Re: Problem upgrading 9.18 to 9.20: dnstap doesnt work

On Sat, Jun 27, 2026 at 11:52:48AM -0700, Fred Morris wrote:
! Hopefully you're referring to BSD itself...
! =

! On Sat, 27 Jun 2026, Peter 'PMc' Much wrote:
! > =

! > On Fri, Jun 26, 2026 at 05:57:15PM -0700, Fred Morris wrote:
! > ! Apologies in advance, I realize you're trying to run on BSD, and I on=
ly run
! > ! / test on Linux so it may not work. -- FWM
! > =

! > That wouldn't normally be a problem. But it doesn't fit on disk.
! > I gave up when it started to compile rust (the machine has 500m ram and
! > 10g disk)
! =

! ShoDoHFlo (https://github.com/m3047/shodohflo) doesn't have any dependency
! on rust. If that's occurring on account of ShoDoHFlo I'd like to know abo=
ut
! your tool / build chain and the provenance of what you downloaded.

I don't know ShoDoflo, I just tried to run Your script dnstap2json.py,
as is. So I installed python311, and then the script complained:
"ModuleNotFoundError: No module named 'dns'"

I found this page explaining the problem:
https://itsourcecode.com/modulenotfounderror/modulenotfounderror-no-module-=
named-dns-solved/

I found the required package in /usr/ports/dns/py-dnspython, and
the prereqs:

root@wand:/usr/ports/dns/py-dnspython # make build-depends-list
/usr/ports/devel/py-hatchling
/usr/ports/lang/python311
/usr/ports/devel/py-build
/usr/ports/devel/py-installer

root@wand:/usr/ports/dns/py-dnspython # make run-depends-list
/usr/ports/www/py-h2
/usr/ports/www/py-httpcore
/usr/ports/www/py-httpx
/usr/ports/www/py-aioquic
/usr/ports/dns/py-idna
/usr/ports/net/py-trio
/usr/ports/security/py-cryptography
/usr/ports/lang/python311

Now this is not a recursive listing, and when we go on and check into
the security/py-cryptography prereq, we get this:

root@wand:/usr/ports/security/py-cryptography # make build-depends-list
/usr/ports/devel/py-cffi
/usr/ports/devel/py-maturin
/usr/ports/devel/py-setuptools
/usr/ports/lang/rust
/usr/ports/devel/pkgconf
/usr/ports/lang/python311
/usr/ports/devel/py-build
/usr/ports/devel/py-installer

So yes, it needs rust at least for building. And I remember other
discussions also, where people complained that py-cryptography now
requires rust, so this is probably not a mistake.

It wouldn't be a real problem either, I could just run the build on the
deploy machine. But that one is a 40-core 22-disk xeon here in my hall
(in Wiesbaden/Germany). And here we currently have a little bit of a
problem with the thermal ceiling, will say I am seeing >55=B0C in the
actual air output when it does compute.

Anyway, Ondrey now pushed me into a promising direction. I looked into
truss and sometimes the socket seems to open successfully, and
sometimes I see an EPERM. Seeing an error is a good thing here.
Probably at some point the named honors "-u bind" and switches UID.
This needs a bit of analysis, and is likely solveable from that..

Then also, if I had Your python script at the time when I did setup
the logging, I would probably have enjoyed it. Running it with the
regularly provided tools is, well, possible somehow, but it's a nuisance.

cheerio,
PMc
-- =

Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from=
 this list.