Hi,

On 01.03.2019 18:31, Michael Tremer wrote:
> Hi,
> 
>> On 1 Mar 2019, at 17:28, Matthias Fischer <matthias.fischer(a)ipfire.org> wrote:
>> 
>> Hi,
>> 
>> Building current 'bind 9.11.6' suddenly fails with the following errors:
>> 
>> ***SNIP***
>> checking for perl... /usr/bin/perl
>> checking for python... no
>> checking for python3... no
>> checking for python3.7... no
>> checking for python3.6... no
>> checking for python3.5... no
>> checking for python3.4... no
>> checking for python3.3... no
>> checking for python3.2... no
>> checking for python2... no
>> checking for python2.7... no
>> checking for Python support... no
>> configure: error: Python required for dnssec-keymgr
>> make: *** [bind:76: /usr/src/log/bind-9.11.6] Error 1
>> ***SNAP***
> 
> We have python 2.7 which should be found here. Probably bind is built before Python is built?

It is. I tried building it *after* Python, but: see below.

> Have a look in config.log what went wrong during detection...

***SNIP***
...
checking for python2... /usr/bin/python2
checking if /usr/bin/python2 is python2 version >= 2.7 or python3
version >= 3.2... yes
checking Python module 'argparse'... yes
checking Python module 'ply'... no
checking for python2.7... /usr/bin/python2.7
checking if /usr/bin/python2.7 is python2 version >= 2.7 or python3
version >= 3.2... yes
checking Python module 'argparse'... yes
checking Python module 'ply'... no
checking for Python support... no
configure: error: Python required for dnssec-keymgr
make: *** [bind:76: /usr/src/log/bind-9.11.6] Error 1
...
***SNAP***

What is meant with "module 'ply'"? I can't find it.

>> Sorry, I'm not sure: do we need 'dnssec-keymgr'? Or should I compile
>> bind with '--without-python’?
> 
> No, we do not need that tool. We don’t use bind to sign any DNSSEC zones.

Ok. Adding '--without-python'.

>> Excerpt from 'configure'-help:
>> "# Python is also optional but required by default so that dnssec-keymgr
>> # gets installed unless explicitly prevented by the user using
>> # --without-python.”
> 
> I guess disabling works.

Yes. It does:

***SNIP***
...
checking for Python support... disabled
...
***SNAP***

;-)

Best,
Matthias