packages icon indicating copy to clipboard operation
packages copied to clipboard
verified publisher icon openwrt

coredns: separate the server from wgsd to general purpose package

Open vooon opened this issue 6 months ago • 10 comments

📦 Package Details

Maintainer: @vooon

Description:

  • Add coredns package 1.13.2
  • Make wgsd-coredns package transitional to coredns with wgsd plugin enabled
  • Make coredns plugin list configurable, disable heavy plugins by default and add wgsd plugin
  • Place the service into ujail
  • Alternative solution to #26879

🧪 Run Testing Details

  • OpenWrt Version: master
  • OpenWrt Target/Subtarget: x86_64 glibc
  • OpenWrt Device: x86_64 VM

✅ Formalities

  • [x] I have reviewed the CONTRIBUTING.md file for detailed contributing guidelines.

vooon avatar Jul 05 '25 18:07 vooon

@BKPepe i think this one solution better, but i don't know how to make a transition package because wgsd-coredns should not only +coredns but also make CONFIG_COREDNS_PLUGIN_WGSD=y.

vooon avatar Jul 05 '25 18:07 vooon

Out of curiosity I've implemented wgsd on the Ucode, it much smaller and i also added support for AmneziaWG. https://github.com/vooon/wgsd-ucode

vooon avatar Jul 12 '25 15:07 vooon

CC: @GeorgeSapkin @BKPepe @1715173329

The changes from the initial patch:

  1. Made wgsd-coredns transitional package to coredns, so old configs transition clearly
  2. Jailed the service. CoreDNS do not write files, but depending on your config you may need to access some extra files, e.g. zones, dnssec keys, so ro_mount allow user to grant access to extra files/dirs.

vooon avatar Sep 07 '25 08:09 vooon

@vooon: It is a nice PR :) Hope it will be reviewed...

There is a new version with CVE fixes:

  • https://github.com/coredns/coredns/releases

Neustradamus avatar Oct 25 '25 07:10 Neustradamus

@Neustradamus it's already 1.13.1.

vooon avatar Oct 26 '25 10:10 vooon

@vooon: Thanks for the description update!

It is the moment to contact OpenWrt team?

Neustradamus avatar Oct 26 '25 13:10 Neustradamus

@Neustradamus maybe. Rebased to fix formalities.

vooon avatar Oct 26 '25 14:10 vooon

@1715173329 @GeorgeSapkin there a little change since last review - i've added netbox plugin, which i'm thinking to use.

vooon avatar Nov 15 '25 10:11 vooon

Can you reword the commit subject to something like:

coredns: separate the server from wgsd

so it passes formalities and CI can build the package?

GeorgeSapkin avatar Dec 11 '25 14:12 GeorgeSapkin

@GeorgeSapkin done.

I've updated version to 1.13.2 and also added fanout plugin.

vooon avatar Dec 11 '25 18:12 vooon