an external DoH server if they have a hardcoded IP-Address. If you realy want to block other DoH connection you must use your firewall. --disable-syslog Disable system logging. --forwarder=domain@address Conditional domain forwarding to a different DNS server. Example: $ sudo fdns --forwarder=libre@66.70.228.164 The proxy will forward all .libre domains to OpenNIC server at 66.70.228.164. --help, -?, -h Print command-line options and exit. --ipv6 Allow AAAA requests. Use this option if you have Internet IPv6 connectivity. By default IPv6 queries are disabled. --keepalive=value Use this session keepalive value instead of the one in the server file. A query for example.com domain is initiated if there is no DNS query activity in order to keep the HTTP 2 con- nection open. For most servers we are using values between 25 and 40 seconds. In many cases you can bump the keepalive above 120 seconds. Example: $ sudo fdns --keepalive=120 --server=coudflare --list List the DoH service providers available in your current zone. Example: $ fdns --list Current zone: Europe 42l - France, Europe https://42l.fr aaflalo - Netherlands, Europe, adblocker https://www.aaflalo.me appliedprivacy - Austria, Europe https://appliedprivacy.net bortzmeyer - France, Europe https://www.bortzmeyer.org/doh-bortzmeyer-fr-policy.html cznic - Czechia, Europe https://www.nic.cz/odvr/ [...] --list=server-name|tag|all List the available DoH service providers based on a tag, server all done TESTING: list (test/fdns/list.exp) spawn /bin/bash fdns --server-list=/usr/src/tmp/fdns-buildroot/etc/fdns/servers --list=Americas [builder@localhost fdns]$ = set:qnGrzyfd3jHZqSZFS8l8ebHc4, libcrypto.so.3(OPENSSL_3.0.0)(64bit), libseccomp.so.2()(64bit) >= set:if7f4J0jiklXcvnd, libssl.so.3()(64bit) >= set:niBO2kc09mkc4KYpwhoW303K4Zu7NRYbJdVtHN8G4RkUpKaxnJZc, libssl.so.3(OPENSSL_3.0.0)(64bit), rtld(GNU_HASH) Requires(rpmlib): rpmlib(SetVersions) Finding debuginfo files (using /usr/lib/rpm/find-debuginfo-files) Executing: /bin/sh -e /usr/src/tmp/rpm-tmp.JQYXPj Creating fdns-debuginfo package Processing files: fdns-debuginfo-0.9.72-alt1 Finding Provides (using /usr/lib/rpm/find-provides) Executing: /bin/sh -e /usr/src/tmp/rpm-tmp.UKkL5l find-provides: running scripts (debuginfo) Finding Requires (using /usr/lib/rpm/find-requires) Executing: /bin/sh -e /usr/src/tmp/rpm-tmp.qywCUs find-requires: running scripts (debuginfo) Requires: fdns = 0.9.72-alt1, /usr/lib/debug/lib64/ld-linux-x86-64.so.2.debug, debug64(libc.so.6), debug64(libcrypto.so.3), debug64(libseccomp.so.2), debug64(libssl.so.3) Adding to fdns-debuginfo a strict dependency on fdns Wrote: /usr/src/RPM/RPMS/x86_64/fdns-0.9.72-alt1.x86_64.rpm (w2T16.xzdio) Wrote: /usr/src/RPM/RPMS/x86_64/fdns-debuginfo-0.9.72-alt1.x86_64.rpm (w2.lzdio) 5.30user 4.08system 0:15.08elapsed 62%CPU (0avgtext+0avgdata 66536maxresident)k 0inputs+0outputs (0major+601560minor)pagefaults 0swaps 3.94user 3.10system 0:33.36elapsed 21%CPU (0avgtext+0avgdata 129932maxresident)k 2088inputs+0outputs (0major+238799minor)pagefaults 0swaps