search

netblue30 / fdns

Firejail DNS-over-HTTPS Proxy Server
GNU General Public License v3.0
115 stars 29 forks source link

fdns resolver processes getting killed by seccomp - syscall 270 (pselect6) #70

Open TmrwBg opened 2 years ago

TmrwBg commented 2 years ago

Hello,

this issue appeared after a recent update to my system (bullseye). When I start fdns, it gets instantly killed by seccomp. How can I solve this issue? I've noticed that similar issue appeared about 1.5 h earlier to on archlinux, but solution doesn't seem to work for me.

Testing server dnsforfamily
   Tags: family, Germany, Europe
   SSL/TLS connection: 442.18 ms
   DoH query average: 71.49 ms
   DoH/Do53 bandwidth ratio: 3.33
   Keepalive: 140 to 170 seconds

Testing fallback server: quad9 (9.9.9.9) - 36.46 ms

fdns starting
connecting to dnsforfamily server
listening on 127.1.1.1
346 filter entries added from /etc/fdns/trackers
7415 filter entries added from /etc/fdns/fp-trackers
50788 filter entries added from /etc/fdns/adblocker
10265 filter entries added from /etc/fdns/coinblocker
45 filter entries added from /etc/fdns/bulkmailers
(1) Alert: SSL3 alert write:warning:close notify
(0) Alert: SSL3 alert write:warning:close notify
ip 95.217.213.94
18:22:58 (1) SSL connection opened to 95.217.213.94
ip 95.217.213.94
18:22:58 (0) SSL connection opened to 95.217.213.94
18:22:58 (1) h2 transport up
Error: fdns resolver process 1 killed by seccomp - syscall 270 (pselect6)
18:22:58 (1) Error: fdns resolver process 1 killed by seccomp - syscall 270 (pselect6)
Error: resolver 1 (pid 3364) terminated, restarting it...
Error: fdns resolver process 0 killed by seccomp - syscall 270 (pselect6)
18:22:58 (0) h2 transport up
18:22:58 (0) Error: fdns resolver process 0 killed by seccomp - syscall 270 (pselect6)
(1) Alert: SSL3 alert write:warning:close notify
Error: resolver 0 (pid 3363) terminated, restarting it...
ip 95.217.213.94
18:23:02 (1) SSL connection opened to 95.217.213.94
18:23:02 (1) h2 transport up
Error: fdns resolver process 1 killed by seccomp - syscall 270 (pselect6)
18:23:02 (1) Error: fdns resolver process 1 killed by seccomp - syscall 270 (pselect6)
346 filter entries added from /etc/fdns/trackers
7415 filter entries added from /etc/fdns/fp-trackers
50788 filter entries added from /etc/fdns/adblocker
10265 filter entries added from /etc/fdns/coinblocker
45 filter entries added from /etc/fdns/bulkmailers
(0) Alert: SSL3 alert write:warning:close notify
Error: resolver 1 (pid 3367) terminated, restarting it...
ip 95.217.213.94
18:23:05 (0) SSL connection opened to 95.217.213.94
Error: fdns resolver process 0 killed by seccomp - syscall 270 (pselect6)
18:23:05 (0) h2 transport up
18:23:05 (0) Error: fdns resolver process 0 killed by seccomp - syscall 270 (pselect6)
(1) Alert: SSL3 alert write:warning:close notify
Error: resolver 0 (pid 3369) terminated, restarting it...
ip 95.217.213.94
18:23:08 (1) SSL connection opened to 95.217.213.94
18:23:08 (1) h2 transport up
Error: fdns resolver process 1 killed by seccomp - syscall 270 (pselect6)
18:23:08 (1) Error: fdns resolver process 1 killed by seccomp - syscall 270 (pselect6)

Grateful for any help

rusty-snake commented 2 years ago

How can I solve this issue?

Update fdns or add it (pselect6) manually to /etc/fdns/resolver.seccomp.

Fixed by #60.

arankaren commented 1 year ago

Same issue on linux-lts 5.15.54, please support for linux-lts 5.15.54

$ grep PRETTY_NAME /etc/os-release
PRETTY_NAME="Alpine Linux v3.16"
rusty-snake commented 1 year ago
  1. This is not necessarily a kernel version problem, it can also be say openssl version.
  2. This is fixed upstream. v0.9.66 is the first release containing the fix. Update fdns or add pselect6 to /etc/fdns/resolver.seccomp.
arankaren commented 1 year ago

I already have the latest version 0.9.68, but this does not work

$ apk info fdns
fdns-0.9.68-r1 description:
Firejail DNS-over-HTTPS proxy server

fdns-0.9.68-r1 webpage:
https://github.com/netblue30/fdns

fdns-0.9.68-r1 installed size:
2456 KiB

cat /etc/fdns/resolver.seccomp output:

clock_gettime,fcntl,bind,brk,clock_nanosleep,close,connect,dup,exit_group,fstat,getpid,getrandom,getsockname,gettimeofday,ioctl,kill,mmap,_newselect,nanosleep,open,openat,poll,read,recvfrom,recvmsg,rt_sigprocmask,select,sendmmsg,sendto,setsockopt,sigreturn,socket,stat,time,uname,wait4,write,writev,fstat64,pselect6,newfstatat
rusty-snake commented 1 year ago

Are you sure it's the same issue and not a similar one? Did you checked that it is pselect6?

astounds commented 1 year ago

APKBUILD

pkgname=fdns
pkgver=0.9.68
pkgrel=1
pkgdesc="Firejail DNS-over-HTTPS proxy server"
arch="all"
license='GPL-3'
url="https://github.com/netblue30/fdns"
makedepends="libseccomp-dev libressl-dev"
depends="libseccomp libressl"
subpackages="$pkgname-doc $pkgname-openrc $pkgname-bash-completion"
optdepends="bash-completion: bash completion
            firejail: seamless integration support'"
source="https://github.com/netblue30/fdns/releases/download/v${pkgver}/${pkgname}-${pkgver}.tar.xz
        https://github.com/netblue30/fdns/releases/download/v${pkgver}/${pkgname}-${pkgver}.tar.xz.asc
        fdns.initd
        fdns.confd"
validpgpkeys='F951164995F5C4006A73411E2CCB36ADFC5849A7'

build() {
  cd "${srcdir}/${pkgname}-${pkgver}"
  ./configure --prefix=/usr
  make
}

package() {
  cd "${srcdir}/${pkgname}-${pkgver}"
  make DESTDIR="$pkgdir" install
  # Remove systemD files
  rm -f "${pkgdir}/etc/${pkgname}/fdns.service"
  # OpenRC files
  install -Dm755 "${srcdir}/fdns.initd" "${pkgdir}/etc/init.d/fdns"
  install -Dm644 "${srcdir}/fdns.confd" "${pkgdir}/etc/conf.d/fdns"
}

sha512sums="
4b41ef2f3620313a4831cb81585e054270a99148ba1fd94f602f7d01fbf11968e1f07d63e9f9421b7387a2dc57d872eae94c1ba45b2459f869c115ee5419e7d4  fdns-0.9.68.tar.xz
e8bc2a1445dc1bfa1a1e36424ceb239c3064dcc0b241a985607c65e846206c232585dd80db9cc1d276d6235167ee6992e84180c75323ee5415be3ae58e712996  fdns-0.9.68.tar.xz.asc
77ec63393e95afd4de4a47f9de35a57835d28340f384a5c6a246f25ef297d2f0bbd96d5825f7330adbd8ac21dc8fffbbef2650531dbcbd3cdd2d68b8b559d23a  fdns.initd
0578e6dec5463368e8dfc627f4f8deff52c67d057f81fb75b616bf0a287507547425da4db3fef3ec06dbdda8183d7ff43e7b0fac7fcba023102719998637b81b  fdns.confd
"

Maybe error into:

./configure: line 3218: EXTRA_CFLAGS+= -fstack-protector-strong: not found

Logs compilation


error: No such remote 'origin'
error: No such remote 'origin'
>>> fdns: Building repo/fdns 0.9.68-r1 (using abuild 3.9.0-r0) started Fri, 18 Nov 2022 04:53:48 +0800
fatal: bad revision 'HEAD'
>>> fdns: Checking sanity of /home/snowden/Lab/alpinebuild/repo/fdns/APKBUILD...
>>> fdns: Analyzing dependencies...
>>> fdns: Installing for build: build-base libseccomp libressl libseccomp-dev libressl-dev
(1/8) Installing libressl3.5-libcrypto (3.5.3-r0)
(2/8) Installing libressl3.5-libssl (3.5.3-r0)
(3/8) Installing libressl3.5-libtls (3.5.3-r0)
(4/8) Installing libressl (3.5.3-r0)
(5/8) Installing linux-headers (5.16.7-r1)
(6/8) Installing libseccomp-dev (2.5.2-r1)
(7/8) Installing libressl-dev (3.5.3-r0)
(8/8) Installing .makedepends-fdns (20221117.205349)
Executing busybox-1.35.0-r17.trigger
OK: 2971 MiB in 761 packages
>>> fdns: Cleaning up srcdir
>>> fdns: Cleaning up pkgdir
>>> fdns: Fetching https://github.com/netblue30/fdns/releases/download/v0.9.68/fdns-0.9.68.tar.xz
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:--  0:00:01 --:--:--     0
100  591k  100  591k    0     0   153k      0  0:00:03  0:00:03 --:--:--  242k
>>> fdns: Fetching https://github.com/netblue30/fdns/releases/download/v0.9.68/fdns-0.9.68.tar.xz.asc
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:--  0:00:01 --:--:--     0
100   488  100   488    0     0    179      0  0:00:02  0:00:02 --:--:--   414
>>> fdns: Fetching https://github.com/netblue30/fdns/releases/download/v0.9.68/fdns-0.9.68.tar.xz
>>> fdns: Fetching https://github.com/netblue30/fdns/releases/download/v0.9.68/fdns-0.9.68.tar.xz.asc
>>> fdns: Checking sha512sums...
fdns-0.9.68.tar.xz: OK
fdns-0.9.68.tar.xz.asc: OK
fdns.initd: OK
fdns.confd: OK
libre.patch: OK
>>> fdns: Unpacking /var/cache/distfiles/fdns-0.9.68.tar.xz...
patching file etc/servers
patching file etc/servers.local
patching file src/fdns/server.c
patching file src/man/fdns.txt
patching file src/man/nxdomain.txt
patching file src/nxdomain/nxdomain.c
checking for gcc... gcc
checking whether the C compiler works... yes
checking for C compiler default output file name... a.out
checking for suffix of executables... 
checking whether we are cross compiling... no
checking for suffix of object files... o
checking whether we are using the GNU C compiler... yes
checking whether gcc accepts -g... yes
checking for gcc option to accept ISO C89... none needed
checking for a BSD-compatible install... /usr/bin/install -c
checking for ranlib... ranlib
checking whether C compiler accepts -mindirect-branch=thunk... yes
./configure: line 3110: EXTRA_CFLAGS+= -mindirect-branch=thunk: not found
checking whether C compiler accepts -mretpoline... no
checking whether C compiler accepts -fstack-clash-protection... yes
./configure: line 3182: EXTRA_CFLAGS+= -fstack-clash-protection: not found
checking whether C compiler accepts -fstack-protector-strong... yes
./configure: line 3218: EXTRA_CFLAGS+= -fstack-protector-strong: not found
checking for main in -lpthread... yes
checking how to run the C preprocessor... gcc -E
checking for grep that handles long lines and -e... /bin/grep
checking for egrep... /bin/grep -E
checking for ANSI C header files... yes
checking for sys/types.h... yes
checking for sys/stat.h... yes
checking for stdlib.h... yes
checking for string.h... yes
checking for memory.h... yes
checking for strings.h... yes
checking for inttypes.h... yes
checking for stdint.h... yes
checking for unistd.h... yes
checking pthread.h usability... yes
checking pthread.h presence... yes
checking for pthread.h... yes
checking for pkg-config... pkg-config
checking whether compiling and linking against OpenSSL works... yes
OpenSSL library found
checking for main in -lseccomp... yes
checking seccomp.h usability... yes
checking seccomp.h presence... yes
checking for seccomp.h... yes
configure: creating ./config.status
config.status: creating Makefile
config.status: creating src/common.mk
config.status: creating src/fdns/Makefile
config.status: creating src/nxdomain/Makefile

Configuration options:
   prefix: /usr
   sysconfdir: /etc
   systemd directory: /etc/fdns
   Spectre compiler patch: yes
   apparmor: 
   seccomp: -DHAVE_SECCOMP
   EXTRA_LDFLAGS: 
   EXTRA_CFLAGS: 
   fatal warnings: 
   Gcov instrumentation: 

make -C src/fdns
make -C src/nxdomain
./mkman.sh 0.9.68 src/man/fdns.txt fdns.1
./mkman.sh 0.9.68 src/man/nxdomain.txt nxdomain.1
make[1]: Entering directory '/home/snowden/Lab/alpinebuild/repo/fdns/src/fdns-0.9.68/src/nxdomain'
gcc -Os -fomit-frame-pointer -ggdb  -O2 -DVERSION='"0.9.68"'    -DHAVE_SECCOMP -DPREFIX='"/usr"'  -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security   -c nxdomain.c -o nxdomain.o
make[1]: Entering directory '/home/snowden/Lab/alpinebuild/repo/fdns/src/fdns-0.9.68/src/fdns'
gcc -Os -fomit-frame-pointer -ggdb  -O2 -DVERSION='"0.9.68"'    -DHAVE_SECCOMP -DPREFIX='"/usr"'  -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security   -c cache.c -o cache.o
gcc -Os -fomit-frame-pointer -ggdb  -O2 -DVERSION='"0.9.68"'    -DHAVE_SECCOMP -DPREFIX='"/usr"'  -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security   -c dns.c -o dns.o
gcc -Os -fomit-frame-pointer -ggdb  -O2 -DVERSION='"0.9.68"'    -DHAVE_SECCOMP -DPREFIX='"/usr"'  -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security   -c dnsdb.c -o dnsdb.o
gcc -Os -fomit-frame-pointer -ggdb  -O2 -DVERSION='"0.9.68"'    -DHAVE_SECCOMP -DPREFIX='"/usr"'  -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security   -c dot.c -o dot.o
gcc -Os -fomit-frame-pointer -ggdb  -O2 -DVERSION='"0.9.68"'    -DHAVE_SECCOMP -DPREFIX='"/usr"'  -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security   -c filter.c -o filter.o
gcc -Os -fomit-frame-pointer -ggdb  -O2 -DVERSION='"0.9.68"'    -DHAVE_SECCOMP -DPREFIX='"/usr"'  -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security   -c forwarder.c -o forwarder.o
gcc  -Wl,--as-needed,-O1,--sort-common -pie -Wl,-z,relro -Wl,-z,now -lpthread -lseccomp -o nxdomain nxdomain.o   
make[1]: Leaving directory '/home/snowden/Lab/alpinebuild/repo/fdns/src/fdns-0.9.68/src/nxdomain'
gcc -Os -fomit-frame-pointer -ggdb  -O2 -DVERSION='"0.9.68"'    -DHAVE_SECCOMP -DPREFIX='"/usr"'  -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security   -c frontend.c -o frontend.o
gcc -Os -fomit-frame-pointer -ggdb  -O2 -DVERSION='"0.9.68"'    -DHAVE_SECCOMP -DPREFIX='"/usr"'  -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security   -c h11.c -o h11.o
gcc -Os -fomit-frame-pointer -ggdb  -O2 -DVERSION='"0.9.68"'    -DHAVE_SECCOMP -DPREFIX='"/usr"'  -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security   -c h2.c -o h2.o
gcc -Os -fomit-frame-pointer -ggdb  -O2 -DVERSION='"0.9.68"'    -DHAVE_SECCOMP -DPREFIX='"/usr"'  -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security   -c hpack_static.c -o hpack_static.o
gcc -Os -fomit-frame-pointer -ggdb  -O2 -DVERSION='"0.9.68"'    -DHAVE_SECCOMP -DPREFIX='"/usr"'  -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security   -c huffman.c -o huffman.o
gcc -Os -fomit-frame-pointer -ggdb  -O2 -DVERSION='"0.9.68"'    -DHAVE_SECCOMP -DPREFIX='"/usr"'  -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security   -c lint.c -o lint.o
gcc -Os -fomit-frame-pointer -ggdb  -O2 -DVERSION='"0.9.68"'    -DHAVE_SECCOMP -DPREFIX='"/usr"'  -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security   -c log.c -o log.o
gcc -Os -fomit-frame-pointer -ggdb  -O2 -DVERSION='"0.9.68"'    -DHAVE_SECCOMP -DPREFIX='"/usr"'  -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security   -c main.c -o main.o
gcc -Os -fomit-frame-pointer -ggdb  -O2 -DVERSION='"0.9.68"'    -DHAVE_SECCOMP -DPREFIX='"/usr"'  -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security   -c net.c -o net.o
gcc -Os -fomit-frame-pointer -ggdb  -O2 -DVERSION='"0.9.68"'    -DHAVE_SECCOMP -DPREFIX='"/usr"'  -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security   -c procs.c -o procs.o
gcc -Os -fomit-frame-pointer -ggdb  -O2 -DVERSION='"0.9.68"'    -DHAVE_SECCOMP -DPREFIX='"/usr"'  -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security   -c resolver.c -o resolver.o
gcc -Os -fomit-frame-pointer -ggdb  -O2 -DVERSION='"0.9.68"'    -DHAVE_SECCOMP -DPREFIX='"/usr"'  -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security   -c security.c -o security.o
gcc -Os -fomit-frame-pointer -ggdb  -O2 -DVERSION='"0.9.68"'    -DHAVE_SECCOMP -DPREFIX='"/usr"'  -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security   -c server.c -o server.o
gcc -Os -fomit-frame-pointer -ggdb  -O2 -DVERSION='"0.9.68"'    -DHAVE_SECCOMP -DPREFIX='"/usr"'  -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security   -c shmem.c -o shmem.o
gcc -Os -fomit-frame-pointer -ggdb  -O2 -DVERSION='"0.9.68"'    -DHAVE_SECCOMP -DPREFIX='"/usr"'  -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security   -c ssl.c -o ssl.o
gcc -Os -fomit-frame-pointer -ggdb  -O2 -DVERSION='"0.9.68"'    -DHAVE_SECCOMP -DPREFIX='"/usr"'  -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security   -c timetrace.c -o timetrace.o
gcc -Os -fomit-frame-pointer -ggdb  -O2 -DVERSION='"0.9.68"'    -DHAVE_SECCOMP -DPREFIX='"/usr"'  -DSYSCONFDIR='"/etc/fdns"' -DLIBDIR='"/usr/lib"' -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security   -c whitelist.c -o whitelist.o
gcc  -Wl,--as-needed,-O1,--sort-common -pie -Wl,-z,relro -Wl,-z,now -lpthread -lseccomp -o fdns cache.o dns.o dnsdb.o dot.o filter.o forwarder.o frontend.o h11.o h2.o hpack_static.o huffman.o lint.o log.o main.o net.o procs.o resolver.o security.o server.o shmem.o ssl.o timetrace.o whitelist.o  -lssl -lcrypto -lrt -lseccomp  
make[1]: Leaving directory '/home/snowden/Lab/alpinebuild/repo/fdns/src/fdns-0.9.68/src/fdns'
>>> WARNING: fdns: APKBUILD does not run any tests!
    Alpine policy will soon require that packages have any relevant testsuites run during the build process.
    To fix, either define a check() function, or declare !check in $options to indicate the package does not have a testsuite.
>>> fdns: Entering fakeroot...
error: No such remote 'origin'
make -C src/fdns
make -C src/nxdomain
make[1]: Entering directory '/home/snowden/Lab/alpinebuild/repo/fdns/src/fdns-0.9.68/src/nxdomain'
make[1]: Nothing to be done for 'all'.
make[1]: Leaving directory '/home/snowden/Lab/alpinebuild/repo/fdns/src/fdns-0.9.68/src/nxdomain'
make[1]: Entering directory '/home/snowden/Lab/alpinebuild/repo/fdns/src/fdns-0.9.68/src/fdns'
make[1]: Nothing to be done for 'all'.
make[1]: Leaving directory '/home/snowden/Lab/alpinebuild/repo/fdns/src/fdns-0.9.68/src/fdns'
make realinstall
make[1]: Entering directory '/home/snowden/Lab/alpinebuild/repo/fdns/src/fdns-0.9.68'
# fdns executable
install -m 0755 -d /home/snowden/Lab/alpinebuild/repo/fdns/pkg/fdns//usr/bin
install -c -m 0755 src/fdns/fdns /home/snowden/Lab/alpinebuild/repo/fdns/pkg/fdns//usr/bin/.
install -c -m 0755 src/nxdomain/nxdomain /home/snowden/Lab/alpinebuild/repo/fdns/pkg/fdns//usr/bin/.
# documents
install -m 0755 -d /home/snowden/Lab/alpinebuild/repo/fdns/pkg/fdns//usr/share/doc/fdns
install -c -m 0644 COPYING /home/snowden/Lab/alpinebuild/repo/fdns/pkg/fdns//usr/share/doc/fdns/.
install -c -m 0644 README /home/snowden/Lab/alpinebuild/repo/fdns/pkg/fdns//usr/share/doc/fdns/.
install -c -m 0644 RELNOTES /home/snowden/Lab/alpinebuild/repo/fdns/pkg/fdns//usr/share/doc/fdns/.
# etc files
install -m 0755 -d /home/snowden/Lab/alpinebuild/repo/fdns/pkg/fdns/etc/fdns
install -m 0644 -t /home/snowden/Lab/alpinebuild/repo/fdns/pkg/fdns/etc/fdns etc/adblocker etc/coinblocker etc/fp-trackers etc/resolver.seccomp
install -m 0644 -t /home/snowden/Lab/alpinebuild/repo/fdns/pkg/fdns/etc/fdns etc/servers etc/trackers
# install server cusomization file
sh -c "if [ ! -f /home/snowden/Lab/alpinebuild/repo/fdns/pkg/fdns//etc/fdns/servers.local ]; then install -c -m 0644 etc/servers.local /home/snowden/Lab/alpinebuild/repo/fdns/pkg/fdns//etc/fdns/servers.local; fi;"
# systemd service unit
install -Dm0644 etc/fdns.service /home/snowden/Lab/alpinebuild/repo/fdns/pkg/fdns/etc/fdns/fdns.service
# man pages
echo "**********************************"
**********************************
echo fdns.1 nxdomain.1
fdns.1 nxdomain.1
echo "**********************************"
**********************************
install -m 0755 -d /home/snowden/Lab/alpinebuild/repo/fdns/pkg/fdns//usr/share/man/man1
for man in fdns.1 nxdomain.1; do \
    rm -f $man.gz; \
    gzip -9n $man; \
    case "$man" in \
        *.1) install -c -m 0644 $man.gz /home/snowden/Lab/alpinebuild/repo/fdns/pkg/fdns//usr/share/man/man1/; ;; \
    esac; \
done
rm -f fdns.1 nxdomain.1 fdns.1.gz nxdomain.1.gz
# bash completion
install -m 0755 -d /home/snowden/Lab/alpinebuild/repo/fdns/pkg/fdns//usr/share/bash-completion/completions
install -c -m 0644 src/bash_completion/fdns.bash_completion /home/snowden/Lab/alpinebuild/repo/fdns/pkg/fdns//usr/share/bash-completion/completions/fdns
make[1]: Leaving directory '/home/snowden/Lab/alpinebuild/repo/fdns/src/fdns-0.9.68'
>>> fdns-doc*: Running split function doc...
error: No such remote 'origin'
>>> fdns-doc*: Preparing subpackage fdns-doc...
>>> fdns-doc*: Running postcheck for fdns-doc
>>> fdns-openrc*: Running split function openrc...
error: No such remote 'origin'
>>> fdns-openrc*: Preparing subpackage fdns-openrc...
>>> fdns-openrc*: Running postcheck for fdns-openrc
>>> fdns-bash-completion*: Running split function bashcomp...
error: No such remote 'origin'
'/home/snowden/Lab/alpinebuild/repo/fdns/pkg/fdns/usr/share/bash-completion/completions' -> '/home/snowden/Lab/alpinebuild/repo/fdns/pkg/fdns-bash-completion/usr/share/bash-completion/completions'
>>> fdns-bash-completion*: Preparing subpackage fdns-bash-completion...
>>> fdns-bash-completion*: Running postcheck for fdns-bash-completion
>>> fdns*: Running postcheck for fdns
>>> fdns*: Preparing package fdns...
>>> fdns*: Stripping binaries
>>> fdns-bash-completion*: Scanning shared objects
>>> fdns-doc*: Scanning shared objects
>>> fdns-openrc*: Scanning shared objects
>>> fdns*: Scanning shared objects
>>> fdns-bash-completion*: Tracing dependencies...
>>> fdns-bash-completion*: Package size: 24.0 KB
>>> fdns-bash-completion*: Compressing data...
>>> fdns-bash-completion*: Create checksum...
error: No such remote 'origin'
>>> fdns-bash-completion*: Create fdns-bash-completion-0.9.68-r1.apk
>>> fdns-doc*: Tracing dependencies...
>>> fdns-doc*: Package size: 88.0 KB
>>> fdns-doc*: Compressing data...
>>> fdns-doc*: Create checksum...
error: No such remote 'origin'
>>> fdns-doc*: Create fdns-doc-0.9.68-r1.apk
>>> fdns-openrc*: Tracing dependencies...
>>> fdns-openrc*: Package size: 24.0 KB
>>> fdns-openrc*: Compressing data...
>>> fdns-openrc*: Create checksum...
error: No such remote 'origin'
>>> fdns-openrc*: Create fdns-openrc-0.9.68-r1.apk
>>> fdns*: Tracing dependencies...
    libseccomp
    libressl
    libressl3.5-libcrypto
    libressl3.5-libssl
    so:libc.musl-x86_64.so.1
    so:libseccomp.so.2
>>> fdns*: Package size: 2.4 MB
>>> fdns*: Compressing data...
>>> fdns*: Create checksum...
error: No such remote 'origin'
>>> fdns*: Create fdns-0.9.68-r1.apk
>>> fdns: Build complete at Fri, 18 Nov 2022 04:54:15 +0800 elapsed time 0h 0m 27s
>>> fdns: Cleaning up srcdir
>>> fdns: Cleaning up pkgdir
>>> fdns: Uninstalling dependencies...
(1/8) Purging .makedepends-fdns (20221117.205349)
(2/8) Purging libressl (3.5.3-r0)
(3/8) Purging libseccomp-dev (2.5.2-r1)
(4/8) Purging linux-headers (5.16.7-r1)
(5/8) Purging libressl-dev (3.5.3-r0)
(6/8) Purging libressl3.5-libssl (3.5.3-r0)
(7/8) Purging libressl3.5-libtls (3.5.3-r0)
(8/8) Purging libressl3.5-libcrypto (3.5.3-r0)
Executing busybox-1.35.0-r17.trigger
OK: 2931 MiB in 753 packages
>>> fdns: Updating the repo/x86_64 repository index...
>>> fdns: Signing the index...