chiark / gitweb /
hosts.lisp, distorted.lisp: artist is on the untrusted network.
[zones] / Makefile
CommitLineData
5c420db9
MW
1### -*-makefile-*-
2###
3### Makefile for the DNS zones I maintain.
4###
5### (c) 2011 Mark Wooding
6
7###--------------------------------------------------------------------------
8### Silent-rules machinery.
9
10V = 0
11v_tag = $(call v_tag_$V,$1)
12v_tag_0 = @printf " %-6s %s\n" "$1" "$@";
13
14V_AT = $(V_AT_$V)
15V_AT_0 = @
16
17###--------------------------------------------------------------------------
18### Programs and options.
19
d7af5ae7 20## Zone checking.
5c420db9
MW
21CHECKZONE = named-checkzone -i full \
22 -k fail -M fail -n fail -S fail -W fail
23
d7af5ae7
MW
24## Zone installation.
25MASTER = localhost
38c2de7c
MW
26inside_MASTER = precision
27
28
d7af5ae7
MW
29ifeq ($(MASTER),localhost)
30ZONEINST = userv zoneconf install
31else
32ZONEINST = ssh zoneconf@$(MASTER)
33endif
34
5c420db9
MW
35###--------------------------------------------------------------------------
36### Utility functions.
37
38dir-nosl = $(patsubst %/,%,$(dir $1))
39
40###--------------------------------------------------------------------------
41### Keeping all of the files straight.
42
43## Establish a default target. We'll sort out what it does later.
44all:
45.PHONY: all
46
47## Things to clean.
48CLEANFILES =
49CLEANDIRS =
50REALCLEANFILES = $(CLEANFILES)
51REALCLEANDIRS = $(CLEANDIRS)
52
53## We work in terms of `zonesets'. Each one corresponds to a Lisp source
54## file to be passed to `zone'. A zoneset has a number of different nets
55## associated with it, in the variable zoneset_NETS, and we must run it
56## through `zone' once for each net. The zoneset will make a number of
57## zones, listed in zoneset_ZONES.
58ZONESETS =
59
60###--------------------------------------------------------------------------
61### The distorted.org.uk zones.
62
63ZONESETS += distorted
64
4a487d58 65distorted_VIEWS = inside outside
38c2de7c 66distorted_outside_NETS = dmz jump
2d396faa 67distorted_inside_NETS = any unsafe colo vpn
5c420db9 68
b420e5ee 69distorted_all_ZONES += distorted.org.uk
74180153 70distorted_all_ZONES += 199.29.172.in-addr.arpa
5c420db9
MW
71
72###--------------------------------------------------------------------------
61097cd6 73### Other zones.
5c420db9 74
61097cd6 75## harlequin.org.uk
5c420db9 76ZONESETS += harlequin
c0430253 77harlequin_VIEWS = outside
5c420db9
MW
78harlequin_all_ZONES = harlequin.org.uk
79
61097cd6 80## felixpearce.com
39c01832 81ZONESETS += felixpearce
c0430253 82felixpearce_VIEWS = outside
39c01832
MW
83felixpearce_all_ZONES = felixpearce.com
84
8dcb3700
MW
85## binswood.org.uk
86ZONESETS += binswood
87binswood_VIEWS = outside
88binswood_all_ZONES += binswood.org.uk
89binswood_all_ZONES += 27.165.10.in-addr.arpa
90
5c420db9
MW
91###--------------------------------------------------------------------------
92### Zone construction machinery.
93
94ZONE = zone
95V_ZONE = $(call v_tag,ZONE)$(ZONE)
96
97.SECONDEXPANSION: #sorry
98
99## For each net/zoneset pair, we make a stamp file net/zoneset.stamp to
100## remember that we've made the corresponding zones.
101ALL_ZONESTAMPS = $(foreach s,$(ZONESETS), \
102 $(patsubst %,%/$s.zonestamp,$($s_VIEWS)))
103$(ALL_ZONESTAMPS) : %.zonestamp : $$(notdir $$*).lisp hosts.lisp
104 $(V_AT)mkdir -p $(dir $*)
105 $(V_ZONE) -d$(dir $*) -fview/$(call dir-nosl,$*)$(hack \
d7af5ae7
MW
106 hack) $(addprefix -s, \
107 $($(notdir $*)_$(call dir-nosl,$*)_NETS)) $<
5c420db9
MW
108 $(V_AT)touch $@
109all: $(ALL_ZONESTAMPS)
110CLEANFILES += $(sort $(foreach s,$(ZONESETS), \
111 $(foreach v,$($s_VIEWS), \
112 $v/*.zonestamp $v/*.zone)))
113REALCLEANFILES += $(sort $(foreach s,$(ZONESETS), \
114 $(foreach v,$($s_VIEWS), \
115 $v/*.serial)))
116REALCLEANDIRS += $(sort $(foreach s,$(ZONESETS),$($s_VIEWS)))
117
118## Now explain that each generated zone file depends on the corresponding
119## zonestamp. This is where things start getting a little hairy.
120$(foreach s,$(ZONESETS), \
121 $(foreach v,$($s_VIEWS), \
122 $(foreach z,$($s_all_ZONES) $($s_$v_ZONES), \
123 $(eval $v/$z.zone: $v/$s.zonestamp))))
124
125## Now we have to check the individual zone files.
126ALL_ZONECHECKS = $(foreach s,$(ZONESETS), \
127 $(foreach v,$($s_VIEWS), \
128 $(foreach z,$($s_all_ZONES) $($s_$v_ZONES), \
129 $v/$z.check)))
130$(ALL_ZONECHECKS) : %.check : %.zone
131 $(call v_tag,CHECK)\
132 { $(CHECKZONE) $(notdir $*) $^ || kill $$$$; } | \
133 { grep -Ev 'loaded serial|OK' || :; }
134check: $(ALL_ZONECHECKS)
135.PHONY: check $(ALL_ZONECHECKS)
136
d7af5ae7
MW
137## Finally we have to install the zone files.
138ALL_INSTALLS = $(foreach s,$(ZONESETS), \
139 $(foreach v,$($s_VIEWS), \
140 $(foreach z,$($s_all_ZONES) $($s_$v_ZONES), \
141 $v/$z.inst)))
142$(ALL_INSTALLS) : %.inst : %.check
143 $(call v_tag,INST)$(ZONEINST) \
144 $(call dir-nosl,$*) $(notdir $*) <$*.zone
145install: $(ALL_INSTALLS)
146.PHONY: install $(ALL_INSTALLS)
147
5c420db9
MW
148## Files to clean.
149clean:
150 rm -f $(CLEANFILES)
151 [ "$(CLEANDIRS)x" = x ] || rmdir $(CLEANDIRS) || :
152realclean:
153 rm -f $(REALCLEANFILES)
154 [ "$(REALCLEANDIRS)x" = x ] || rmdir $(REALCLEANDIRS) || :
155.PHONY: clean realclean
156
157###----- That's all, folks --------------------------------------------------