Spec URL: https://download.copr.fedorainfracloud.org/results/aheath1992/coredns/srpm-builds/11095443/coredns.spec
SRPM URL: https://download.copr.fedorainfracloud.org/results/aheath1992/coredns/srpm-builds/11095443/coredns-1.14.7-1.fc44.src.rpm

Description:
CoreDNS is a DNS server that chains plugins. Each plugin performs a DNS
function, such as serving zone data from file, caching, forwarding to an
upstream resolver, or exporting metrics. Plugins are enabled and ordered
through a Corefile, letting a single server act as an authoritative
name server, a recursive cache, or a service-discovery backend.

Fedora Account System Username: aheath1992

Koji scratch build (all primary arches green, including s390x):
https://koji.fedoraproject.org/koji/taskinfo?taskID=151038287

fedora-review result: no issues. rpmlint: 0 errors, 4 warnings, all expected:
  - non-standard-uid / non-standard-gid on /var/lib/coredns -- correct for a
    daemon with a sysusers-allocated account.
  - invalid-url Source1 -- the vendor tarball is generated by
    go_vendor_archive, not downloaded. Normal for go-vendor-tools packages.
  - post-without-tmpfile-creation -- false positive in rpmlint 2.8, which
    does not recognise %tmpfiles_create_package. rpmlint 2.10 is quiet.

## Notes for the reviewer

**Vendored dependencies.** Packaged with go-vendor-tools per the Go
packaging guidelines. 209 bundled(golang(...)) Provides and 665 vendored
license files are generated from vendor/modules.txt. The upstream tarball
sha256 matches github.com/coredns/coredns v1.14.7 exactly.

**CC0-1.0 in the License tag.** This comes from
vendor/github.com/zeebo/blake3, pulled in transitively by
caddyserver/certmagic. CC0 was reclassified allowed-content-only for code in
July 2022, but this exact module is already bundled by several packages in
Fedora today -- caddy, forgejo, gopass, nuclei, openbao and rclone. caddy's
License tag is near-identical to this one:

    Apache-2.0 AND BSD-2-Clause AND BSD-2-Clause-Views AND BSD-3-Clause
    AND CC0-1.0 AND ISC AND MIT AND MPL-2.0

Raising it here proactively rather than leaving it to be discovered.

**The eight manual license overrides** in go-vendor-tools.toml have been
verified: every path exists, every sha256sum matches, and the aggregate
expression recomputed with `go_vendor_license report expression` is
byte-identical to the License: tag.

**%check is enabled** and runs everything except ./test/, which holds
integration tests requiring a live network and an etcd instance. 92 test
packages pass offline, verified on x86_64 and s390x.

**Known runtime interaction with systemd-resolved.** Fedora enables
resolved, which holds 127.0.0.53:53. CoreDNS does not set SO_REUSEADDR, so
the default wildcard listener cannot bind while resolved is running:

    ListenPacket: listen udp :53: bind: address already in use

This is inherent to running two resolvers rather than a packaging defect.
README.Fedora ships in %doc and documents the three ways out (bind to a
specific address, DNSStubListener=no, or disable resolved). The shipped
Corefile also enables the loop plugin so that a forward loop aborts at
startup with a clear error instead of spinning.


Reproducible: Always