On 2026-09-30, Kapetanakis Giannis <[email protected]> wrote: > We rely on nsd and unbound from base for our DNS infrastructure, so I'd like > to understand how updates to them are handled for -stable.
they're updated when people are available to evaluate the changes, do the update, test, prepare patches for -stable, test those, build syspatches, etc. repeat for unbound->unwind sync. these are a bit of a pain to do because we either need to do a complete version update, or figure out which upstream patches are needed (not always obvious from git commit history) and how they fit together etc. even just figuring out which issues affect our build is annoying when the fixes stack up. whichever way, there are manual processes and several people involved in making it happen. if you need faster updates for fixes for some reason, it might be easier to run DNS daemons from ports (e.g. powerdns and powerdns-recursor), in many cases it's a lot easier to backport these to -stable branches ...
