Diff of the two buildlogs:

--
--- b1/build.log	2025-03-22 12:09:57.351573931 +0000
+++ b2/build.log	2025-03-22 12:19:12.142665615 +0000
@@ -1,6 +1,6 @@
 I: pbuilder: network access will be disabled during build
-I: Current time: Fri Mar 21 23:43:19 -12 2025
-I: pbuilder-time-stamp: 1742643799
+I: Current time: Sat Apr 25 08:33:00 +14 2026
+I: pbuilder-time-stamp: 1777055580
 I: Building the build Environment
 I: extracting base tarball [/var/cache/pbuilder/unstable-reproducible-base.tgz]
 I: copying local configuration
@@ -24,52 +24,84 @@
 dpkg-source: info: applying upstream/0001-mysql-use-MYSQL_TYPE_LONGLONG-on-64bit-platforms.patch
 I: Not using root during the build.
 I: Installing the build-deps
-I: user script /srv/workspace/pbuilder/587718/tmp/hooks/D02_print_environment starting
+I: user script /srv/workspace/pbuilder/851067/tmp/hooks/D01_modify_environment starting
+debug: Running on ionos15-amd64.
+I: Changing host+domainname to test build reproducibility
+I: Adding a custom variable just for the fun of it...
+I: Changing /bin/sh to bash
+'/bin/sh' -> '/bin/bash'
+lrwxrwxrwx 1 root root 9 Apr 24 18:33 /bin/sh -> /bin/bash
+I: Setting pbuilder2's login shell to /bin/bash
+I: Setting pbuilder2's GECOS to second user,second room,second work-phone,second home-phone,second other
+I: user script /srv/workspace/pbuilder/851067/tmp/hooks/D01_modify_environment finished
+I: user script /srv/workspace/pbuilder/851067/tmp/hooks/D02_print_environment starting
 I: set
-  BUILDDIR='/build/reproducible-path'
-  BUILDUSERGECOS='first user,first room,first work-phone,first home-phone,first other'
-  BUILDUSERNAME='pbuilder1'
-  BUILD_ARCH='amd64'
-  DEBIAN_FRONTEND='noninteractive'
-  DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=20 '
-  DISTRIBUTION='unstable'
-  HOME='/root'
-  HOST_ARCH='amd64'
+  BASH=/bin/sh
+  BASHOPTS=checkwinsize:cmdhist:complete_fullquote:extquote:force_fignore:globasciiranges:globskipdots:hostcomplete:interactive_comments:patsub_replacement:progcomp:promptvars:sourcepath
+  BASH_ALIASES=()
+  BASH_ARGC=()
+  BASH_ARGV=()
+  BASH_CMDS=()
+  BASH_LINENO=([0]="12" [1]="0")
+  BASH_LOADABLES_PATH=/usr/local/lib/bash:/usr/lib/bash:/opt/local/lib/bash:/usr/pkg/lib/bash:/opt/pkg/lib/bash:.
+  BASH_SOURCE=([0]="/tmp/hooks/D02_print_environment" [1]="/tmp/hooks/D02_print_environment")
+  BASH_VERSINFO=([0]="5" [1]="2" [2]="37" [3]="1" [4]="release" [5]="x86_64-pc-linux-gnu")
+  BASH_VERSION='5.2.37(1)-release'
+  BUILDDIR=/build/reproducible-path
+  BUILDUSERGECOS='second user,second room,second work-phone,second home-phone,second other'
+  BUILDUSERNAME=pbuilder2
+  BUILD_ARCH=amd64
+  DEBIAN_FRONTEND=noninteractive
+  DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=42 '
+  DIRSTACK=()
+  DISTRIBUTION=unstable
+  EUID=0
+  FUNCNAME=([0]="Echo" [1]="main")
+  GROUPS=()
+  HOME=/root
+  HOSTNAME=i-capture-the-hostname
+  HOSTTYPE=x86_64
+  HOST_ARCH=amd64
   IFS=' 	
   '
-  INVOCATION_ID='12aa7f1e8f4e4ddd96b5f164ed0e9115'
-  LANG='C'
-  LANGUAGE='en_US:en'
-  LC_ALL='C'
-  MAIL='/var/mail/root'
-  OPTIND='1'
-  PATH='/usr/sbin:/usr/bin:/sbin:/bin:/usr/games'
-  PBCURRENTCOMMANDLINEOPERATION='build'
-  PBUILDER_OPERATION='build'
-  PBUILDER_PKGDATADIR='/usr/share/pbuilder'
-  PBUILDER_PKGLIBDIR='/usr/lib/pbuilder'
-  PBUILDER_SYSCONFDIR='/etc'
-  PPID='587718'
-  PS1='# '
-  PS2='> '
+  INVOCATION_ID=531483c107084156b79e84b850297736
+  LANG=C
+  LANGUAGE=et_EE:et
+  LC_ALL=C
+  MACHTYPE=x86_64-pc-linux-gnu
+  MAIL=/var/mail/root
+  OPTERR=1
+  OPTIND=1
+  OSTYPE=linux-gnu
+  PATH=/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path
+  PBCURRENTCOMMANDLINEOPERATION=build
+  PBUILDER_OPERATION=build
+  PBUILDER_PKGDATADIR=/usr/share/pbuilder
+  PBUILDER_PKGLIBDIR=/usr/lib/pbuilder
+  PBUILDER_SYSCONFDIR=/etc
+  PIPESTATUS=([0]="0")
+  POSIXLY_CORRECT=y
+  PPID=851067
   PS4='+ '
-  PWD='/'
-  SHELL='/bin/bash'
-  SHLVL='2'
-  SUDO_COMMAND='/usr/bin/timeout -k 18.1h 18h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.DSOgePVl/pbuilderrc_Fwdh --distribution unstable --hookdir /etc/pbuilder/first-build-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/unstable-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.DSOgePVl/b1 --logfile b1/build.log pdns_4.9.4-2.dsc'
-  SUDO_GID='110'
-  SUDO_UID='105'
-  SUDO_USER='jenkins'
-  TERM='unknown'
-  TZ='/usr/share/zoneinfo/Etc/GMT+12'
-  USER='root'
-  _='/usr/bin/systemd-run'
-  http_proxy='http://46.16.76.132:3128'
+  PWD=/
+  SHELL=/bin/bash
+  SHELLOPTS=braceexpand:errexit:hashall:interactive-comments:posix
+  SHLVL=3
+  SUDO_COMMAND='/usr/bin/timeout -k 24.1h 24h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.DSOgePVl/pbuilderrc_MsMH --distribution unstable --hookdir /etc/pbuilder/rebuild-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/unstable-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.DSOgePVl/b2 --logfile b2/build.log pdns_4.9.4-2.dsc'
+  SUDO_GID=111
+  SUDO_UID=106
+  SUDO_USER=jenkins
+  TERM=unknown
+  TZ=/usr/share/zoneinfo/Etc/GMT-14
+  UID=0
+  USER=root
+  _='I: set'
+  http_proxy=http://213.165.73.152:3128
 I: uname -a
-  Linux ionos1-amd64 6.1.0-32-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.129-1 (2025-03-06) x86_64 GNU/Linux
+  Linux i-capture-the-hostname 6.12.12+bpo-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.12.12-1~bpo12+1 (2025-02-23) x86_64 GNU/Linux
 I: ls -l /bin
-  lrwxrwxrwx 1 root root 7 Mar  4 11:20 /bin -> usr/bin
-I: user script /srv/workspace/pbuilder/587718/tmp/hooks/D02_print_environment finished
+  lrwxrwxrwx 1 root root 7 Mar  4  2025 /bin -> usr/bin
+I: user script /srv/workspace/pbuilder/851067/tmp/hooks/D02_print_environment finished
  -> Attempting to satisfy build-dependencies
  -> Creating pbuilder-satisfydepends-dummy package
 Package: pbuilder-satisfydepends-dummy
@@ -495,7 +527,7 @@
 Get: 326 http://deb.debian.org/debian unstable/main amd64 ragel amd64 6.10-4 [1078 kB]
 Get: 327 http://deb.debian.org/debian unstable/main amd64 systemd-dev all 257.4-3 [71.7 kB]
 Get: 328 http://deb.debian.org/debian unstable/main amd64 unixodbc-dev amd64 2.3.12-2 [234 kB]
-Fetched 202 MB in 17s (12.2 MB/s)
+Fetched 202 MB in 3s (59.8 MB/s)
 Preconfiguring packages ...
 Selecting previously unselected package libsystemd-shared:amd64.
 (Reading database ... 
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 19807 files and directories currently installed.)
@@ -1569,8 +1601,8 @@
 Setting up tzdata (2025a-2) ...
 
 Current default time zone: 'Etc/UTC'
-Local time is now:      Sat Mar 22 11:46:30 UTC 2025.
-Universal Time is now:  Sat Mar 22 11:46:30 UTC 2025.
+Local time is now:      Fri Apr 24 18:33:55 UTC 2026.
+Universal Time is now:  Fri Apr 24 18:33:55 UTC 2026.
 Run 'dpkg-reconfigure tzdata' if you wish to change it.
 
 Setting up ragel (6.10-4) ...
@@ -1851,7 +1883,11 @@
 Building tag database...
  -> Finished parsing the build-deps
 I: Building the package
-I: Running cd /build/reproducible-path/pdns-4.9.4/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-genchanges -S  > ../pdns_4.9.4-2_source.changes
+I: user script /srv/workspace/pbuilder/851067/tmp/hooks/A99_set_merged_usr starting
+Not re-configuring usrmerge for unstable
+I: user script /srv/workspace/pbuilder/851067/tmp/hooks/A99_set_merged_usr finished
+hostname: Name or service not known
+I: Running cd /build/reproducible-path/pdns-4.9.4/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-genchanges -S  > ../pdns_4.9.4-2_source.changes
 dpkg-buildpackage: info: source package pdns
 dpkg-buildpackage: info: source version 4.9.4-2
 dpkg-buildpackage: info: source distribution unstable
@@ -1908,8 +1944,8 @@
 checking whether make sets $(MAKE)... yes
 checking whether make supports nested variables... yes
 checking xargs -n works... yes
-checking whether UID '1111' is supported by ustar format... yes
-checking whether GID '1111' is supported by ustar format... yes
+checking whether UID '2222' is supported by ustar format... yes
+checking whether GID '2222' is supported by ustar format... yes
 checking how to create a ustar tar archive... gnutar
 checking whether make supports the include directive... yes (GNU style)
 checking for gcc... gcc
@@ -2266,11 +2302,11 @@
 ## Platform. ##
 ## --------- ##
 
-hostname = ionos1-amd64
+hostname = i-capture-the-hostname
 uname -m = x86_64
-uname -r = 6.1.0-32-amd64
+uname -r = 6.12.12+bpo-amd64
 uname -s = Linux
-uname -v = #1 SMP PREEMPT_DYNAMIC Debian 6.1.129-1 (2025-03-06)
+uname -v = #1 SMP PREEMPT_DYNAMIC Debian 6.12.12-1~bpo12+1 (2025-02-23)
 
 /usr/bin/uname -p = unknown
 /bin/uname -X     = unknown
@@ -2288,6 +2324,7 @@
 PATH: /sbin/
 PATH: /bin/
 PATH: /usr/games/
+PATH: /i/capture/the/path/
 
 
 ## ----------- ##
@@ -2323,9 +2360,9 @@
 configure:4183: result: yes
 configure:4197: checking xargs -n works
 configure:4213: result: yes
-configure:4298: checking whether UID '1111' is supported by ustar format
+configure:4298: checking whether UID '2222' is supported by ustar format
 configure:4304: result: yes
-configure:4311: checking whether GID '1111' is supported by ustar format
+configure:4311: checking whether GID '2222' is supported by ustar format
 configure:4317: result: yes
 configure:4325: checking how to create a ustar tar archive
 configure:4336: tar --version
@@ -3112,7 +3149,7 @@
 configure:17186: result: immediate
 configure:17297: checking for shl_load
 configure:17297: gcc -o conftest -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -Wdate-time -D_FORTIFY_SOURCE=2 -Wl,-z,relro -Wl,-z,now conftest.c  >&5
-/usr/bin/ld: /tmp/ccFaQyaB.o: in function `main':
+/usr/bin/ld: /tmp/ccIAqb8T.o: in function `main':
 ././conftest.c:72:(.text.startup+0x9): undefined reference to `shl_load'
 collect2: error: ld returned 1 exit status
 configure:17297: $? = 1
@@ -3272,7 +3309,7 @@
 configure:17639: result: yes
 configure:17644: checking whether a statically linked program can dlopen itself
 configure:17725: gcc -o conftest -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -Wdate-time -D_FORTIFY_SOURCE=2 -DHAVE_DLFCN_H -Wl,-z,relro -Wl,-z,now -Wl,--export-dynamic -static conftest.c   >&5
-/usr/bin/ld: /tmp/ccpdHWHC.o: in function `main':
+/usr/bin/ld: /tmp/ccbsAQMe.o: in function `main':
 ././configure:17704:(.text.startup+0xd): warning: Using 'dlopen' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking
 configure:17728: $? = 0
 conftest: undefined symbol: _fnord
@@ -17223,7 +17260,7 @@
 configure:28471: result: yes
 configure:28477: checking for explicit_memset
 configure:28477: g++ -std=c++17 -o conftest -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -Wdate-time -D_FORTIFY_SOURCE=2 -Wl,-z,relro -Wl,-z,now conftest.cpp  >&5
-/usr/bin/ld: /tmp/ccMDMWJj.o: in function `main':
+/usr/bin/ld: /tmp/ccrshIgG.o: in function `main':
 ././conftest.cpp:127:(.text.startup+0x9): undefined reference to `explicit_memset'
 collect2: error: ld returned 1 exit status
 configure:28477: $? = 1
@@ -17361,7 +17398,7 @@
 configure:28477: result: no
 configure:28483: checking for memset_s
 configure:28483: g++ -std=c++17 -o conftest -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -Wdate-time -D_FORTIFY_SOURCE=2 -Wl,-z,relro -Wl,-z,now conftest.cpp  >&5
-/usr/bin/ld: /tmp/ccYaOd0g.o: in function `main':
+/usr/bin/ld: /tmp/ccpSPlWe.o: in function `main':
 ././conftest.cpp:127:(.text.startup+0x9): undefined reference to `memset_s'
 collect2: error: ld returned 1 exit status
 configure:28483: $? = 1
@@ -17543,7 +17580,7 @@
 configure:29656: result: yes
 configure:29667: checking for krb5_get_init_creds_opt_set_default_flags
 configure:29667: g++ -std=c++17 -o conftest -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -Wdate-time -D_FORTIFY_SOURCE=2 -Wl,-z,relro -Wl,-z,now conftest.cpp  >&5
-/usr/bin/ld: /tmp/ccjhwmB8.o: in function `main':
+/usr/bin/ld: /tmp/ccLYRSVO.o: in function `main':
 ././conftest.cpp:136:(.text.startup+0x9): undefined reference to `krb5_get_init_creds_opt_set_default_flags'
 collect2: error: ld returned 1 exit status
 configure:29667: $? = 1
@@ -18169,7 +18206,7 @@
   CONFIG_COMMANDS = 
   $ ./config.status 
 
-on ionos1-amd64
+on i-capture-the-hostname
 
 config.status:1579: creating Makefile
 config.status:1579: creating modules/Makefile
@@ -18848,7 +18885,7 @@
 SANITIZER_FLAGS=''
 SED='/usr/bin/sed'
 SET_MAKE=''
-SHELL='/bin/bash'
+SHELL='/bin/sh'
 SQLITE3_CFLAGS=''
 SQLITE3_FALSE='#'
 SQLITE3_LIBS='-lsqlite3 '
@@ -19121,7 +19158,7 @@
 configure:36655: OpenSSL ecdsa: yes
 make[1]: Leaving directory '/build/reproducible-path/pdns-4.9.4'
    dh_auto_build
-	make -j20
+	make -j42
 make[1]: Entering directory '/build/reproducible-path/pdns-4.9.4'
 make  all-recursive
 make[2]: Entering directory '/build/reproducible-path/pdns-4.9.4'
@@ -19129,33 +19166,33 @@
 make[3]: Entering directory '/build/reproducible-path/pdns-4.9.4/ext'
 Making all in arc4random
 make[4]: Entering directory '/build/reproducible-path/pdns-4.9.4/ext/arc4random'
-/bin/bash ../../libtool  --tag=CC   --mode=compile gcc -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -c -o arc4random.lo arc4random.c
-/bin/bash ../../libtool  --tag=CC   --mode=compile gcc -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -c -o arc4random_uniform.lo arc4random_uniform.c
-/bin/bash ../../libtool  --tag=CC   --mode=compile gcc -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -c -o bsd-getentropy.lo bsd-getentropy.c
-/bin/bash ../../libtool  --tag=CC   --mode=compile gcc -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -c -o explicit_bzero.lo explicit_bzero.c
+/bin/sh ../../libtool  --tag=CC   --mode=compile gcc -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -c -o arc4random.lo arc4random.c
+/bin/sh ../../libtool  --tag=CC   --mode=compile gcc -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -c -o arc4random_uniform.lo arc4random_uniform.c
+/bin/sh ../../libtool  --tag=CC   --mode=compile gcc -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -c -o bsd-getentropy.lo bsd-getentropy.c
+/bin/sh ../../libtool  --tag=CC   --mode=compile gcc -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -c -o explicit_bzero.lo explicit_bzero.c
 libtool: compile:  gcc -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -c arc4random_uniform.c  -fPIC -DPIC -o .libs/arc4random_uniform.o
-libtool: compile:  gcc -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -c arc4random.c  -fPIC -DPIC -o .libs/arc4random.o
 libtool: compile:  gcc -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -c explicit_bzero.c  -fPIC -DPIC -o .libs/explicit_bzero.o
 libtool: compile:  gcc -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -c bsd-getentropy.c  -fPIC -DPIC -o .libs/bsd-getentropy.o
-/bin/bash ../../libtool  --tag=CC   --mode=link gcc  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection  -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o libarc4random.la  arc4random.lo arc4random_uniform.lo bsd-getentropy.lo explicit_bzero.lo  
+libtool: compile:  gcc -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -c arc4random.c  -fPIC -DPIC -o .libs/arc4random.o
+/bin/sh ../../libtool  --tag=CC   --mode=link gcc  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection  -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o libarc4random.la  arc4random.lo arc4random_uniform.lo bsd-getentropy.lo explicit_bzero.lo  
 libtool: link: ar cr .libs/libarc4random.a .libs/arc4random.o .libs/arc4random_uniform.o .libs/bsd-getentropy.o .libs/explicit_bzero.o 
 libtool: link: ranlib .libs/libarc4random.a
 libtool: link: ( cd ".libs" && rm -f "libarc4random.la" && ln -s "../libarc4random.la" "libarc4random.la" )
 make[4]: Leaving directory '/build/reproducible-path/pdns-4.9.4/ext/arc4random'
 Making all in ipcrypt
 make[4]: Entering directory '/build/reproducible-path/pdns-4.9.4/ext/ipcrypt'
-/bin/bash ../../libtool  --tag=CC   --mode=compile gcc -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -c -o ipcrypt.lo ipcrypt.c
+/bin/sh ../../libtool  --tag=CC   --mode=compile gcc -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -c -o ipcrypt.lo ipcrypt.c
 libtool: compile:  gcc -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -c ipcrypt.c  -fPIC -DPIC -o .libs/ipcrypt.o
-/bin/bash ../../libtool  --tag=CC   --mode=link gcc  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection  -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o libipcrypt.la  ipcrypt.lo  
+/bin/sh ../../libtool  --tag=CC   --mode=link gcc  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection  -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o libipcrypt.la  ipcrypt.lo  
 libtool: link: ar cr .libs/libipcrypt.a .libs/ipcrypt.o 
 libtool: link: ranlib .libs/libipcrypt.a
 libtool: link: ( cd ".libs" && rm -f "libipcrypt.la" && ln -s "../libipcrypt.la" "libipcrypt.la" )
 make[4]: Leaving directory '/build/reproducible-path/pdns-4.9.4/ext/ipcrypt'
 Making all in json11
 make[4]: Entering directory '/build/reproducible-path/pdns-4.9.4/ext/json11'
-/bin/bash ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o json11.lo json11.cpp
+/bin/sh ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o json11.lo json11.cpp
 libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c json11.cpp  -fPIC -DPIC -o .libs/json11.o
-/bin/bash ../../libtool  --tag=CXX   --mode=link g++ -std=c++17  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"'  -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o libjson11.la  json11.lo  
+/bin/sh ../../libtool  --tag=CXX   --mode=link g++ -std=c++17  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"'  -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o libjson11.la  json11.lo  
 libtool: link: ar cr .libs/libjson11.a .libs/json11.o 
 libtool: link: ranlib .libs/libjson11.a
 libtool: link: ( cd ".libs" && rm -f "libjson11.la" && ln -s "../libjson11.la" "libjson11.la" )
@@ -19164,11 +19201,11 @@
 make[4]: Entering directory '/build/reproducible-path/pdns-4.9.4/ext/yahttp'
 Making all in yahttp
 make[5]: Entering directory '/build/reproducible-path/pdns-4.9.4/ext/yahttp/yahttp'
-/bin/bash ../../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../../..  -I../../.. -I../../.. -pthread  -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o reqresp.lo reqresp.cpp
-/bin/bash ../../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../../..  -I../../.. -I../../.. -pthread  -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o router.lo router.cpp
-libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../../.. -I../../.. -I../../.. -pthread -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c reqresp.cpp  -fPIC -DPIC -o .libs/reqresp.o
+/bin/sh ../../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../../..  -I../../.. -I../../.. -pthread  -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o reqresp.lo reqresp.cpp
+/bin/sh ../../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../../..  -I../../.. -I../../.. -pthread  -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o router.lo router.cpp
 libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../../.. -I../../.. -I../../.. -pthread -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c router.cpp  -fPIC -DPIC -o .libs/router.o
-/bin/bash ../../../libtool  --tag=CXX   --mode=link g++ -std=c++17  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"'  -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o libyahttp.la  reqresp.lo router.lo  
+libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../../.. -I../../.. -I../../.. -pthread -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c reqresp.cpp  -fPIC -DPIC -o .libs/reqresp.o
+/bin/sh ../../../libtool  --tag=CXX   --mode=link g++ -std=c++17  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"'  -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o libyahttp.la  reqresp.lo router.lo  
 libtool: link: ar cr .libs/libyahttp.a .libs/reqresp.o .libs/router.o 
 libtool: link: ranlib .libs/libyahttp.a
 libtool: link: ( cd ".libs" && rm -f "libyahttp.la" && ln -s "../libyahttp.la" "libyahttp.la" )
@@ -19187,10 +19224,10 @@
 make[4]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/bindbackend'
 make  all-am
 make[5]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/bindbackend'
-/bin/bash ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I../../pdns -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o bindbackend2.lo bindbackend2.cc
-/bin/bash ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I../../pdns -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o binddnssec.lo binddnssec.cc
-libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I../../pdns -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c bindbackend2.cc  -fPIC -DPIC -o .libs/bindbackend2.o
+/bin/sh ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I../../pdns -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o bindbackend2.lo bindbackend2.cc
+/bin/sh ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I../../pdns -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o binddnssec.lo binddnssec.cc
 libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I../../pdns -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c binddnssec.cc  -fPIC -DPIC -o .libs/binddnssec.o
+libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I../../pdns -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c bindbackend2.cc  -fPIC -DPIC -o .libs/bindbackend2.o
 In file included from ../../pdns/auth-catalogzone.hh:27,
                  from ../../pdns/dnsbackend.hh:48,
                  from bindbackend2.hh:42,
@@ -19213,41 +19250,37 @@
 ../../pdns/dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-/bin/bash ../../libtool  --tag=CXX   --mode=link g++ -std=c++17  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -module -avoid-version -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o libbindbackend.la -rpath /usr/lib/x86_64-linux-gnu/pdns bindbackend2.lo binddnssec.lo  
+/bin/sh ../../libtool  --tag=CXX   --mode=link g++ -std=c++17  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -module -avoid-version -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o libbindbackend.la -rpath /usr/lib/x86_64-linux-gnu/pdns bindbackend2.lo binddnssec.lo  
 libtool: link: g++ -std=c++17  -fPIC -DPIC -shared -nostdlib /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o  .libs/bindbackend2.o .libs/binddnssec.o   -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L/usr/lib/../lib -L/usr/lib/gcc/x86_64-linux-gnu/14/../../.. -lstdc++ -lm -lc -lgcc_s /usr/lib/gcc/x86_64-linux-gnu/14/crtendS.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crtn.o  -fstack-protector -g -O2 -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -Werror=format-security -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now   -Wl,-soname -Wl,libbindbackend.so -o .libs/libbindbackend.so
 libtool: link: ( cd ".libs" && rm -f "libbindbackend.la" && ln -s "../libbindbackend.la" "libbindbackend.la" )
 make[5]: Leaving directory '/build/reproducible-path/pdns-4.9.4/modules/bindbackend'
 make[4]: Leaving directory '/build/reproducible-path/pdns-4.9.4/modules/bindbackend'
 Making all in ldapbackend
 make[4]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/ldapbackend'
-/bin/bash ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o ldapauthenticator.lo ldapauthenticator.cc
-/bin/bash ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o ldapbackend.lo ldapbackend.cc
-/bin/bash ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o ldaputils.lo ldaputils.cc
-/bin/bash ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o native.lo native.cc
-/bin/bash ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o powerldap.lo powerldap.cc
-/bin/bash ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o primary.lo primary.cc
+/bin/sh ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o ldapauthenticator.lo ldapauthenticator.cc
+/bin/sh ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o ldapbackend.lo ldapbackend.cc
+/bin/sh ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o ldaputils.lo ldaputils.cc
+/bin/sh ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o native.lo native.cc
+/bin/sh ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o powerldap.lo powerldap.cc
+/bin/sh ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o primary.lo primary.cc
 libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c ldapauthenticator.cc  -fPIC -DPIC -o .libs/ldapauthenticator.o
 libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c powerldap.cc  -fPIC -DPIC -o .libs/powerldap.o
-libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c ldapbackend.cc  -fPIC -DPIC -o .libs/ldapbackend.o
 libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c primary.cc  -fPIC -DPIC -o .libs/primary.o
+libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c ldapbackend.cc  -fPIC -DPIC -o .libs/ldapbackend.o
 libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c ldaputils.cc  -fPIC -DPIC -o .libs/ldaputils.o
 libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c native.cc  -fPIC -DPIC -o .libs/native.o
 In file included from ../../pdns/auth-catalogzone.hh:27,
                  from ../../pdns/dnsbackend.hh:48,
                  from ldapbackend.hh:37,
-                 from ldapbackend.cc:28:
+                 from native.cc:24:
 ../../pdns/dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 ../../pdns/dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
       |                                                   ^
-../../pdns/dnssecinfra.hh: In member function 'std::string DNSCryptoKeyEngine::convertToPEMString() const':
-../../pdns/dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
-   93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
-      |                                                   ^
 In file included from ../../pdns/auth-catalogzone.hh:27,
                  from ../../pdns/dnsbackend.hh:48,
                  from ldapbackend.hh:37,
-                 from native.cc:24:
+                 from primary.cc:24:
 ../../pdns/dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 ../../pdns/dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
@@ -19256,10 +19289,14 @@
 ../../pdns/dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
+../../pdns/dnssecinfra.hh: In member function 'std::string DNSCryptoKeyEngine::convertToPEMString() const':
+../../pdns/dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
+   93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
+      |                                                   ^
 In file included from ../../pdns/auth-catalogzone.hh:27,
                  from ../../pdns/dnsbackend.hh:48,
                  from ldapbackend.hh:37,
-                 from primary.cc:24:
+                 from ldapbackend.cc:28:
 ../../pdns/dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 ../../pdns/dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
@@ -19268,17 +19305,17 @@
 ../../pdns/dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-/bin/bash ../../libtool  --tag=CXX   --mode=link g++ -std=c++17  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -module -avoid-version -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o libldapbackend.la -rpath /usr/lib/x86_64-linux-gnu/pdns ldapauthenticator.lo ldapbackend.lo ldaputils.lo native.lo powerldap.lo primary.lo -lldap_r -llber -lkrb5 
+/bin/sh ../../libtool  --tag=CXX   --mode=link g++ -std=c++17  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -module -avoid-version -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o libldapbackend.la -rpath /usr/lib/x86_64-linux-gnu/pdns ldapauthenticator.lo ldapbackend.lo ldaputils.lo native.lo powerldap.lo primary.lo -lldap_r -llber -lkrb5 
 libtool: link: g++ -std=c++17  -fPIC -DPIC -shared -nostdlib /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o  .libs/ldapauthenticator.o .libs/ldapbackend.o .libs/ldaputils.o .libs/native.o .libs/powerldap.o .libs/primary.o   -lldap_r -llber -lkrb5 -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L/usr/lib/../lib -L/usr/lib/gcc/x86_64-linux-gnu/14/../../.. -lstdc++ -lm -lc -lgcc_s /usr/lib/gcc/x86_64-linux-gnu/14/crtendS.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crtn.o  -fstack-protector -g -O2 -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -Werror=format-security -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now   -Wl,-soname -Wl,libldapbackend.so -o .libs/libldapbackend.so
 libtool: link: ( cd ".libs" && rm -f "libldapbackend.la" && ln -s "../libldapbackend.la" "libldapbackend.la" )
 make[4]: Leaving directory '/build/reproducible-path/pdns-4.9.4/modules/ldapbackend'
 Making all in lmdbbackend
 make[4]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/lmdbbackend'
-/bin/bash ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread   -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o lmdbbackend.lo lmdbbackend.cc
-/bin/bash ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread   -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o ../../ext/lmdb-safe/lmdb-safe.lo ../../ext/lmdb-safe/lmdb-safe.cc
-/bin/bash ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread   -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o ../../ext/lmdb-safe/lmdb-typed.lo ../../ext/lmdb-safe/lmdb-typed.cc
-libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c ../../ext/lmdb-safe/lmdb-safe.cc  -fPIC -DPIC -o ../../ext/lmdb-safe/.libs/lmdb-safe.o
+/bin/sh ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread   -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o lmdbbackend.lo lmdbbackend.cc
+/bin/sh ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread   -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o ../../ext/lmdb-safe/lmdb-safe.lo ../../ext/lmdb-safe/lmdb-safe.cc
+/bin/sh ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread   -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o ../../ext/lmdb-safe/lmdb-typed.lo ../../ext/lmdb-safe/lmdb-typed.cc
 libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c lmdbbackend.cc  -fPIC -DPIC -o .libs/lmdbbackend.o
+libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c ../../ext/lmdb-safe/lmdb-safe.cc  -fPIC -DPIC -o ../../ext/lmdb-safe/.libs/lmdb-safe.o
 libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c ../../ext/lmdb-safe/lmdb-typed.cc  -fPIC -DPIC -o ../../ext/lmdb-safe/.libs/lmdb-typed.o
 In file included from ../../pdns/auth-catalogzone.hh:27,
                  from ../../pdns/dnsbackend.hh:48,
@@ -19291,16 +19328,16 @@
 ../../pdns/dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-/bin/bash ../../libtool  --tag=CXX   --mode=link g++ -std=c++17  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -module -avoid-version  -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o liblmdbbackend.la -rpath /usr/lib/x86_64-linux-gnu/pdns ../../ext/lmdb-safe/lmdb-safe.lo ../../ext/lmdb-safe/lmdb-typed.lo lmdbbackend.lo -llmdb  -lboost_serialization -lsystemd  
+/bin/sh ../../libtool  --tag=CXX   --mode=link g++ -std=c++17  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -module -avoid-version  -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o liblmdbbackend.la -rpath /usr/lib/x86_64-linux-gnu/pdns ../../ext/lmdb-safe/lmdb-safe.lo ../../ext/lmdb-safe/lmdb-typed.lo lmdbbackend.lo -llmdb  -lboost_serialization -lsystemd  
 libtool: link: g++ -std=c++17  -fPIC -DPIC -shared -nostdlib /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o  ../../ext/lmdb-safe/.libs/lmdb-safe.o ../../ext/lmdb-safe/.libs/lmdb-typed.o .libs/lmdbbackend.o   -llmdb -lboost_serialization -lsystemd -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L/usr/lib/../lib -L/usr/lib/gcc/x86_64-linux-gnu/14/../../.. -lstdc++ -lm -lc -lgcc_s /usr/lib/gcc/x86_64-linux-gnu/14/crtendS.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crtn.o  -fstack-protector -g -O2 -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -Werror=format-security -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now   -Wl,-soname -Wl,liblmdbbackend.so -o .libs/liblmdbbackend.so
 libtool: link: ( cd ".libs" && rm -f "liblmdbbackend.la" && ln -s "../liblmdbbackend.la" "liblmdbbackend.la" )
 make[4]: Leaving directory '/build/reproducible-path/pdns-4.9.4/modules/lmdbbackend'
 Making all in lua2backend
 make[4]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/lua2backend'
-/bin/bash ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I/usr/include/luajit-2.1  -I../../ext/luawrapper/include -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o lua2api2.lo lua2api2.cc
-/bin/bash ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I/usr/include/luajit-2.1  -I../../ext/luawrapper/include -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o lua2backend.lo lua2backend.cc
-libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I/usr/include/luajit-2.1 -I../../ext/luawrapper/include -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c lua2backend.cc  -fPIC -DPIC -o .libs/lua2backend.o
+/bin/sh ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I/usr/include/luajit-2.1  -I../../ext/luawrapper/include -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o lua2api2.lo lua2api2.cc
+/bin/sh ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I/usr/include/luajit-2.1  -I../../ext/luawrapper/include -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o lua2backend.lo lua2backend.cc
 libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I/usr/include/luajit-2.1 -I../../ext/luawrapper/include -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c lua2api2.cc  -fPIC -DPIC -o .libs/lua2api2.o
+libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I/usr/include/luajit-2.1 -I../../ext/luawrapper/include -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c lua2backend.cc  -fPIC -DPIC -o .libs/lua2backend.o
 In file included from ../../pdns/auth-catalogzone.hh:27,
                  from ../../pdns/dnsbackend.hh:48,
                  from lua2backend.hh:23,
@@ -19325,14 +19362,14 @@
 ../../pdns/dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-/bin/bash ../../libtool  --tag=CXX   --mode=link g++ -std=c++17  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -module -avoid-version -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o liblua2backend.la -rpath /usr/lib/x86_64-linux-gnu/pdns lua2api2.lo lua2backend.lo -lluajit-5.1  
+/bin/sh ../../libtool  --tag=CXX   --mode=link g++ -std=c++17  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -module -avoid-version -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o liblua2backend.la -rpath /usr/lib/x86_64-linux-gnu/pdns lua2api2.lo lua2backend.lo -lluajit-5.1  
 libtool: link: g++ -std=c++17  -fPIC -DPIC -shared -nostdlib /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o  .libs/lua2api2.o .libs/lua2backend.o   -lluajit-5.1 -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L/usr/lib/../lib -L/usr/lib/gcc/x86_64-linux-gnu/14/../../.. -lstdc++ -lm -lc -lgcc_s /usr/lib/gcc/x86_64-linux-gnu/14/crtendS.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crtn.o  -fstack-protector -g -O2 -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -Werror=format-security -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now   -Wl,-soname -Wl,liblua2backend.so -o .libs/liblua2backend.so
 libtool: link: ( cd ".libs" && rm -f "liblua2backend.la" && ln -s "../liblua2backend.la" "liblua2backend.la" )
 make[4]: Leaving directory '/build/reproducible-path/pdns-4.9.4/modules/lua2backend'
 Making all in pipebackend
 make[4]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/pipebackend'
-/bin/bash ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o coprocess.lo coprocess.cc
-/bin/bash ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o pipebackend.lo pipebackend.cc
+/bin/sh ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o coprocess.lo coprocess.cc
+/bin/sh ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o pipebackend.lo pipebackend.cc
 libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c coprocess.cc  -fPIC -DPIC -o .libs/coprocess.o
 libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c pipebackend.cc  -fPIC -DPIC -o .libs/pipebackend.o
 In file included from ../../pdns/auth-catalogzone.hh:27,
@@ -19346,14 +19383,14 @@
 ../../pdns/dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-/bin/bash ../../libtool  --tag=CXX   --mode=link g++ -std=c++17  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -module -avoid-version -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o libpipebackend.la -rpath /usr/lib/x86_64-linux-gnu/pdns coprocess.lo pipebackend.lo  
+/bin/sh ../../libtool  --tag=CXX   --mode=link g++ -std=c++17  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -module -avoid-version -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o libpipebackend.la -rpath /usr/lib/x86_64-linux-gnu/pdns coprocess.lo pipebackend.lo  
 libtool: link: g++ -std=c++17  -fPIC -DPIC -shared -nostdlib /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o  .libs/coprocess.o .libs/pipebackend.o   -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L/usr/lib/../lib -L/usr/lib/gcc/x86_64-linux-gnu/14/../../.. -lstdc++ -lm -lc -lgcc_s /usr/lib/gcc/x86_64-linux-gnu/14/crtendS.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crtn.o  -fstack-protector -g -O2 -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -Werror=format-security -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now   -Wl,-soname -Wl,libpipebackend.so -o .libs/libpipebackend.so
 libtool: link: ( cd ".libs" && rm -f "libpipebackend.la" && ln -s "../libpipebackend.la" "libpipebackend.la" )
 make[4]: Leaving directory '/build/reproducible-path/pdns-4.9.4/modules/pipebackend'
 Making all in gmysqlbackend
 make[4]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/gmysqlbackend'
-/bin/bash ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I/usr/include/mariadb -I/usr/include/mariadb/mysql -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o gmysqlbackend.lo gmysqlbackend.cc
-/bin/bash ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I/usr/include/mariadb -I/usr/include/mariadb/mysql -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o smysql.lo smysql.cc
+/bin/sh ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I/usr/include/mariadb -I/usr/include/mariadb/mysql -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o gmysqlbackend.lo gmysqlbackend.cc
+/bin/sh ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I/usr/include/mariadb -I/usr/include/mariadb/mysql -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o smysql.lo smysql.cc
 libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I/usr/include/mariadb -I/usr/include/mariadb/mysql -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c gmysqlbackend.cc  -fPIC -DPIC -o .libs/gmysqlbackend.o
 libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I/usr/include/mariadb -I/usr/include/mariadb/mysql -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c smysql.cc  -fPIC -DPIC -o .libs/smysql.o
 In file included from ../../pdns/auth-catalogzone.hh:27,
@@ -19367,14 +19404,14 @@
 ../../pdns/dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-/bin/bash ../../libtool  --tag=CXX   --mode=link g++ -std=c++17  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -module -avoid-version -L/usr/lib  -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o libgmysqlbackend.la -rpath /usr/lib/x86_64-linux-gnu/pdns gmysqlbackend.lo smysql.lo -L/usr/lib/x86_64-linux-gnu/ -lmariadb 
+/bin/sh ../../libtool  --tag=CXX   --mode=link g++ -std=c++17  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -module -avoid-version -L/usr/lib  -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o libgmysqlbackend.la -rpath /usr/lib/x86_64-linux-gnu/pdns gmysqlbackend.lo smysql.lo -L/usr/lib/x86_64-linux-gnu/ -lmariadb 
 libtool: link: g++ -std=c++17  -fPIC -DPIC -shared -nostdlib /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o  .libs/gmysqlbackend.o .libs/smysql.o   -L/usr/lib -L/usr/lib/x86_64-linux-gnu/ -lmariadb -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L/usr/lib/../lib -L/usr/lib/gcc/x86_64-linux-gnu/14/../../.. -lstdc++ -lm -lc -lgcc_s /usr/lib/gcc/x86_64-linux-gnu/14/crtendS.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crtn.o  -fstack-protector -g -O2 -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -Werror=format-security -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now   -Wl,-soname -Wl,libgmysqlbackend.so -o .libs/libgmysqlbackend.so
 libtool: link: ( cd ".libs" && rm -f "libgmysqlbackend.la" && ln -s "../libgmysqlbackend.la" "libgmysqlbackend.la" )
 make[4]: Leaving directory '/build/reproducible-path/pdns-4.9.4/modules/gmysqlbackend'
 Making all in godbcbackend
 make[4]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/godbcbackend'
-/bin/bash ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I/usr/include -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o godbcbackend.lo godbcbackend.cc
-/bin/bash ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I/usr/include -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sodbc.lo sodbc.cc
+/bin/sh ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I/usr/include -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o godbcbackend.lo godbcbackend.cc
+/bin/sh ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I/usr/include -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sodbc.lo sodbc.cc
 libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I/usr/include -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c godbcbackend.cc  -fPIC -DPIC -o .libs/godbcbackend.o
 libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I/usr/include -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c sodbc.cc  -fPIC -DPIC -o .libs/sodbc.o
 In file included from ../../pdns/auth-catalogzone.hh:27,
@@ -19388,16 +19425,16 @@
 ../../pdns/dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-/bin/bash ../../libtool  --tag=CXX   --mode=link g++ -std=c++17  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -module -avoid-version -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o libgodbcbackend.la -rpath /usr/lib/x86_64-linux-gnu/pdns godbcbackend.lo sodbc.lo -L/usr/lib/x86_64-linux-gnu -lodbc 
+/bin/sh ../../libtool  --tag=CXX   --mode=link g++ -std=c++17  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -module -avoid-version -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o libgodbcbackend.la -rpath /usr/lib/x86_64-linux-gnu/pdns godbcbackend.lo sodbc.lo -L/usr/lib/x86_64-linux-gnu -lodbc 
 libtool: link: g++ -std=c++17  -fPIC -DPIC -shared -nostdlib /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o  .libs/godbcbackend.o .libs/sodbc.o   -L/usr/lib/x86_64-linux-gnu -lodbc -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/../lib -L/usr/lib/gcc/x86_64-linux-gnu/14/../../.. -lstdc++ -lm -lc -lgcc_s /usr/lib/gcc/x86_64-linux-gnu/14/crtendS.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crtn.o  -fstack-protector -g -O2 -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -Werror=format-security -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now   -Wl,-soname -Wl,libgodbcbackend.so -o .libs/libgodbcbackend.so
 libtool: link: ( cd ".libs" && rm -f "libgodbcbackend.la" && ln -s "../libgodbcbackend.la" "libgodbcbackend.la" )
 make[4]: Leaving directory '/build/reproducible-path/pdns-4.9.4/modules/godbcbackend'
 Making all in gpgsqlbackend
 make[4]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/gpgsqlbackend'
-/bin/bash ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I/usr/include/postgresql  -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o gpgsqlbackend.lo gpgsqlbackend.cc
-/bin/bash ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I/usr/include/postgresql  -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o spgsql.lo spgsql.cc
-libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I/usr/include/postgresql -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c spgsql.cc  -fPIC -DPIC -o .libs/spgsql.o
+/bin/sh ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I/usr/include/postgresql  -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o gpgsqlbackend.lo gpgsqlbackend.cc
+/bin/sh ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I/usr/include/postgresql  -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o spgsql.lo spgsql.cc
 libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I/usr/include/postgresql -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c gpgsqlbackend.cc  -fPIC -DPIC -o .libs/gpgsqlbackend.o
+libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I/usr/include/postgresql -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c spgsql.cc  -fPIC -DPIC -o .libs/spgsql.o
 In file included from ../../pdns/auth-catalogzone.hh:27,
                  from ../../pdns/dnsbackend.hh:48,
                  from gpgsqlbackend.cc:29:
@@ -19409,13 +19446,13 @@
 ../../pdns/dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-/bin/bash ../../libtool  --tag=CXX   --mode=link g++ -std=c++17  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -module -avoid-version -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o libgpgsqlbackend.la -rpath /usr/lib/x86_64-linux-gnu/pdns gpgsqlbackend.lo spgsql.lo -lpq  
+/bin/sh ../../libtool  --tag=CXX   --mode=link g++ -std=c++17  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -module -avoid-version -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o libgpgsqlbackend.la -rpath /usr/lib/x86_64-linux-gnu/pdns gpgsqlbackend.lo spgsql.lo -lpq  
 libtool: link: g++ -std=c++17  -fPIC -DPIC -shared -nostdlib /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o  .libs/gpgsqlbackend.o .libs/spgsql.o   -lpq -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L/usr/lib/../lib -L/usr/lib/gcc/x86_64-linux-gnu/14/../../.. -lstdc++ -lm -lc -lgcc_s /usr/lib/gcc/x86_64-linux-gnu/14/crtendS.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crtn.o  -fstack-protector -g -O2 -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -Werror=format-security -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now   -Wl,-soname -Wl,libgpgsqlbackend.so -o .libs/libgpgsqlbackend.so
 libtool: link: ( cd ".libs" && rm -f "libgpgsqlbackend.la" && ln -s "../libgpgsqlbackend.la" "libgpgsqlbackend.la" )
 make[4]: Leaving directory '/build/reproducible-path/pdns-4.9.4/modules/gpgsqlbackend'
 Making all in gsqlite3backend
 make[4]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/gsqlite3backend'
-/bin/bash ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o gsqlite3backend.lo gsqlite3backend.cc
+/bin/sh ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o gsqlite3backend.lo gsqlite3backend.cc
 libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c gsqlite3backend.cc  -fPIC -DPIC -o .libs/gsqlite3backend.o
 In file included from ../../pdns/auth-catalogzone.hh:27,
                  from ../../pdns/dnsbackend.hh:48,
@@ -19428,48 +19465,44 @@
 ../../pdns/dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-/bin/bash ../../libtool  --tag=CXX   --mode=link g++ -std=c++17  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -module -avoid-version -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o libgsqlite3backend.la -rpath /usr/lib/x86_64-linux-gnu/pdns gsqlite3backend.lo  
+/bin/sh ../../libtool  --tag=CXX   --mode=link g++ -std=c++17  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -module -avoid-version -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o libgsqlite3backend.la -rpath /usr/lib/x86_64-linux-gnu/pdns gsqlite3backend.lo  
 libtool: link: g++ -std=c++17  -fPIC -DPIC -shared -nostdlib /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o  .libs/gsqlite3backend.o   -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L/usr/lib/../lib -L/usr/lib/gcc/x86_64-linux-gnu/14/../../.. -lstdc++ -lm -lc -lgcc_s /usr/lib/gcc/x86_64-linux-gnu/14/crtendS.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crtn.o  -fstack-protector -g -O2 -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -Werror=format-security -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now   -Wl,-soname -Wl,libgsqlite3backend.so -o .libs/libgsqlite3backend.so
 libtool: link: ( cd ".libs" && rm -f "libgsqlite3backend.la" && ln -s "../libgsqlite3backend.la" "libgsqlite3backend.la" )
 make[4]: Leaving directory '/build/reproducible-path/pdns-4.9.4/modules/gsqlite3backend'
 Making all in geoipbackend
 make[4]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/geoipbackend'
-/bin/bash ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread   -I/usr/include/  -I/usr/include/x86_64-linux-gnu  -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o geoipbackend.lo geoipbackend.cc
-/bin/bash ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread   -I/usr/include/  -I/usr/include/x86_64-linux-gnu  -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o geoipinterface-dat.lo geoipinterface-dat.cc
-/bin/bash ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread   -I/usr/include/  -I/usr/include/x86_64-linux-gnu  -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o geoipinterface-mmdb.lo geoipinterface-mmdb.cc
-/bin/bash ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread   -I/usr/include/  -I/usr/include/x86_64-linux-gnu  -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o geoipinterface.lo geoipinterface.cc
-libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I/usr/include/ -I/usr/include/x86_64-linux-gnu -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c geoipinterface-dat.cc  -fPIC -DPIC -o .libs/geoipinterface-dat.o
+/bin/sh ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread   -I/usr/include/  -I/usr/include/x86_64-linux-gnu  -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o geoipbackend.lo geoipbackend.cc
+/bin/sh ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread   -I/usr/include/  -I/usr/include/x86_64-linux-gnu  -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o geoipinterface-dat.lo geoipinterface-dat.cc
+/bin/sh ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread   -I/usr/include/  -I/usr/include/x86_64-linux-gnu  -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o geoipinterface-mmdb.lo geoipinterface-mmdb.cc
+/bin/sh ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread   -I/usr/include/  -I/usr/include/x86_64-linux-gnu  -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o geoipinterface.lo geoipinterface.cc
+libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I/usr/include/ -I/usr/include/x86_64-linux-gnu -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c geoipbackend.cc  -fPIC -DPIC -o .libs/geoipbackend.o
 libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I/usr/include/ -I/usr/include/x86_64-linux-gnu -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c geoipinterface-mmdb.cc  -fPIC -DPIC -o .libs/geoipinterface-mmdb.o
+libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I/usr/include/ -I/usr/include/x86_64-linux-gnu -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c geoipinterface-dat.cc  -fPIC -DPIC -o .libs/geoipinterface-dat.o
 libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I/usr/include/ -I/usr/include/x86_64-linux-gnu -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c geoipinterface.cc  -fPIC -DPIC -o .libs/geoipinterface.o
-libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I/usr/include/ -I/usr/include/x86_64-linux-gnu -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c geoipbackend.cc  -fPIC -DPIC -o .libs/geoipbackend.o
 In file included from ../../pdns/auth-catalogzone.hh:27,
                  from ../../pdns/dnsbackend.hh:48,
                  from geoipbackend.hh:35,
-                 from geoipinterface-mmdb.cc:25:
+                 from geoipinterface.cc:25:
 ../../pdns/dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 ../../pdns/dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
       |                                                   ^
+../../pdns/dnssecinfra.hh: In member function 'std::string DNSCryptoKeyEngine::convertToPEMString() const':
+../../pdns/dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
+   93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
+      |                                                   ^
 In file included from ../../pdns/auth-catalogzone.hh:27,
                  from ../../pdns/dnsbackend.hh:48,
                  from geoipbackend.hh:35,
-                 from geoipbackend.cc:26:
+                 from geoipinterface-dat.cc:25:
 ../../pdns/dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 ../../pdns/dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
       |                                                   ^
-../../pdns/dnssecinfra.hh: In member function 'std::string DNSCryptoKeyEngine::convertToPEMString() const':
-../../pdns/dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
-   93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
-      |                                                   ^
-../../pdns/dnssecinfra.hh: In member function 'std::string DNSCryptoKeyEngine::convertToPEMString() const':
-../../pdns/dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
-   93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
-      |                                                   ^
 In file included from ../../pdns/auth-catalogzone.hh:27,
                  from ../../pdns/dnsbackend.hh:48,
                  from geoipbackend.hh:35,
-                 from geoipinterface-dat.cc:25:
+                 from geoipinterface-mmdb.cc:25:
 ../../pdns/dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 ../../pdns/dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
@@ -19478,10 +19511,14 @@
 ../../pdns/dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
+../../pdns/dnssecinfra.hh: In member function 'std::string DNSCryptoKeyEngine::convertToPEMString() const':
+../../pdns/dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
+   93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
+      |                                                   ^
 In file included from ../../pdns/auth-catalogzone.hh:27,
                  from ../../pdns/dnsbackend.hh:48,
                  from geoipbackend.hh:35,
-                 from geoipinterface.cc:25:
+                 from geoipbackend.cc:26:
 ../../pdns/dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 ../../pdns/dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
@@ -19494,7 +19531,7 @@
 geoipbackend.cc:88:62: warning: ignoring attributes on template argument 'int (*)(DIR*)' [-Wignored-attributes]
    88 |     auto dirHandle = std::unique_ptr<DIR, decltype(&closedir)>(opendir(getArg("dnssec-keydir").c_str()), closedir);
       |                                                              ^
-/bin/bash ../../libtool  --tag=CXX   --mode=link g++ -std=c++17  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -module -avoid-version -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o libgeoipbackend.la -rpath /usr/lib/x86_64-linux-gnu/pdns geoipbackend.lo geoipinterface-dat.lo geoipinterface-mmdb.lo geoipinterface.lo -lyaml-cpp  -lGeoIP  -lmaxminddb   
+/bin/sh ../../libtool  --tag=CXX   --mode=link g++ -std=c++17  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -module -avoid-version -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o libgeoipbackend.la -rpath /usr/lib/x86_64-linux-gnu/pdns geoipbackend.lo geoipinterface-dat.lo geoipinterface-mmdb.lo geoipinterface.lo -lyaml-cpp  -lGeoIP  -lmaxminddb   
 libtool: link: g++ -std=c++17  -fPIC -DPIC -shared -nostdlib /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o  .libs/geoipbackend.o .libs/geoipinterface-dat.o .libs/geoipinterface-mmdb.o .libs/geoipinterface.o   -lyaml-cpp -lGeoIP -lmaxminddb -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L/usr/lib/../lib -L/usr/lib/gcc/x86_64-linux-gnu/14/../../.. -lstdc++ -lm -lc -lgcc_s /usr/lib/gcc/x86_64-linux-gnu/14/crtendS.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crtn.o  -fstack-protector -g -O2 -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -Werror=format-security -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now   -Wl,-soname -Wl,libgeoipbackend.so -o .libs/libgeoipbackend.so
 libtool: link: ( cd ".libs" && rm -f "libgeoipbackend.la" && ln -s "../libgeoipbackend.la" "libgeoipbackend.la" )
 make[4]: Leaving directory '/build/reproducible-path/pdns-4.9.4/modules/geoipbackend'
@@ -19502,20 +19539,20 @@
 make[4]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/remotebackend'
 make  all-am
 make[5]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/remotebackend'
-/bin/bash ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I../../ext/json11 -I../../ext/yahttp  -I/usr/include  -I/usr/include/luajit-2.1   -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o httpconnector.lo httpconnector.cc
-/bin/bash ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I../../ext/json11 -I../../ext/yahttp  -I/usr/include  -I/usr/include/luajit-2.1   -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o pipeconnector.lo pipeconnector.cc
-/bin/bash ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I../../ext/json11 -I../../ext/yahttp  -I/usr/include  -I/usr/include/luajit-2.1   -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o remotebackend.lo remotebackend.cc
-/bin/bash ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I../../ext/json11 -I../../ext/yahttp  -I/usr/include  -I/usr/include/luajit-2.1   -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o unixconnector.lo unixconnector.cc
-/bin/bash ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I../../ext/json11 -I../../ext/yahttp  -I/usr/include  -I/usr/include/luajit-2.1   -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o zmqconnector.lo zmqconnector.cc
+/bin/sh ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I../../ext/json11 -I../../ext/yahttp  -I/usr/include  -I/usr/include/luajit-2.1   -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o httpconnector.lo httpconnector.cc
+/bin/sh ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I../../ext/json11 -I../../ext/yahttp  -I/usr/include  -I/usr/include/luajit-2.1   -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o pipeconnector.lo pipeconnector.cc
+/bin/sh ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I../../ext/json11 -I../../ext/yahttp  -I/usr/include  -I/usr/include/luajit-2.1   -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o remotebackend.lo remotebackend.cc
+/bin/sh ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I../../ext/json11 -I../../ext/yahttp  -I/usr/include  -I/usr/include/luajit-2.1   -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o unixconnector.lo unixconnector.cc
+/bin/sh ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread  -I../../ext/json11 -I../../ext/yahttp  -I/usr/include  -I/usr/include/luajit-2.1   -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o zmqconnector.lo zmqconnector.cc
 libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I../../ext/json11 -I../../ext/yahttp -I/usr/include -I/usr/include/luajit-2.1 -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c httpconnector.cc  -fPIC -DPIC -o .libs/httpconnector.o
-libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I../../ext/json11 -I../../ext/yahttp -I/usr/include -I/usr/include/luajit-2.1 -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c remotebackend.cc  -fPIC -DPIC -o .libs/remotebackend.o
 libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I../../ext/json11 -I../../ext/yahttp -I/usr/include -I/usr/include/luajit-2.1 -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c pipeconnector.cc  -fPIC -DPIC -o .libs/pipeconnector.o
+libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I../../ext/json11 -I../../ext/yahttp -I/usr/include -I/usr/include/luajit-2.1 -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c remotebackend.cc  -fPIC -DPIC -o .libs/remotebackend.o
 libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I../../ext/json11 -I../../ext/yahttp -I/usr/include -I/usr/include/luajit-2.1 -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c zmqconnector.cc  -fPIC -DPIC -o .libs/zmqconnector.o
 libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I../../ext/json11 -I../../ext/yahttp -I/usr/include -I/usr/include/luajit-2.1 -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c unixconnector.cc  -fPIC -DPIC -o .libs/unixconnector.o
 In file included from ../../pdns/auth-catalogzone.hh:27,
                  from ../../pdns/dnsbackend.hh:48,
                  from remotebackend.hh:29,
-                 from zmqconnector.cc:25:
+                 from remotebackend.cc:26:
 ../../pdns/dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 ../../pdns/dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
@@ -19532,14 +19569,10 @@
 ../../pdns/dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
       |                                                   ^
-../../pdns/dnssecinfra.hh: In member function 'std::string DNSCryptoKeyEngine::convertToPEMString() const':
-../../pdns/dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
-   93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
-      |                                                   ^
 In file included from ../../pdns/auth-catalogzone.hh:27,
                  from ../../pdns/dnsbackend.hh:48,
                  from remotebackend.hh:29,
-                 from httpconnector.cc:25:
+                 from zmqconnector.cc:25:
 ../../pdns/dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 ../../pdns/dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
@@ -19548,6 +19581,10 @@
 ../../pdns/dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
+../../pdns/dnssecinfra.hh: In member function 'std::string DNSCryptoKeyEngine::convertToPEMString() const':
+../../pdns/dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
+   93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
+      |                                                   ^
 In file included from ../../pdns/auth-catalogzone.hh:27,
                  from ../../pdns/dnsbackend.hh:48,
                  from remotebackend.hh:29,
@@ -19563,7 +19600,7 @@
 In file included from ../../pdns/auth-catalogzone.hh:27,
                  from ../../pdns/dnsbackend.hh:48,
                  from remotebackend.hh:29,
-                 from remotebackend.cc:26:
+                 from httpconnector.cc:25:
 ../../pdns/dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 ../../pdns/dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
@@ -19572,15 +19609,15 @@
 ../../pdns/dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-/bin/bash ../../libtool  --tag=CXX   --mode=link g++ -std=c++17  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -module -avoid-version -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o libremotebackend.la -rpath /usr/lib/x86_64-linux-gnu/pdns httpconnector.lo pipeconnector.lo remotebackend.lo unixconnector.lo zmqconnector.lo ../../ext/yahttp/yahttp/libyahttp.la ../../ext/json11/libjson11.la  
+/bin/sh ../../libtool  --tag=CXX   --mode=link g++ -std=c++17  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -module -avoid-version -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o libremotebackend.la -rpath /usr/lib/x86_64-linux-gnu/pdns httpconnector.lo pipeconnector.lo remotebackend.lo unixconnector.lo zmqconnector.lo ../../ext/yahttp/yahttp/libyahttp.la ../../ext/json11/libjson11.la  
 libtool: link: g++ -std=c++17  -fPIC -DPIC -shared -nostdlib /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o  .libs/httpconnector.o .libs/pipeconnector.o .libs/remotebackend.o .libs/unixconnector.o .libs/zmqconnector.o  -Wl,--whole-archive ../../ext/yahttp/yahttp/.libs/libyahttp.a ../../ext/json11/.libs/libjson11.a -Wl,--no-whole-archive  -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L/usr/lib/../lib -L/usr/lib/gcc/x86_64-linux-gnu/14/../../.. -lstdc++ -lm -lc -lgcc_s /usr/lib/gcc/x86_64-linux-gnu/14/crtendS.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crtn.o  -fstack-protector -g -O2 -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -Werror=format-security -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now   -Wl,-soname -Wl,libremotebackend.so -o .libs/libremotebackend.so
 libtool: link: ( cd ".libs" && rm -f "libremotebackend.la" && ln -s "../libremotebackend.la" "libremotebackend.la" )
 make[5]: Leaving directory '/build/reproducible-path/pdns-4.9.4/modules/remotebackend'
 make[4]: Leaving directory '/build/reproducible-path/pdns-4.9.4/modules/remotebackend'
 Making all in tinydnsbackend
 make[4]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/tinydnsbackend'
-/bin/bash ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread   -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o tinydnsbackend.lo tinydnsbackend.cc
-/bin/bash ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread   -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o ../../pdns/cdb.lo ../../pdns/cdb.cc
+/bin/sh ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread   -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o tinydnsbackend.lo tinydnsbackend.cc
+/bin/sh ../../libtool  --tag=CXX   --mode=compile g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../..  -I../.. -I../.. -pthread   -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o ../../pdns/cdb.lo ../../pdns/cdb.cc
 libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c tinydnsbackend.cc  -fPIC -DPIC -o .libs/tinydnsbackend.o
 libtool: compile:  g++ -std=c++17 -DHAVE_CONFIG_H -I. -I../.. -I../.. -I../.. -pthread -I/usr/include -Wdate-time -D_FORTIFY_SOURCE=2 -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -c ../../pdns/cdb.cc  -fPIC -DPIC -o ../../pdns/.libs/cdb.o
 In file included from ../../pdns/auth-catalogzone.hh:27,
@@ -19595,7 +19632,7 @@
 ../../pdns/dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-/bin/bash ../../libtool  --tag=CXX   --mode=link g++ -std=c++17  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -module -avoid-version -L/usr/lib  -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o libtinydnsbackend.la -rpath /usr/lib/x86_64-linux-gnu/pdns ../../pdns/cdb.lo tinydnsbackend.lo -lcdb  
+/bin/sh ../../libtool  --tag=CXX   --mode=link g++ -std=c++17  -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -module -avoid-version -L/usr/lib  -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o libtinydnsbackend.la -rpath /usr/lib/x86_64-linux-gnu/pdns ../../pdns/cdb.lo tinydnsbackend.lo -lcdb  
 libtool: link: g++ -std=c++17  -fPIC -DPIC -shared -nostdlib /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crti.o /usr/lib/gcc/x86_64-linux-gnu/14/crtbeginS.o  ../../pdns/.libs/cdb.o .libs/tinydnsbackend.o   -L/usr/lib -lcdb -L/usr/lib/gcc/x86_64-linux-gnu/14 -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu -L/usr/lib/gcc/x86_64-linux-gnu/14/../../../../lib -L/lib/x86_64-linux-gnu -L/lib/../lib -L/usr/lib/x86_64-linux-gnu -L/usr/lib/../lib -L/usr/lib/gcc/x86_64-linux-gnu/14/../../.. -lstdc++ -lm -lc -lgcc_s /usr/lib/gcc/x86_64-linux-gnu/14/crtendS.o /usr/lib/gcc/x86_64-linux-gnu/14/../../../x86_64-linux-gnu/crtn.o  -fstack-protector -g -O2 -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -Werror=format-security -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now   -Wl,-soname -Wl,libtinydnsbackend.so -o .libs/libtinydnsbackend.so
 libtool: link: ( cd ".libs" && rm -f "libtinydnsbackend.la" && ln -s "../libtinydnsbackend.la" "libtinydnsbackend.la" )
 make[4]: Leaving directory '/build/reproducible-path/pdns-4.9.4/modules/tinydnsbackend'
@@ -19631,35 +19668,44 @@
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o dbdnsseckeeper.o dbdnsseckeeper.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o dns.o dns.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o dnsbackend.o dnsbackend.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o dnspacket.o dnspacket.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o dnsparser.o dnsparser.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o dnsrecords.o dnsrecords.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o dnssecinfra.o dnssecinfra.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o dnssecsigner.o dnssecsigner.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o dnswriter.o dnswriter.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o dynlistener.o dynlistener.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o ednscookies.o ednscookies.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o ednsoptions.o ednsoptions.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o ednssubnet.o ednssubnet.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o gettime.o gettime.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o gss_context.o gss_context.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o ipcipher.o ipcipher.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o iputils.o iputils.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o json.o json.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o lua-auth4.o lua-auth4.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o lua-base4.o lua-base4.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o nsecrecords.o nsecrecords.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o opensslsigners.o opensslsigners.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o pdnsutil.o pdnsutil.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o rcpgenerator.o rcpgenerator.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o serialtweaker.o serialtweaker.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o shuffle.o shuffle.cc
 bindparser.cc:273:5: warning: redundant redeclaration of 'int yyparse()' in same scope [-Wredundant-decls]
   273 | int yyparse (void);
       |     ^~~~~~~
 bindparser.yy:22:13: note: previous declaration of 'int yyparse()'
    22 |         int yyparse(void);
       |             ^~~~~~~
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o dnspacket.o dnspacket.cc
-In file included from auth-catalogzone.hh:27,
-                 from dnsbackend.hh:48,
-                 from auth-catalogzone.cc:27:
-dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
-dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
-   70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
-      |                                                   ^
-dnssecinfra.hh: In member function 'std::string DNSCryptoKeyEngine::convertToPEMString() const':
-dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
-   93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
-      |                                                   ^
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o dnsparser.o dnsparser.cc
 misc.cc: In function 'std::optional<std::__cxx11::basic_string<char> > pdns::visit_directory(const std::string&, const std::function<bool(long unsigned int, const std::basic_string_view<char>&)>&)':
 misc.cc:1756:60: warning: ignoring attributes on template argument 'int (*)(DIR*)' [-Wignored-attributes]
  1756 |   auto dirHandle = std::unique_ptr<DIR, decltype(&closedir)>(opendir(directory.c_str()), closedir);
       |                                                            ^
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o dnsrecords.o dnsrecords.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o dnssecinfra.o dnssecinfra.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o dnssecsigner.o dnssecsigner.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o signingpipe.o signingpipe.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sillyrecords.o sillyrecords.cc
 In file included from auth-catalogzone.hh:27,
                  from dnsbackend.hh:48,
-                 from dnsbackend.cc:27:
+                 from auth-catalogzone.cc:27:
 dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
@@ -19668,13 +19714,10 @@
 dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o dnswriter.o dnswriter.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o dynlistener.o dynlistener.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o ednscookies.o ednscookies.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o ednsoptions.o ednsoptions.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o ednssubnet.o ednssubnet.cc
-In file included from dnsseckeeper.hh:32,
-                 from dbdnsseckeeper.cc:25:
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o stubresolver.o stubresolver.cc
+In file included from auth-catalogzone.hh:27,
+                 from dnsbackend.hh:48,
+                 from dnsbackend.cc:27:
 dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
@@ -19683,11 +19726,10 @@
 dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o gettime.o gettime.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o gss_context.o gss_context.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o ipcipher.o ipcipher.cc
-In file included from dnsseckeeper.hh:32,
-                 from dnspacket.cc:37:
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o svc-records.o svc-records.cc
+In file included from auth-catalogzone.hh:27,
+                 from dnsbackend.hh:48,
+                 from dynlistener.cc:51:
 dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
@@ -19696,12 +19738,7 @@
 dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o iputils.o iputils.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o json.o json.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o lua-auth4.o lua-auth4.cc
-In file included from auth-catalogzone.hh:27,
-                 from dnsbackend.hh:48,
-                 from dynlistener.cc:51:
+In file included from dnssecsigner.cc:25:
 dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
@@ -19710,7 +19747,7 @@
 dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-In file included from dnssecsigner.cc:25:
+In file included from opensslsigners.cc:51:
 dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
@@ -19719,7 +19756,9 @@
 dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o lua-base4.o lua-base4.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o threadname.o threadname.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o tsigutils.o tsigutils.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o ueberbackend.o ueberbackend.cc
 In file included from dnssecinfra.cc:37:
 dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
@@ -19729,15 +19768,6 @@
 dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o nsecrecords.o nsecrecords.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o opensslsigners.o opensslsigners.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o pdnsutil.o pdnsutil.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o rcpgenerator.o rcpgenerator.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o serialtweaker.o serialtweaker.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o shuffle.o shuffle.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o signingpipe.o signingpipe.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sillyrecords.o sillyrecords.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o stubresolver.o stubresolver.cc
 In file included from auth-catalogzone.hh:27,
                  from dnsbackend.hh:48,
                  from ueberbackend.hh:33,
@@ -19750,8 +19780,11 @@
 dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o svc-records.o svc-records.cc
-In file included from opensslsigners.cc:51:
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o uuid-utils.o uuid-utils.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o zonemd.o zonemd.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o zoneparser-tng.o zoneparser-tng.cc
+In file included from dnsseckeeper.hh:32,
+                 from pdnsutil.cc:10:
 dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
@@ -19761,7 +19794,7 @@
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
 In file included from dnsseckeeper.hh:32,
-                 from pdnsutil.cc:10:
+                 from dnspacket.cc:37:
 dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
@@ -19771,7 +19804,7 @@
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
 In file included from dnsseckeeper.hh:32,
-                 from serialtweaker.cc:26:
+                 from dbdnsseckeeper.cc:25:
 dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
@@ -19780,12 +19813,9 @@
 dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o threadname.o threadname.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o tsigutils.o tsigutils.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o ueberbackend.o ueberbackend.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sodiumsigners.o sodiumsigners.cc
 In file included from dnsseckeeper.hh:32,
-                 from signingpipe.hh:27,
-                 from signingpipe.cc:5:
+                 from serialtweaker.cc:26:
 dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
@@ -19794,25 +19824,21 @@
 dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-pdnsutil.cc: In function 'int main(int, char**)':
-pdnsutil.cc:3541:54: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
- 3541 |     std::unique_ptr<std::FILE, decltype(&std::fclose)> fp{std::fopen(filename.c_str(), "r"), &std::fclose};
-      |                                                      ^
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o uuid-utils.o uuid-utils.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o zonemd.o zonemd.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o zoneparser-tng.o zoneparser-tng.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sodiumsigners.o sodiumsigners.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o ssqlite3.o ssqlite3.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o pkcs11signers.o pkcs11signers.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o zone2sql.o zone2sql.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o zone2json.o zone2json.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o dnsgram.o dnsgram.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o dnspcap.o dnspcap.cc
+pdnsutil.cc: In function 'int main(int, char**)':
+pdnsutil.cc:3541:54: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
+ 3541 |     std::unique_ptr<std::FILE, decltype(&std::fclose)> fp{std::fopen(filename.c_str(), "r"), &std::fclose};
+      |                                                      ^
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o dnspcap2calidns.o dnspcap2calidns.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o dnspcap2protobuf.o dnspcap2protobuf.cc
-In file included from auth-catalogzone.hh:27,
-                 from dnsbackend.hh:48,
-                 from ueberbackend.cc:44:
+In file included from dnsseckeeper.hh:32,
+                 from signingpipe.hh:27,
+                 from signingpipe.cc:5:
 dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
@@ -19821,6 +19847,9 @@
 dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o protozero.o protozero.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o dnsreplay.o dnsreplay.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o dnsscan.o dnsscan.cc
 In file included from validate.hh:29,
                  from zonemd.hh:31,
                  from zonemd.cc:1:
@@ -19832,16 +19861,21 @@
 dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-In file included from pkcs11signers.cc:11:
-../pdns/dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
-../pdns/dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o dnsscope.o dnsscope.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o statnode.o statnode.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o dnswasher.o dnswasher.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o dumresp.o dumresp.cc
+In file included from auth-catalogzone.hh:27,
+                 from dnsbackend.hh:48,
+                 from ueberbackend.cc:44:
+dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
+dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
       |                                                   ^
-../pdns/dnssecinfra.hh: In member function 'std::string DNSCryptoKeyEngine::convertToPEMString() const':
-../pdns/dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
+dnssecinfra.hh: In member function 'std::string DNSCryptoKeyEngine::convertToPEMString() const':
+dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o protozero.o protozero.cc
 In file included from sodiumsigners.cc:10:
 dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
@@ -19851,16 +19885,19 @@
 dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o dnsreplay.o dnsreplay.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o dnsscan.o dnsscan.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o dnsscope.o dnsscope.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o statnode.o statnode.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o dnswasher.o dnswasher.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o dumresp.o dumresp.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o notify.o notify.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o pollmplexer.o pollmplexer.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o nproxy.o nproxy.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o nsec3dig.o nsec3dig.cc
+In file included from pkcs11signers.cc:11:
+../pdns/dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
+../pdns/dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
+   70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
+      |                                                   ^
+../pdns/dnssecinfra.hh: In member function 'std::string DNSCryptoKeyEngine::convertToPEMString() const':
+../pdns/dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
+   93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
+      |                                                   ^
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o saxfr.o saxfr.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o stubquery.o stubquery.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o axfr-retriever.o axfr-retriever.cc
@@ -19868,7 +19905,7 @@
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o ixfrutils.o ixfrutils.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o ixplore.o ixplore.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o query-local-address.o query-local-address.cc
-In file included from ixfr.cc:26:
+In file included from nsec3dig.cc:32:
 dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
@@ -19878,16 +19915,20 @@
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o resolver.o resolver.cc
-In file included from saxfr.cc:12:
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o tsigverifier.o tsigverifier.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-base32.o `test -f 'base32.cc' || echo './'`base32.cc
+In file included from ixfr.cc:26:
 dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
       |                                                   ^
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-base64.o `test -f 'base64.cc' || echo './'`base64.cc
 dnssecinfra.hh: In member function 'std::string DNSCryptoKeyEngine::convertToPEMString() const':
 dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-In file included from nsec3dig.cc:32:
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-dns.o `test -f 'dns.cc' || echo './'`dns.cc
+In file included from saxfr.cc:12:
 dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
@@ -19896,6 +19937,7 @@
 dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-dnslabeltext.o `test -f 'dnslabeltext.cc' || echo './'`dnslabeltext.cc
 In file included from resolver.hh:41,
                  from axfr-retriever.hh:27,
                  from axfr-retriever.cc:23:
@@ -19907,7 +19949,25 @@
 dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o tsigverifier.o tsigverifier.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-dnsname.o `test -f 'dnsname.cc' || echo './'`dnsname.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-dnsparser.o `test -f 'dnsparser.cc' || echo './'`dnsparser.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-dnsrecords.o `test -f 'dnsrecords.cc' || echo './'`dnsrecords.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-dnswriter.o `test -f 'dnswriter.cc' || echo './'`dnswriter.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-ednsextendederror.o `test -f 'ednsextendederror.cc' || echo './'`ednsextendederror.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-ednssubnet.o `test -f 'ednssubnet.cc' || echo './'`ednssubnet.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-iputils.o `test -f 'iputils.cc' || echo './'`iputils.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-libssl.o `test -f 'libssl.cc' || echo './'`libssl.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-logger.o `test -f 'logger.cc' || echo './'`logger.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-misc.o `test -f 'misc.cc' || echo './'`misc.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-nsecrecords.o `test -f 'nsecrecords.cc' || echo './'`nsecrecords.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-proxy-protocol.o `test -f 'proxy-protocol.cc' || echo './'`proxy-protocol.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-qtype.o `test -f 'qtype.cc' || echo './'`qtype.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-rcpgenerator.o `test -f 'rcpgenerator.cc' || echo './'`rcpgenerator.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-sdig.o `test -f 'sdig.cc' || echo './'`sdig.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-sillyrecords.o `test -f 'sillyrecords.cc' || echo './'`sillyrecords.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-statbag.o `test -f 'statbag.cc' || echo './'`statbag.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-svc-records.o `test -f 'svc-records.cc' || echo './'`svc-records.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-tcpiohandler.o `test -f 'tcpiohandler.cc' || echo './'`tcpiohandler.cc
 In file included from ixfrutils.cc:30:
 dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
@@ -19917,9 +19977,8 @@
 dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-base32.o `test -f 'base32.cc' || echo './'`base32.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-base64.o `test -f 'base64.cc' || echo './'`base64.cc
-In file included from tsigverifier.cc:3:
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-unix_utility.o `test -f 'unix_utility.cc' || echo './'`unix_utility.cc
+In file included from ixplore.cc:32:
 dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
@@ -19928,23 +19987,19 @@
 dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-dns.o `test -f 'dns.cc' || echo './'`dns.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-dnslabeltext.o `test -f 'dnslabeltext.cc' || echo './'`dnslabeltext.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-dnsname.o `test -f 'dnsname.cc' || echo './'`dnsname.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-dnsparser.o `test -f 'dnsparser.cc' || echo './'`dnsparser.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-minicurl.o `test -f 'minicurl.cc' || echo './'`minicurl.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o calidns.o calidns.cc
 In file included from resolver.hh:41,
                  from resolver.cc:26:
 dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
       |                                                   ^
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-dnsrecords.o `test -f 'dnsrecords.cc' || echo './'`dnsrecords.cc
 dnssecinfra.hh: In member function 'std::string DNSCryptoKeyEngine::convertToPEMString() const':
 dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-dnswriter.o `test -f 'dnswriter.cc' || echo './'`dnswriter.cc
-In file included from ixplore.cc:32:
+In file included from tsigverifier.cc:3:
 dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
@@ -19953,28 +20008,6 @@
 dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-ednsextendederror.o `test -f 'ednsextendederror.cc' || echo './'`ednsextendederror.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-ednssubnet.o `test -f 'ednssubnet.cc' || echo './'`ednssubnet.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-iputils.o `test -f 'iputils.cc' || echo './'`iputils.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-libssl.o `test -f 'libssl.cc' || echo './'`libssl.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-logger.o `test -f 'logger.cc' || echo './'`logger.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-misc.o `test -f 'misc.cc' || echo './'`misc.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-nsecrecords.o `test -f 'nsecrecords.cc' || echo './'`nsecrecords.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-proxy-protocol.o `test -f 'proxy-protocol.cc' || echo './'`proxy-protocol.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-qtype.o `test -f 'qtype.cc' || echo './'`qtype.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-rcpgenerator.o `test -f 'rcpgenerator.cc' || echo './'`rcpgenerator.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-sdig.o `test -f 'sdig.cc' || echo './'`sdig.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-sillyrecords.o `test -f 'sillyrecords.cc' || echo './'`sillyrecords.cc
-misc.cc: In function 'std::optional<std::__cxx11::basic_string<char> > pdns::visit_directory(const std::string&, const std::function<bool(long unsigned int, const std::basic_string_view<char>&)>&)':
-misc.cc:1756:60: warning: ignoring attributes on template argument 'int (*)(DIR*)' [-Wignored-attributes]
- 1756 |   auto dirHandle = std::unique_ptr<DIR, decltype(&closedir)>(opendir(directory.c_str()), closedir);
-      |                                                            ^
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-statbag.o `test -f 'statbag.cc' || echo './'`statbag.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-svc-records.o `test -f 'svc-records.cc' || echo './'`svc-records.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-tcpiohandler.o `test -f 'tcpiohandler.cc' || echo './'`tcpiohandler.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-unix_utility.o `test -f 'unix_utility.cc' || echo './'`unix_utility.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1        -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o sdig-minicurl.o `test -f 'minicurl.cc' || echo './'`minicurl.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o calidns.o calidns.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o dnsbulktest.o dnsbulktest.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o dnstcpbench.o dnstcpbench.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o ednsextendederror.o ednsextendederror.cc
@@ -19982,27 +20015,30 @@
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o ixfrdist-web.o ixfrdist-web.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o ixfrdist.o ixfrdist.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o webserver.o webserver.cc
+misc.cc: In function 'std::optional<std::__cxx11::basic_string<char> > pdns::visit_directory(const std::string&, const std::function<bool(long unsigned int, const std::basic_string_view<char>&)>&)':
+misc.cc:1756:60: warning: ignoring attributes on template argument 'int (*)(DIR*)' [-Wignored-attributes]
+ 1756 |   auto dirHandle = std::unique_ptr<DIR, decltype(&closedir)>(opendir(directory.c_str()), closedir);
+      |                                                            ^
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o epollmplexer.o epollmplexer.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o zone2ldap.o zone2ldap.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o speedtest.o speedtest.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o channel.o channel.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o nameserver.o nameserver.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o proxy-protocol.o proxy-protocol.cc
-In file included from resolver.hh:41,
-                 from axfr-retriever.hh:27,
-                 from ixfrdist.cc:44:
-dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
-dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
-   70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
-      |                                                   ^
-dnssecinfra.hh: In member function 'std::string DNSCryptoKeyEngine::convertToPEMString() const':
-dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
-   93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
-      |                                                   ^
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o responsestats-auth.o responsestats-auth.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o responsestats.o responsestats.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-arguments_cc.o test-arguments_cc.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-auth-zonecache_cc.o test-auth-zonecache_cc.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-base32_cc.o test-base32_cc.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-base64_cc.o test-base64_cc.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-bindparser_cc.o test-bindparser_cc.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-channel.o test-channel.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-communicator_hh.o test-communicator_hh.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-credentials_cc.o test-credentials_cc.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-digests_hh.o test-digests_hh.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-distributor_hh.o test-distributor_hh.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-dns_random_hh.o test-dns_random_hh.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-dnsname_cc.o test-dnsname_cc.cc
 In file included from speedtest.cc:13:
 dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
@@ -20012,20 +20048,9 @@
 dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-base32_cc.o test-base32_cc.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-base64_cc.o test-base64_cc.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-bindparser_cc.o test-bindparser_cc.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-channel.o test-channel.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-communicator_hh.o test-communicator_hh.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-credentials_cc.o test-credentials_cc.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-digests_hh.o test-digests_hh.cc
-In file included from auth-catalogzone.hh:27,
-                 from dnsbackend.hh:48,
-                 from ueberbackend.hh:33,
-                 from packethandler.hh:26,
-                 from communicator.hh:39,
-                 from auth-main.hh:28,
-                 from nameserver.cc:35:
+In file included from resolver.hh:41,
+                 from axfr-retriever.hh:27,
+                 from ixfrdist.cc:44:
 dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
@@ -20034,18 +20059,18 @@
 dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-distributor_hh.o test-distributor_hh.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-dns_random_hh.o test-dns_random_hh.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-dnsname_cc.o test-dnsname_cc.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-dnsparser_cc.o test-dnsparser_cc.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-dnsparser_hh.o test-dnsparser_hh.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-dnsrecordcontent.o test-dnsrecordcontent.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-dnsrecords_cc.o test-dnsrecords_cc.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-dnswriter_cc.o test-dnswriter_cc.cc
 In file included from auth-catalogzone.hh:27,
                  from dnsbackend.hh:48,
                  from ueberbackend.hh:33,
                  from packethandler.hh:26,
                  from communicator.hh:39,
-                 from test-communicator_hh.cc:12:
+                 from auth-main.hh:28,
+                 from nameserver.cc:35:
 dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
@@ -20054,8 +20079,12 @@
 dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-dnsrecords_cc.o test-dnsrecords_cc.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-dnswriter_cc.o test-dnswriter_cc.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-ednscookie_cc.o test-ednscookie_cc.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-ipcrypt_cc.o test-ipcrypt_cc.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-iputils_hh.o test-iputils_hh.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-ixfr_cc.o test-ixfr_cc.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-lock_hh.o test-lock_hh.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-lua_auth4_cc.o test-lua_auth4_cc.cc
 In file included from auth-catalogzone.hh:27,
                  from dnsbackend.hh:48,
                  from distributor.hh:37,
@@ -20068,14 +20097,22 @@
 dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-ednscookie_cc.o test-ednscookie_cc.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-ipcrypt_cc.o test-ipcrypt_cc.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-iputils_hh.o test-iputils_hh.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-ixfr_cc.o test-ixfr_cc.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-lock_hh.o test-lock_hh.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-lua_auth4_cc.o test-lua_auth4_cc.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-luawrapper.o test-luawrapper.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-misc_hh.o test-misc_hh.cc
+In file included from auth-catalogzone.hh:27,
+                 from dnsbackend.hh:48,
+                 from ueberbackend.hh:33,
+                 from packethandler.hh:26,
+                 from communicator.hh:39,
+                 from test-communicator_hh.cc:12:
+dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
+dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
+   70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
+      |                                                   ^
+dnssecinfra.hh: In member function 'std::string DNSCryptoKeyEngine::convertToPEMString() const':
+dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
+   93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
+      |                                                   ^
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-mplexer.o test-mplexer.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-nameserver_cc.o test-nameserver_cc.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-packetcache_cc.o test-packetcache_cc.cc
@@ -20092,8 +20129,12 @@
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-webserver_cc.o test-webserver_cc.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-zonemd_cc.o test-zonemd_cc.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o test-zoneparser_tng_cc.o test-zoneparser_tng_cc.cc
-In file included from dnsseckeeper.hh:32,
-                 from test-signers.cc:15:
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o testrunner.o testrunner.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o trusted-notification-proxy.o trusted-notification-proxy.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o auth-carbon.o auth-carbon.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o auth-main.o auth-main.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o auth-primarycommunicator.o auth-primarycommunicator.cc
+In file included from test-tsig.cc:36:
 dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
@@ -20102,8 +20143,9 @@
 dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o testrunner.o testrunner.cc
-In file included from test-tsig.cc:36:
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o auth-secondarycommunicator.o auth-secondarycommunicator.cc
+In file included from dnsseckeeper.hh:32,
+                 from test-signers.cc:15:
 dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
@@ -20112,6 +20154,7 @@
 dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o communicator.o communicator.cc
 In file included from validate.hh:29,
                  from zonemd.hh:31,
                  from test-zonemd_cc.cc:9:
@@ -20123,24 +20166,6 @@
 dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o trusted-notification-proxy.o trusted-notification-proxy.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o auth-carbon.o auth-carbon.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o auth-main.o auth-main.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o auth-primarycommunicator.o auth-primarycommunicator.cc
-In file included from auth-catalogzone.hh:27,
-                 from dnsbackend.hh:48,
-                 from ueberbackend.hh:33,
-                 from test-ueberbackend_cc.cc:23:
-dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
-dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
-   70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
-      |                                                   ^
-dnssecinfra.hh: In member function 'std::string DNSCryptoKeyEngine::convertToPEMString() const':
-dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
-   93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
-      |                                                   ^
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o auth-secondarycommunicator.o auth-secondarycommunicator.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o communicator.o communicator.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o coverage.o coverage.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o dnsproxy.o dnsproxy.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o dynhandler.o dynhandler.cc
@@ -20149,12 +20174,13 @@
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o secpoll-auth.o secpoll-auth.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o secpoll.o secpoll.cc
 g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o tcpreceiver.o tcpreceiver.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o tkey.o tkey.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o unix_semaphore.o unix_semaphore.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o version.o version.cc
 In file included from auth-catalogzone.hh:27,
                  from dnsbackend.hh:48,
                  from ueberbackend.hh:33,
-                 from packethandler.hh:26,
-                 from communicator.hh:39,
-                 from auth-primarycommunicator.cc:29:
+                 from test-ueberbackend_cc.cc:23:
 dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
@@ -20169,16 +20195,23 @@
                  from packethandler.hh:26,
                  from communicator.hh:39,
                  from auth-main.hh:28,
-                 from auth-main.cc:55:
+                 from auth-carbon.cc:31:
 dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
       |                                                   ^
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o ws-api.o ws-api.cc
 dnssecinfra.hh: In member function 'std::string DNSCryptoKeyEngine::convertToPEMString() const':
 dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-In file included from auth-secondarycommunicator.cc:27:
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o ws-auth.o ws-auth.cc
+In file included from auth-catalogzone.hh:27,
+                 from dnsbackend.hh:48,
+                 from ueberbackend.hh:33,
+                 from packethandler.hh:26,
+                 from communicator.hh:39,
+                 from auth-primarycommunicator.cc:29:
 dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
@@ -20193,7 +20226,7 @@
                  from packethandler.hh:26,
                  from communicator.hh:39,
                  from auth-main.hh:28,
-                 from auth-carbon.cc:31:
+                 from auth-main.cc:55:
 dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
@@ -20202,12 +20235,18 @@
 dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-In file included from auth-catalogzone.hh:27,
-                 from dnsbackend.hh:48,
-                 from ueberbackend.hh:33,
-                 from packethandler.hh:26,
-                 from communicator.hh:39,
-                 from communicator.cc:32:
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o lua-record.o lua-record.cc
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o minicurl.o minicurl.cc
+sed -e 's![@]sbindir[@]!/usr/sbin!' -e 's![@]service_user[@]!pdns!' -e 's![@]service_group[@]!pdns!' < pdns.service.in > pdns.service
+sed -e 's![@]bindir[@]!/usr/bin!' < ixfrdist.service.in > ixfrdist.service
+/bin/sh ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o pdns_control arguments.o dnslabeltext.o dnsname.o dynloader.o dynmessenger.o logger.o misc.o qtype.o statbag.o unix_utility.o  
+libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o pdns_control arguments.o dnslabeltext.o dnsname.o dynloader.o dynmessenger.o logger.o misc.o qtype.o statbag.o unix_utility.o  -lcrypto ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -pthread
+g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o backends/gsql/gsqlbackend.o backends/gsql/gsqlbackend.cc
+/bin/sh ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o zone2sql arguments.o base32.o base64.o bindlexer.o bindparser.o dns.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnswriter.o json.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o zone2sql.o zoneparser-tng.o -lcrypto ../ext/json11/libjson11.la 
+/bin/sh ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o zone2json arguments.o base32.o base64.o bindlexer.o bindparser.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnswriter.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o zone2json.o zoneparser-tng.o -lcrypto ../ext/json11/libjson11.la 
+libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o zone2sql arguments.o base32.o base64.o bindlexer.o bindparser.o dns.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnswriter.o json.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o zone2sql.o zoneparser-tng.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto ../ext/json11/.libs/libjson11.a -pthread
+libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o zone2json arguments.o base32.o base64.o bindlexer.o bindparser.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnswriter.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o zone2json.o zoneparser-tng.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto ../ext/json11/.libs/libjson11.a -pthread
+In file included from auth-secondarycommunicator.cc:27:
 dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
@@ -20216,16 +20255,13 @@
 dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o tkey.o tkey.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o unix_semaphore.o unix_semaphore.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o version.o version.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o ws-api.o ws-api.cc
+/bin/sh ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o dnsgram base32.o base64.o dnsgram.o dnslabeltext.o dnsname.o dnsparser.o dnspcap.o dnsrecords.o dnswriter.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o -lcrypto 
 In file included from auth-catalogzone.hh:27,
                  from dnsbackend.hh:48,
                  from ueberbackend.hh:33,
                  from packethandler.hh:26,
                  from communicator.hh:39,
-                 from dynhandler.cc:36:
+                 from communicator.cc:32:
 dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
@@ -20234,6 +20270,18 @@
 dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
+/bin/sh ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib  -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o dnspcap2calidns base32.o base64.o dnslabeltext.o dnsname.o dnsparser.o dnspcap.o dnspcap2calidns.o dnsrecords.o dnswriter.o ednsoptions.o ednssubnet.o iputils.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o -lcrypto -lboost_program_options 
+/bin/sh ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib  -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o dnspcap2protobuf base32.o base64.o dnslabeltext.o dnsname.o dnsparser.o dnspcap.o dnspcap2protobuf.o dnsrecords.o dnswriter.o gettime.o iputils.o logger.o misc.o nsecrecords.o protozero.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o uuid-utils.o -lcrypto -lboost_program_options  
+libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o dnsgram base32.o base64.o dnsgram.o dnslabeltext.o dnsname.o dnsparser.o dnspcap.o dnsrecords.o dnswriter.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto -pthread
+/bin/sh ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib  -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o dnsreplay base32.o base64.o dnslabeltext.o dnsname.o dnsparser.o dnspcap.o dnsrecords.o dnsreplay.o dnswriter.o ednsoptions.o ednssubnet.o iputils.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o -lcrypto -lboost_program_options 
+libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o dnspcap2calidns base32.o base64.o dnslabeltext.o dnsname.o dnsparser.o dnspcap.o dnspcap2calidns.o dnsrecords.o dnswriter.o ednsoptions.o ednssubnet.o iputils.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto -lboost_program_options -pthread
+libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o dnspcap2protobuf base32.o base64.o dnslabeltext.o dnsname.o dnsparser.o dnspcap.o dnspcap2protobuf.o dnsrecords.o dnswriter.o gettime.o iputils.o logger.o misc.o nsecrecords.o protozero.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o uuid-utils.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto -lboost_program_options -pthread
+libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o dnsreplay base32.o base64.o dnslabeltext.o dnsname.o dnsparser.o dnspcap.o dnsrecords.o dnsreplay.o dnswriter.o ednsoptions.o ednssubnet.o iputils.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto -lboost_program_options -pthread
+/bin/sh ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o dnsscan base32.o base64.o dnslabeltext.o dnsname.o dnsparser.o dnspcap.o dnsrecords.o dnsscan.o dnswriter.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o -lcrypto 
+/bin/sh ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib  -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o dnsscope arguments.o base32.o base64.o dns.o dnslabeltext.o dnsname.o dnsparser.o dnspcap.o dnsrecords.o dnsscope.o dnswriter.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o statnode.o svc-records.o unix_utility.o -lcrypto -lboost_program_options 
+/bin/sh ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread  -L/usr/lib -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o dnswasher base64.o dnslabeltext.o dnsname.o dnspcap.o dnswasher.o ipcipher.o logger.o misc.o qtype.o statbag.o unix_utility.o -lboost_program_options -lcrypto ../ext/ipcrypt/libipcrypt.la 
+/bin/sh ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o dumresp dnslabeltext.o dnsname.o dumresp.o iputils.o logger.o misc.o qtype.o statbag.o unix_utility.o  
+/bin/sh ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib  -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o pdns_notify arguments.o base32.o base64.o dns.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnswriter.o logger.o misc.o notify.o nsecrecords.o pollmplexer.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o -lcrypto -lboost_program_options -lsodium  
 In file included from packethandler.cc:31:
 dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
@@ -20243,14 +20291,13 @@
 dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o ws-auth.o ws-auth.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o lua-record.o lua-record.cc
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o minicurl.o minicurl.cc
+libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o dnsscan base32.o base64.o dnslabeltext.o dnsname.o dnsparser.o dnspcap.o dnsrecords.o dnsscan.o dnswriter.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto -pthread
 In file included from auth-catalogzone.hh:27,
                  from dnsbackend.hh:48,
                  from ueberbackend.hh:33,
                  from packethandler.hh:26,
-                 from rfc2136handler.cc:5:
+                 from communicator.hh:39,
+                 from dynhandler.cc:36:
 dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
@@ -20259,19 +20306,17 @@
 dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-In file included from tcpreceiver.cc:30:
+libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o dnsscope arguments.o base32.o base64.o dns.o dnslabeltext.o dnsname.o dnsparser.o dnspcap.o dnsrecords.o dnsscope.o dnswriter.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o statnode.o svc-records.o unix_utility.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto -lboost_program_options -pthread
+libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o dumresp dnslabeltext.o dnsname.o dumresp.o iputils.o logger.o misc.o qtype.o statbag.o unix_utility.o  -lcrypto ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -pthread
+libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o dnswasher base64.o dnslabeltext.o dnsname.o dnspcap.o dnswasher.o ipcipher.o logger.o misc.o qtype.o statbag.o unix_utility.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lboost_program_options -lcrypto ../ext/ipcrypt/.libs/libipcrypt.a -pthread
+libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o pdns_notify arguments.o base32.o base64.o dns.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnswriter.o logger.o misc.o notify.o nsecrecords.o pollmplexer.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto -lboost_program_options -lsodium -pthread
+In file included from auth-catalogzone.hh:27,
+                 from dnsbackend.hh:48,
+                 from version.cc:27:
 dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
       |                                                   ^
-dnssecinfra.hh: In member function 'std::string DNSCryptoKeyEngine::convertToPEMString() const':
-dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
-   93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
-      |                                                   ^
-sed -e 's![@]sbindir[@]!/usr/sbin!' -e 's![@]service_user[@]!pdns!' -e 's![@]service_group[@]!pdns!' < pdns.service.in > pdns.service
-sed -e 's![@]bindir[@]!/usr/bin!' < ixfrdist.service.in > ixfrdist.service
-/bin/bash ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o pdns_control arguments.o dnslabeltext.o dnsname.o dynloader.o dynmessenger.o logger.o misc.o qtype.o statbag.o unix_utility.o  
-g++ -std=c++17 -DHAVE_CONFIG_H -I. -I..  -I.. -I.. -pthread  -I../ext/json11 -I../ext/yahttp  -I/usr/include   -I../ext/protozero/include -DBOOST_CONTAINER_USE_STD_EXCEPTIONS -I/usr/include/p11-kit-1   -I/usr/include/luajit-2.1     -Wdate-time -D_FORTIFY_SOURCE=2 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -c -o backends/gsql/gsqlbackend.o backends/gsql/gsqlbackend.cc
 In file included from auth-catalogzone.hh:27,
                  from dnsbackend.hh:48,
                  from ueberbackend.hh:33,
@@ -20285,15 +20330,15 @@
 dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o pdns_control arguments.o dnslabeltext.o dnsname.o dynloader.o dynmessenger.o logger.o misc.o qtype.o statbag.o unix_utility.o  -lcrypto ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -pthread
-/bin/bash ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o zone2sql arguments.o base32.o base64.o bindlexer.o bindparser.o dns.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnswriter.o json.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o zone2sql.o zoneparser-tng.o -lcrypto ../ext/json11/libjson11.la 
-/bin/bash ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o zone2json arguments.o base32.o base64.o bindlexer.o bindparser.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnswriter.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o zone2json.o zoneparser-tng.o -lcrypto ../ext/json11/libjson11.la 
-/bin/bash ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o dnsgram base32.o base64.o dnsgram.o dnslabeltext.o dnsname.o dnsparser.o dnspcap.o dnsrecords.o dnswriter.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o -lcrypto 
-libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o dnsgram base32.o base64.o dnsgram.o dnslabeltext.o dnsname.o dnsparser.o dnspcap.o dnsrecords.o dnswriter.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto -pthread
-libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o zone2sql arguments.o base32.o base64.o bindlexer.o bindparser.o dns.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnswriter.o json.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o zone2sql.o zoneparser-tng.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto ../ext/json11/.libs/libjson11.a -pthread
+dnssecinfra.hh: In member function 'std::string DNSCryptoKeyEngine::convertToPEMString() const':
+dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
+   93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
+      |                                                   ^
 In file included from auth-catalogzone.hh:27,
                  from dnsbackend.hh:48,
-                 from version.cc:27:
+                 from ueberbackend.hh:33,
+                 from packethandler.hh:26,
+                 from rfc2136handler.cc:5:
 dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
 dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
@@ -20302,48 +20347,6 @@
 dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o zone2json arguments.o base32.o base64.o bindlexer.o bindparser.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnswriter.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o zone2json.o zoneparser-tng.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto ../ext/json11/.libs/libjson11.a -pthread
-/bin/bash ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib  -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o dnspcap2calidns base32.o base64.o dnslabeltext.o dnsname.o dnsparser.o dnspcap.o dnspcap2calidns.o dnsrecords.o dnswriter.o ednsoptions.o ednssubnet.o iputils.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o -lcrypto -lboost_program_options 
-/bin/bash ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib  -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o dnspcap2protobuf base32.o base64.o dnslabeltext.o dnsname.o dnsparser.o dnspcap.o dnspcap2protobuf.o dnsrecords.o dnswriter.o gettime.o iputils.o logger.o misc.o nsecrecords.o protozero.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o uuid-utils.o -lcrypto -lboost_program_options  
-libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o dnspcap2calidns base32.o base64.o dnslabeltext.o dnsname.o dnsparser.o dnspcap.o dnspcap2calidns.o dnsrecords.o dnswriter.o ednsoptions.o ednssubnet.o iputils.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto -lboost_program_options -pthread
-/bin/bash ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib  -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o dnsreplay base32.o base64.o dnslabeltext.o dnsname.o dnsparser.o dnspcap.o dnsrecords.o dnsreplay.o dnswriter.o ednsoptions.o ednssubnet.o iputils.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o -lcrypto -lboost_program_options 
-/bin/bash ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o dnsscan base32.o base64.o dnslabeltext.o dnsname.o dnsparser.o dnspcap.o dnsrecords.o dnsscan.o dnswriter.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o -lcrypto 
-libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o dnspcap2protobuf base32.o base64.o dnslabeltext.o dnsname.o dnsparser.o dnspcap.o dnspcap2protobuf.o dnsrecords.o dnswriter.o gettime.o iputils.o logger.o misc.o nsecrecords.o protozero.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o uuid-utils.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto -lboost_program_options -pthread
-libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o dnsreplay base32.o base64.o dnslabeltext.o dnsname.o dnsparser.o dnspcap.o dnsrecords.o dnsreplay.o dnswriter.o ednsoptions.o ednssubnet.o iputils.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto -lboost_program_options -pthread
-/bin/bash ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib  -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o dnsscope arguments.o base32.o base64.o dns.o dnslabeltext.o dnsname.o dnsparser.o dnspcap.o dnsrecords.o dnsscope.o dnswriter.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o statnode.o svc-records.o unix_utility.o -lcrypto -lboost_program_options 
-libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o dnsscan base32.o base64.o dnslabeltext.o dnsname.o dnsparser.o dnspcap.o dnsrecords.o dnsscan.o dnswriter.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto -pthread
-In file included from /usr/include/x86_64-linux-gnu/c++/14/bits/c++allocator.h:33,
-                 from /usr/include/c++/14/bits/allocator.h:46,
-                 from /usr/include/c++/14/string:43,
-                 from auth-caches.hh:23,
-                 from auth-primarycommunicator.cc:25:
-In member function 'void std::__new_allocator<_Tp>::deallocate(_Tp*, size_type) [with _Tp = DNSResourceRecord]',
-    inlined from 'static void std::allocator_traits<std::allocator<_CharT> >::deallocate(allocator_type&, pointer, size_type) [with _Tp = DNSResourceRecord]' at /usr/include/c++/14/bits/alloc_traits.h:550:23,
-    inlined from 'void std::_Vector_base<_Tp, _Alloc>::_M_deallocate(pointer, std::size_t) [with _Tp = DNSResourceRecord; _Alloc = std::allocator<DNSResourceRecord>]' at /usr/include/c++/14/bits/stl_vector.h:389:19,
-    inlined from 'void std::_Vector_base<_Tp, _Alloc>::_M_deallocate(pointer, std::size_t) [with _Tp = DNSResourceRecord; _Alloc = std::allocator<DNSResourceRecord>]' at /usr/include/c++/14/bits/stl_vector.h:385:7,
-    inlined from 'std::_Vector_base<_Tp, _Alloc>::~_Vector_base() [with _Tp = DNSResourceRecord; _Alloc = std::allocator<DNSResourceRecord>]' at /usr/include/c++/14/bits/stl_vector.h:368:15,
-    inlined from 'std::vector<_Tp, _Alloc>::~vector() [with _Tp = DNSResourceRecord; _Alloc = std::allocator<DNSResourceRecord>]' at /usr/include/c++/14/bits/stl_vector.h:738:7,
-    inlined from 'void CommunicatorClass::getUpdatedProducers(UeberBackend*, std::vector<DomainInfo>&, const std::unordered_set<DNSName>&, CatalogHashMap&)' at auth-primarycommunicator.cc:178:66:
-/usr/include/c++/14/bits/new_allocator.h:172:33: warning: 'void operator delete(void*, std::size_t)' called on pointer '<unknown>' with nonzero offset 136 [-Wfree-nonheap-object]
-  172 |         _GLIBCXX_OPERATOR_DELETE(_GLIBCXX_SIZED_DEALLOC(__p, __n));
-      |                                 ^
-In member function '_Tp* std::__new_allocator<_Tp>::allocate(size_type, const void*) [with _Tp = DNSResourceRecord]',
-    inlined from 'static _Tp* std::allocator_traits<std::allocator<_CharT> >::allocate(allocator_type&, size_type) [with _Tp = DNSResourceRecord]' at /usr/include/c++/14/bits/alloc_traits.h:515:28,
-    inlined from 'std::_Vector_base<_Tp, _Alloc>::pointer std::_Vector_base<_Tp, _Alloc>::_M_allocate(std::size_t) [with _Tp = DNSResourceRecord; _Alloc = std::allocator<DNSResourceRecord>]' at /usr/include/c++/14/bits/stl_vector.h:380:33,
-    inlined from 'void std::_Vector_base<_Tp, _Alloc>::_M_create_storage(std::size_t) [with _Tp = DNSResourceRecord; _Alloc = std::allocator<DNSResourceRecord>]' at /usr/include/c++/14/bits/stl_vector.h:398:44,
-    inlined from 'std::_Vector_base<_Tp, _Alloc>::_Vector_base(std::size_t, const allocator_type&) [with _Tp = DNSResourceRecord; _Alloc = std::allocator<DNSResourceRecord>]' at /usr/include/c++/14/bits/stl_vector.h:334:26,
-    inlined from 'std::vector<_Tp, _Alloc>::vector(size_type, const value_type&, const allocator_type&) [with _Tp = DNSResourceRecord; _Alloc = std::allocator<DNSResourceRecord>]' at /usr/include/c++/14/bits/stl_vector.h:571:47,
-    inlined from 'void CommunicatorClass::getUpdatedProducers(UeberBackend*, std::vector<DomainInfo>&, const std::unordered_set<DNSName>&, CatalogHashMap&)' at auth-primarycommunicator.cc:178:97:
-/usr/include/c++/14/bits/new_allocator.h:151:55: note: returned from 'void* operator new(std::size_t)'
-  151 |         return static_cast<_Tp*>(_GLIBCXX_OPERATOR_NEW(__n * sizeof(_Tp)));
-      |                                                       ^
-/bin/bash ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread  -L/usr/lib -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o dnswasher base64.o dnslabeltext.o dnsname.o dnspcap.o dnswasher.o ipcipher.o logger.o misc.o qtype.o statbag.o unix_utility.o -lboost_program_options -lcrypto ../ext/ipcrypt/libipcrypt.la 
-libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o dnsscope arguments.o base32.o base64.o dns.o dnslabeltext.o dnsname.o dnsparser.o dnspcap.o dnsrecords.o dnsscope.o dnswriter.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o statnode.o svc-records.o unix_utility.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto -lboost_program_options -pthread
-/bin/bash ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o dumresp dnslabeltext.o dnsname.o dumresp.o iputils.o logger.o misc.o qtype.o statbag.o unix_utility.o  
-/bin/bash ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib  -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o pdns_notify arguments.o base32.o base64.o dns.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnswriter.o logger.o misc.o notify.o nsecrecords.o pollmplexer.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o -lcrypto -lboost_program_options -lsodium  
-libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o dnswasher base64.o dnslabeltext.o dnsname.o dnspcap.o dnswasher.o ipcipher.o logger.o misc.o qtype.o statbag.o unix_utility.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lboost_program_options -lcrypto ../ext/ipcrypt/.libs/libipcrypt.a -pthread
-/bin/bash ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib  -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o nproxy base32.o base64.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnswriter.o logger.o misc.o nproxy.o nsecrecords.o pollmplexer.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o -lcrypto -lboost_program_options 
-/bin/bash ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o nsec3dig base32.o base64.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnssecinfra.o dnswriter.o gss_context.o iputils.o logger.o misc.o nsec3dig.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o pkcs11signers.o -lcrypto  -lp11-kit  
 In file included from auth-catalogzone.hh:27,
                  from dnsbackend.hh:48,
                  from ws-auth.cc:22:
@@ -20351,17 +20354,21 @@
 dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
       |                                                   ^
+/bin/sh ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib  -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o nproxy base32.o base64.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnswriter.o logger.o misc.o nproxy.o nsecrecords.o pollmplexer.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o -lcrypto -lboost_program_options 
 dnssecinfra.hh: In member function 'std::string DNSCryptoKeyEngine::convertToPEMString() const':
 dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o dumresp dnslabeltext.o dnsname.o dumresp.o iputils.o logger.o misc.o qtype.o statbag.o unix_utility.o  -lcrypto ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -pthread
-libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o pdns_notify arguments.o base32.o base64.o dns.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnswriter.o logger.o misc.o notify.o nsecrecords.o pollmplexer.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto -lboost_program_options -lsodium -pthread
+/bin/sh ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o nsec3dig base32.o base64.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnssecinfra.o dnswriter.o gss_context.o iputils.o logger.o misc.o nsec3dig.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o pkcs11signers.o -lcrypto  -lp11-kit  
+/bin/sh ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o saxfr base32.o base64.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnssecinfra.o dnswriter.o gss_context.o iputils.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o saxfr.o sillyrecords.o statbag.o svc-records.o unix_utility.o pkcs11signers.o -lcrypto -lp11-kit   
+/bin/sh ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o stubquery arguments.o base32.o base64.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnswriter.o ednsoptions.o ednssubnet.o iputils.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o stubquery.o stubresolver.o svc-records.o unix_utility.o -lcrypto 
+/bin/sh ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o ixplore arguments.o axfr-retriever.o base32.o base64.o dns.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnssecinfra.o dnswriter.o ednsoptions.o ednssubnet.o gss_context.o iputils.o ixfr.o ixfrutils.o ixplore.o logger.o misc.o nsecrecords.o qtype.o query-local-address.o rcpgenerator.o resolver.o sillyrecords.o statbag.o svc-records.o tsigverifier.o unix_utility.o zoneparser-tng.o pkcs11signers.o -lcrypto  -lp11-kit  
 libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o nproxy base32.o base64.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnswriter.o logger.o misc.o nproxy.o nsecrecords.o pollmplexer.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto -lboost_program_options -pthread
 libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o nsec3dig base32.o base64.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnssecinfra.o dnswriter.o gss_context.o iputils.o logger.o misc.o nsec3dig.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o pkcs11signers.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto -lp11-kit -pthread
-/bin/bash ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o saxfr base32.o base64.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnssecinfra.o dnswriter.o gss_context.o iputils.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o saxfr.o sillyrecords.o statbag.o svc-records.o unix_utility.o pkcs11signers.o -lcrypto -lp11-kit   
-/bin/bash ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o stubquery arguments.o base32.o base64.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnswriter.o ednsoptions.o ednssubnet.o iputils.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o stubquery.o stubresolver.o svc-records.o unix_utility.o -lcrypto 
-/bin/bash ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o ixplore arguments.o axfr-retriever.o base32.o base64.o dns.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnssecinfra.o dnswriter.o ednsoptions.o ednssubnet.o gss_context.o iputils.o ixfr.o ixfrutils.o ixplore.o logger.o misc.o nsecrecords.o qtype.o query-local-address.o rcpgenerator.o resolver.o sillyrecords.o statbag.o svc-records.o tsigverifier.o unix_utility.o zoneparser-tng.o pkcs11signers.o -lcrypto  -lp11-kit  
+/bin/sh ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -pthread -L/usr/lib  -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o calidns base32.o base64.o calidns.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnswriter.o ednsoptions.o ednssubnet.o iputils.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o -lcrypto -lboost_program_options 
+libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o stubquery arguments.o base32.o base64.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnswriter.o ednsoptions.o ednssubnet.o iputils.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o stubquery.o stubresolver.o svc-records.o unix_utility.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto -pthread
+libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o saxfr base32.o base64.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnssecinfra.o dnswriter.o gss_context.o iputils.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o saxfr.o sillyrecords.o statbag.o svc-records.o unix_utility.o pkcs11signers.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto -lp11-kit -pthread
+libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o ixplore arguments.o axfr-retriever.o base32.o base64.o dns.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnssecinfra.o dnswriter.o ednsoptions.o ednssubnet.o gss_context.o iputils.o ixfr.o ixfrutils.o ixplore.o logger.o misc.o nsecrecords.o qtype.o query-local-address.o rcpgenerator.o resolver.o sillyrecords.o statbag.o svc-records.o tsigverifier.o unix_utility.o zoneparser-tng.o pkcs11signers.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto -lp11-kit -pthread
 In file included from ../pdns/auth-catalogzone.hh:27,
                  from ../pdns/dnsbackend.hh:48,
                  from backends/gsql/gsqlbackend.cc:26:
@@ -20373,20 +20380,29 @@
 ../pdns/dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o saxfr base32.o base64.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnssecinfra.o dnswriter.o gss_context.o iputils.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o saxfr.o sillyrecords.o statbag.o svc-records.o unix_utility.o pkcs11signers.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto -lp11-kit -pthread
-libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o stubquery arguments.o base32.o base64.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnswriter.o ednsoptions.o ednssubnet.o iputils.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o stubquery.o stubresolver.o svc-records.o unix_utility.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto -pthread
-/bin/bash ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o sdig sdig-base32.o sdig-base64.o sdig-dns.o sdig-dnslabeltext.o sdig-dnsname.o sdig-dnsparser.o sdig-dnsrecords.o sdig-dnswriter.o sdig-ednsextendederror.o sdig-ednssubnet.o sdig-iputils.o sdig-libssl.o sdig-logger.o sdig-misc.o sdig-nsecrecords.o sdig-proxy-protocol.o sdig-qtype.o sdig-rcpgenerator.o sdig-sdig.o sdig-sillyrecords.o sdig-statbag.o sdig-svc-records.o sdig-tcpiohandler.o sdig-unix_utility.o sdig-minicurl.o -lcrypto -lcurl    
-/bin/bash ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -pthread -L/usr/lib  -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o calidns base32.o base64.o calidns.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnswriter.o ednsoptions.o ednssubnet.o iputils.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o -lcrypto -lboost_program_options 
-libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o ixplore arguments.o axfr-retriever.o base32.o base64.o dns.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnssecinfra.o dnswriter.o ednsoptions.o ednssubnet.o gss_context.o iputils.o ixfr.o ixfrutils.o ixplore.o logger.o misc.o nsecrecords.o qtype.o query-local-address.o rcpgenerator.o resolver.o sillyrecords.o statbag.o svc-records.o tsigverifier.o unix_utility.o zoneparser-tng.o pkcs11signers.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto -lp11-kit -pthread
-/bin/bash ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib  -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o dnsbulktest arguments.o base32.o base64.o dnsbulktest.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnswriter.o iputils.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o -lcrypto -lboost_program_options -lsodium  
-libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o sdig sdig-base32.o sdig-base64.o sdig-dns.o sdig-dnslabeltext.o sdig-dnsname.o sdig-dnsparser.o sdig-dnsrecords.o sdig-dnswriter.o sdig-ednsextendederror.o sdig-ednssubnet.o sdig-iputils.o sdig-libssl.o sdig-logger.o sdig-misc.o sdig-nsecrecords.o sdig-proxy-protocol.o sdig-qtype.o sdig-rcpgenerator.o sdig-sdig.o sdig-sillyrecords.o sdig-statbag.o sdig-svc-records.o sdig-tcpiohandler.o sdig-unix_utility.o sdig-minicurl.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto -lcurl -pthread
 libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o calidns base32.o base64.o calidns.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnswriter.o ednsoptions.o ednssubnet.o iputils.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto -lboost_program_options -pthread
-libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o dnsbulktest arguments.o base32.o base64.o dnsbulktest.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnswriter.o iputils.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto -lboost_program_options -lsodium -pthread
-/bin/bash ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib  -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o dnstcpbench base32.o base64.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnstcpbench.o dnswriter.o iputils.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o threadname.o unix_utility.o -lcrypto -lboost_program_options 
-/bin/bash ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread  -L/usr/lib -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o ixfrdist arguments.o auth-caches.o auth-packetcache.o auth-querycache.o auth-zonecache.o axfr-retriever.o base32.o base64.o credentials.o dns.o dnsbackend.o dnslabeltext.o dnsname.o dnspacket.o dnsparser.o dnsrecords.o dnssecinfra.o dnswriter.o ednscookies.o ednsextendederror.o ednsoptions.o ednssubnet.o gss_context.o iputils.o ixfr.o ixfrdist-stats.o ixfrdist-web.o ixfrdist.o ixfrutils.o logger.o misc.o nsecrecords.o pollmplexer.o qtype.o query-local-address.o rcpgenerator.o resolver.o shuffle.o sillyrecords.o statbag.o svc-records.o threadname.o tsigverifier.o ueberbackend.o unix_utility.o uuid-utils.o webserver.o zoneparser-tng.o pkcs11signers.o   epollmplexer.o  -lboost_program_options ../ext/json11/libjson11.la  -lcrypto ../ext/yahttp/yahttp/libyahttp.la -lyaml-cpp  -lsodium  -lp11-kit   
-/bin/bash ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o zone2ldap arguments.o base32.o base64.o bindlexer.o bindparser.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnswriter.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o zone2ldap.o zoneparser-tng.o -lcrypto  
-/bin/bash ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o speedtest arguments.o base32.o base64.o credentials.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnssecinfra.o dnswriter.o gss_context.o iputils.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o speedtest.o statbag.o svc-records.o unix_utility.o uuid-utils.o pkcs11signers.o -lcrypto   -lp11-kit  -lsodium  
+/bin/sh ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib  -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o dnstcpbench base32.o base64.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnstcpbench.o dnswriter.o iputils.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o threadname.o unix_utility.o -lcrypto -lboost_program_options 
+/bin/sh ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o zone2ldap arguments.o base32.o base64.o bindlexer.o bindparser.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnswriter.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o zone2ldap.o zoneparser-tng.o -lcrypto  
 libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o dnstcpbench base32.o base64.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnstcpbench.o dnswriter.o iputils.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o threadname.o unix_utility.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto -lboost_program_options -pthread
+/bin/sh ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o speedtest arguments.o base32.o base64.o credentials.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnssecinfra.o dnswriter.o gss_context.o iputils.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o speedtest.o statbag.o svc-records.o unix_utility.o uuid-utils.o pkcs11signers.o -lcrypto   -lp11-kit  -lsodium  
+libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o zone2ldap arguments.o base32.o base64.o bindlexer.o bindparser.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnswriter.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o zone2ldap.o zoneparser-tng.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto -pthread
+sed -e 's!/pdns_server!& --config-name=%i!' \
+  -e 's!Authoritative Server!& %i!' \
+  -e 's!SyslogIdentifier=.*!&-%i!' \
+  < pdns.service > pdns@.service
+sed -e 's!RuntimeDirectory=.*!&-%i!' -i pdns@.service
+sed -e 's!/ixfrdist!& --config /etc/powerdns/ixfrdist-%i.yml!' \
+  < ixfrdist.service > ixfrdist@.service
+libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o speedtest arguments.o base32.o base64.o credentials.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnssecinfra.o dnswriter.o gss_context.o iputils.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o speedtest.o statbag.o svc-records.o unix_utility.o uuid-utils.o pkcs11signers.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto -lp11-kit -lsodium -pthread
+In file included from tcpreceiver.cc:30:
+dnssecinfra.hh: In member function 'void DNSCryptoKeyEngine::createFromPEMString(DNSKEYRecordContent&, const std::string&)':
+dnssecinfra.hh:70:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
+   70 |       unique_ptr<std::FILE, decltype(&std::fclose)> inputFile{fmemopen(const_cast<char*>(contents.data()), contents.length(), "r"), &std::fclose};
+      |                                                   ^
+dnssecinfra.hh: In member function 'std::string DNSCryptoKeyEngine::convertToPEMString() const':
+dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
+   93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
+      |                                                   ^
 In file included from auth-catalogzone.hh:27,
                  from dnsbackend.hh:48,
                  from ueberbackend.hh:33,
@@ -20399,21 +20415,42 @@
 dnssecinfra.hh:93:51: warning: ignoring attributes on template argument 'int (*)(FILE*)' [-Wignored-attributes]
    93 |       unique_ptr<std::FILE, decltype(&std::fclose)> outputFile{fmemopen(output.data(), output.length() - 1, "w"), &std::fclose};
       |                                                   ^
-sed -e 's!/pdns_server!& --config-name=%i!' \
-  -e 's!Authoritative Server!& %i!' \
-  -e 's!SyslogIdentifier=.*!&-%i!' \
-  < pdns.service > pdns@.service
-sed -e 's!RuntimeDirectory=.*!&-%i!' -i pdns@.service
-sed -e 's!/ixfrdist!& --config /etc/powerdns/ixfrdist-%i.yml!' \
-  < ixfrdist.service > ixfrdist@.service
-libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o zone2ldap arguments.o base32.o base64.o bindlexer.o bindparser.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnswriter.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o zone2ldap.o zoneparser-tng.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto -pthread
-libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o ixfrdist arguments.o auth-caches.o auth-packetcache.o auth-querycache.o auth-zonecache.o axfr-retriever.o base32.o base64.o credentials.o dns.o dnsbackend.o dnslabeltext.o dnsname.o dnspacket.o dnsparser.o dnsrecords.o dnssecinfra.o dnswriter.o ednscookies.o ednsextendederror.o ednsoptions.o ednssubnet.o gss_context.o iputils.o ixfr.o ixfrdist-stats.o ixfrdist-web.o ixfrdist.o ixfrutils.o logger.o misc.o nsecrecords.o pollmplexer.o qtype.o query-local-address.o rcpgenerator.o resolver.o shuffle.o sillyrecords.o statbag.o svc-records.o threadname.o tsigverifier.o ueberbackend.o unix_utility.o uuid-utils.o webserver.o zoneparser-tng.o pkcs11signers.o epollmplexer.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lboost_program_options ../ext/json11/.libs/libjson11.a -lcrypto ../ext/yahttp/yahttp/.libs/libyahttp.a -lyaml-cpp -lsodium -lp11-kit -pthread
-libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o speedtest arguments.o base32.o base64.o credentials.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnssecinfra.o dnswriter.o gss_context.o iputils.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o speedtest.o statbag.o svc-records.o unix_utility.o uuid-utils.o pkcs11signers.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto -lp11-kit -lsodium -pthread
-/bin/bash ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib  -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o testrunner arguments.o auth-caches.o auth-packetcache.o auth-querycache.o auth-zonecache.o base32.o base64.o bindlexer.o bindparser.o channel.o credentials.o dbdnsseckeeper.o dns.o dnsbackend.o dnslabeltext.o dnsname.o dnspacket.o dnsparser.o dnsrecords.o dnssecinfra.o dnssecsigner.o dnswriter.o ednscookies.o ednsoptions.o ednssubnet.o gettime.o gss_context.o ipcipher.o iputils.o ixfr.o logger.o lua-auth4.o lua-base4.o misc.o nameserver.o nsecrecords.o opensslsigners.o pollmplexer.o proxy-protocol.o qtype.o rcpgenerator.o responsestats-auth.o responsestats.o shuffle.o sillyrecords.o statbag.o stubresolver.o svc-records.o test-arguments_cc.o test-auth-zonecache_cc.o test-base32_cc.o test-base64_cc.o test-bindparser_cc.o test-channel.o test-communicator_hh.o test-credentials_cc.o test-digests_hh.o test-distributor_hh.o test-dns_random_hh.o test-dnsname_cc.o test-dnsparser_cc.o test-dnsparser_hh.o test-dnsrecordcontent.o test-dnsrecords_cc.o test-dnswriter_cc.o test-ednscookie_cc.o test-ipcrypt_cc.o test-iputils_hh.o test-ixfr_cc.o test-lock_hh.o test-lua_auth4_cc.o test-luawrapper.o test-misc_hh.o test-mplexer.o test-nameserver_cc.o test-packetcache_cc.o test-packetcache_hh.o test-proxy_protocol_cc.o test-rcpgenerator_cc.o test-sha_hh.o test-signers.o test-statbag_cc.o test-svc_records_cc.o test-trusted-notification-proxy_cc.o test-tsig.o test-ueberbackend_cc.o test-webserver_cc.o test-zonemd_cc.o test-zoneparser_tng_cc.o testrunner.o threadname.o trusted-notification-proxy.o tsigverifier.o ueberbackend.o unix_utility.o uuid-utils.o webserver.o zonemd.o zoneparser-tng.o pkcs11signers.o sodiumsigners.o    epollmplexer.o  -lcrypto -lboost_unit_test_framework  -lluajit-5.1   ../ext/ipcrypt/libipcrypt.la ../ext/yahttp/yahttp/libyahttp.la ../ext/json11/libjson11.la  -lp11-kit  -lsodium   
+/bin/sh ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o sdig sdig-base32.o sdig-base64.o sdig-dns.o sdig-dnslabeltext.o sdig-dnsname.o sdig-dnsparser.o sdig-dnsrecords.o sdig-dnswriter.o sdig-ednsextendederror.o sdig-ednssubnet.o sdig-iputils.o sdig-libssl.o sdig-logger.o sdig-misc.o sdig-nsecrecords.o sdig-proxy-protocol.o sdig-qtype.o sdig-rcpgenerator.o sdig-sdig.o sdig-sillyrecords.o sdig-statbag.o sdig-svc-records.o sdig-tcpiohandler.o sdig-unix_utility.o sdig-minicurl.o -lcrypto -lcurl    
+libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o sdig sdig-base32.o sdig-base64.o sdig-dns.o sdig-dnslabeltext.o sdig-dnsname.o sdig-dnsparser.o sdig-dnsrecords.o sdig-dnswriter.o sdig-ednsextendederror.o sdig-ednssubnet.o sdig-iputils.o sdig-libssl.o sdig-logger.o sdig-misc.o sdig-nsecrecords.o sdig-proxy-protocol.o sdig-qtype.o sdig-rcpgenerator.o sdig-sdig.o sdig-sillyrecords.o sdig-statbag.o sdig-svc-records.o sdig-tcpiohandler.o sdig-unix_utility.o sdig-minicurl.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto -lcurl -pthread
+/bin/sh ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib  -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o dnsbulktest arguments.o base32.o base64.o dnsbulktest.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnswriter.o iputils.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o -lcrypto -lboost_program_options -lsodium  
+libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o dnsbulktest arguments.o base32.o base64.o dnsbulktest.o dnslabeltext.o dnsname.o dnsparser.o dnsrecords.o dnswriter.o iputils.o logger.o misc.o nsecrecords.o qtype.o rcpgenerator.o sillyrecords.o statbag.o svc-records.o unix_utility.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto -lboost_program_options -lsodium -pthread
+In file included from /usr/include/x86_64-linux-gnu/c++/14/bits/c++allocator.h:33,
+                 from /usr/include/c++/14/bits/allocator.h:46,
+                 from /usr/include/c++/14/string:43,
+                 from auth-caches.hh:23,
+                 from auth-primarycommunicator.cc:25:
+In member function 'void std::__new_allocator<_Tp>::deallocate(_Tp*, size_type) [with _Tp = DNSResourceRecord]',
+    inlined from 'static void std::allocator_traits<std::allocator<_CharT> >::deallocate(allocator_type&, pointer, size_type) [with _Tp = DNSResourceRecord]' at /usr/include/c++/14/bits/alloc_traits.h:550:23,
+    inlined from 'void std::_Vector_base<_Tp, _Alloc>::_M_deallocate(pointer, std::size_t) [with _Tp = DNSResourceRecord; _Alloc = std::allocator<DNSResourceRecord>]' at /usr/include/c++/14/bits/stl_vector.h:389:19,
+    inlined from 'void std::_Vector_base<_Tp, _Alloc>::_M_deallocate(pointer, std::size_t) [with _Tp = DNSResourceRecord; _Alloc = std::allocator<DNSResourceRecord>]' at /usr/include/c++/14/bits/stl_vector.h:385:7,
+    inlined from 'std::_Vector_base<_Tp, _Alloc>::~_Vector_base() [with _Tp = DNSResourceRecord; _Alloc = std::allocator<DNSResourceRecord>]' at /usr/include/c++/14/bits/stl_vector.h:368:15,
+    inlined from 'std::vector<_Tp, _Alloc>::~vector() [with _Tp = DNSResourceRecord; _Alloc = std::allocator<DNSResourceRecord>]' at /usr/include/c++/14/bits/stl_vector.h:738:7,
+    inlined from 'void CommunicatorClass::getUpdatedProducers(UeberBackend*, std::vector<DomainInfo>&, const std::unordered_set<DNSName>&, CatalogHashMap&)' at auth-primarycommunicator.cc:178:66:
+/usr/include/c++/14/bits/new_allocator.h:172:33: warning: 'void operator delete(void*, std::size_t)' called on pointer '<unknown>' with nonzero offset 136 [-Wfree-nonheap-object]
+  172 |         _GLIBCXX_OPERATOR_DELETE(_GLIBCXX_SIZED_DEALLOC(__p, __n));
+      |                                 ^
+In member function '_Tp* std::__new_allocator<_Tp>::allocate(size_type, const void*) [with _Tp = DNSResourceRecord]',
+    inlined from 'static _Tp* std::allocator_traits<std::allocator<_CharT> >::allocate(allocator_type&, size_type) [with _Tp = DNSResourceRecord]' at /usr/include/c++/14/bits/alloc_traits.h:515:28,
+    inlined from 'std::_Vector_base<_Tp, _Alloc>::pointer std::_Vector_base<_Tp, _Alloc>::_M_allocate(std::size_t) [with _Tp = DNSResourceRecord; _Alloc = std::allocator<DNSResourceRecord>]' at /usr/include/c++/14/bits/stl_vector.h:380:33,
+    inlined from 'void std::_Vector_base<_Tp, _Alloc>::_M_create_storage(std::size_t) [with _Tp = DNSResourceRecord; _Alloc = std::allocator<DNSResourceRecord>]' at /usr/include/c++/14/bits/stl_vector.h:398:44,
+    inlined from 'std::_Vector_base<_Tp, _Alloc>::_Vector_base(std::size_t, const allocator_type&) [with _Tp = DNSResourceRecord; _Alloc = std::allocator<DNSResourceRecord>]' at /usr/include/c++/14/bits/stl_vector.h:334:26,
+    inlined from 'std::vector<_Tp, _Alloc>::vector(size_type, const value_type&, const allocator_type&) [with _Tp = DNSResourceRecord; _Alloc = std::allocator<DNSResourceRecord>]' at /usr/include/c++/14/bits/stl_vector.h:571:47,
+    inlined from 'void CommunicatorClass::getUpdatedProducers(UeberBackend*, std::vector<DomainInfo>&, const std::unordered_set<DNSName>&, CatalogHashMap&)' at auth-primarycommunicator.cc:178:97:
+/usr/include/c++/14/bits/new_allocator.h:151:55: note: returned from 'void* operator new(std::size_t)'
+  151 |         return static_cast<_Tp*>(_GLIBCXX_OPERATOR_NEW(__n * sizeof(_Tp)));
+      |                                                       ^
+/bin/sh ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -L/usr/lib  -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o testrunner arguments.o auth-caches.o auth-packetcache.o auth-querycache.o auth-zonecache.o base32.o base64.o bindlexer.o bindparser.o channel.o credentials.o dbdnsseckeeper.o dns.o dnsbackend.o dnslabeltext.o dnsname.o dnspacket.o dnsparser.o dnsrecords.o dnssecinfra.o dnssecsigner.o dnswriter.o ednscookies.o ednsoptions.o ednssubnet.o gettime.o gss_context.o ipcipher.o iputils.o ixfr.o logger.o lua-auth4.o lua-base4.o misc.o nameserver.o nsecrecords.o opensslsigners.o pollmplexer.o proxy-protocol.o qtype.o rcpgenerator.o responsestats-auth.o responsestats.o shuffle.o sillyrecords.o statbag.o stubresolver.o svc-records.o test-arguments_cc.o test-auth-zonecache_cc.o test-base32_cc.o test-base64_cc.o test-bindparser_cc.o test-channel.o test-communicator_hh.o test-credentials_cc.o test-digests_hh.o test-distributor_hh.o test-dns_random_hh.o test-dnsname_cc.o test-dnsparser_cc.o test-dnsparser_hh.o test-dnsrecordcontent.o test-dnsrecords_cc.o test-dnswriter_cc.o test-ednscookie_cc.o test-ipcrypt_cc.o test-iputils_hh.o test-ixfr_cc.o test-lock_hh.o test-lua_auth4_cc.o test-luawrapper.o test-misc_hh.o test-mplexer.o test-nameserver_cc.o test-packetcache_cc.o test-packetcache_hh.o test-proxy_protocol_cc.o test-rcpgenerator_cc.o test-sha_hh.o test-signers.o test-statbag_cc.o test-svc_records_cc.o test-trusted-notification-proxy_cc.o test-tsig.o test-ueberbackend_cc.o test-webserver_cc.o test-zonemd_cc.o test-zoneparser_tng_cc.o testrunner.o threadname.o trusted-notification-proxy.o tsigverifier.o ueberbackend.o unix_utility.o uuid-utils.o webserver.o zonemd.o zoneparser-tng.o pkcs11signers.o sodiumsigners.o    epollmplexer.o  -lcrypto -lboost_unit_test_framework  -lluajit-5.1   ../ext/ipcrypt/libipcrypt.la ../ext/yahttp/yahttp/libyahttp.la ../ext/json11/libjson11.la  -lp11-kit  -lsodium   
+/bin/sh ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread  -L/usr/lib -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o ixfrdist arguments.o auth-caches.o auth-packetcache.o auth-querycache.o auth-zonecache.o axfr-retriever.o base32.o base64.o credentials.o dns.o dnsbackend.o dnslabeltext.o dnsname.o dnspacket.o dnsparser.o dnsrecords.o dnssecinfra.o dnswriter.o ednscookies.o ednsextendederror.o ednsoptions.o ednssubnet.o gss_context.o iputils.o ixfr.o ixfrdist-stats.o ixfrdist-web.o ixfrdist.o ixfrutils.o logger.o misc.o nsecrecords.o pollmplexer.o qtype.o query-local-address.o rcpgenerator.o resolver.o shuffle.o sillyrecords.o statbag.o svc-records.o threadname.o tsigverifier.o ueberbackend.o unix_utility.o uuid-utils.o webserver.o zoneparser-tng.o pkcs11signers.o   epollmplexer.o  -lboost_program_options ../ext/json11/libjson11.la  -lcrypto ../ext/yahttp/yahttp/libyahttp.la -lyaml-cpp  -lsodium  -lp11-kit   
 libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o testrunner arguments.o auth-caches.o auth-packetcache.o auth-querycache.o auth-zonecache.o base32.o base64.o bindlexer.o bindparser.o channel.o credentials.o dbdnsseckeeper.o dns.o dnsbackend.o dnslabeltext.o dnsname.o dnspacket.o dnsparser.o dnsrecords.o dnssecinfra.o dnssecsigner.o dnswriter.o ednscookies.o ednsoptions.o ednssubnet.o gettime.o gss_context.o ipcipher.o iputils.o ixfr.o logger.o lua-auth4.o lua-base4.o misc.o nameserver.o nsecrecords.o opensslsigners.o pollmplexer.o proxy-protocol.o qtype.o rcpgenerator.o responsestats-auth.o responsestats.o shuffle.o sillyrecords.o statbag.o stubresolver.o svc-records.o test-arguments_cc.o test-auth-zonecache_cc.o test-base32_cc.o test-base64_cc.o test-bindparser_cc.o test-channel.o test-communicator_hh.o test-credentials_cc.o test-digests_hh.o test-distributor_hh.o test-dns_random_hh.o test-dnsname_cc.o test-dnsparser_cc.o test-dnsparser_hh.o test-dnsrecordcontent.o test-dnsrecords_cc.o test-dnswriter_cc.o test-ednscookie_cc.o test-ipcrypt_cc.o test-iputils_hh.o test-ixfr_cc.o test-lock_hh.o test-lua_auth4_cc.o test-luawrapper.o test-misc_hh.o test-mplexer.o test-nameserver_cc.o test-packetcache_cc.o test-packetcache_hh.o test-proxy_protocol_cc.o test-rcpgenerator_cc.o test-sha_hh.o test-signers.o test-statbag_cc.o test-svc_records_cc.o test-trusted-notification-proxy_cc.o test-tsig.o test-ueberbackend_cc.o test-webserver_cc.o test-zonemd_cc.o test-zoneparser_tng_cc.o testrunner.o threadname.o trusted-notification-proxy.o tsigverifier.o ueberbackend.o unix_utility.o uuid-utils.o webserver.o zonemd.o zoneparser-tng.o pkcs11signers.o sodiumsigners.o epollmplexer.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lcrypto -lboost_unit_test_framework -lluajit-5.1 ../ext/ipcrypt/.libs/libipcrypt.a ../ext/yahttp/yahttp/.libs/libyahttp.a ../ext/json11/.libs/libjson11.a -lp11-kit -lsodium -pthread
-/bin/bash ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -export-dynamic  -L/usr/lib -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o pdnsutil arguments.o auth-caches.o auth-catalogzone.o auth-packetcache.o auth-querycache.o auth-zonecache.o backends/gsql/gsqlbackend.o base32.o base64.o bindlexer.o bindparser.o credentials.o dbdnsseckeeper.o dns.o dnsbackend.o dnslabeltext.o dnsname.o dnspacket.o dnsparser.o dnsrecords.o dnssecinfra.o dnssecsigner.o dnswriter.o dynlistener.o ednscookies.o ednsoptions.o ednssubnet.o gettime.o gss_context.o ipcipher.o iputils.o json.o logger.o lua-auth4.o lua-base4.o misc.o nsecrecords.o opensslsigners.o pdnsutil.o qtype.o rcpgenerator.o serialtweaker.o shuffle.o signingpipe.o sillyrecords.o statbag.o stubresolver.o svc-records.o threadname.o tsigutils.o ueberbackend.o unix_utility.o uuid-utils.o zonemd.o zoneparser-tng.o sodiumsigners.o  ssqlite3.o pkcs11signers.o ../ext/yahttp/yahttp/libyahttp.la ../ext/json11/libjson11.la  -lboost_program_options -lcrypto ../ext/ipcrypt/libipcrypt.la -lsodium   -lsqlite3  -lp11-kit  -lluajit-5.1   
+libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o ixfrdist arguments.o auth-caches.o auth-packetcache.o auth-querycache.o auth-zonecache.o axfr-retriever.o base32.o base64.o credentials.o dns.o dnsbackend.o dnslabeltext.o dnsname.o dnspacket.o dnsparser.o dnsrecords.o dnssecinfra.o dnswriter.o ednscookies.o ednsextendederror.o ednsoptions.o ednssubnet.o gss_context.o iputils.o ixfr.o ixfrdist-stats.o ixfrdist-web.o ixfrdist.o ixfrutils.o logger.o misc.o nsecrecords.o pollmplexer.o qtype.o query-local-address.o rcpgenerator.o resolver.o shuffle.o sillyrecords.o statbag.o svc-records.o threadname.o tsigverifier.o ueberbackend.o unix_utility.o uuid-utils.o webserver.o zoneparser-tng.o pkcs11signers.o epollmplexer.o  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib -lboost_program_options ../ext/json11/.libs/libjson11.a -lcrypto ../ext/yahttp/yahttp/.libs/libyahttp.a -lyaml-cpp -lsodium -lp11-kit -pthread
+/bin/sh ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -export-dynamic  -L/usr/lib -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o pdnsutil arguments.o auth-caches.o auth-catalogzone.o auth-packetcache.o auth-querycache.o auth-zonecache.o backends/gsql/gsqlbackend.o base32.o base64.o bindlexer.o bindparser.o credentials.o dbdnsseckeeper.o dns.o dnsbackend.o dnslabeltext.o dnsname.o dnspacket.o dnsparser.o dnsrecords.o dnssecinfra.o dnssecsigner.o dnswriter.o dynlistener.o ednscookies.o ednsoptions.o ednssubnet.o gettime.o gss_context.o ipcipher.o iputils.o json.o logger.o lua-auth4.o lua-base4.o misc.o nsecrecords.o opensslsigners.o pdnsutil.o qtype.o rcpgenerator.o serialtweaker.o shuffle.o signingpipe.o sillyrecords.o statbag.o stubresolver.o svc-records.o threadname.o tsigutils.o ueberbackend.o unix_utility.o uuid-utils.o zonemd.o zoneparser-tng.o sodiumsigners.o  ssqlite3.o pkcs11signers.o ../ext/yahttp/yahttp/libyahttp.la ../ext/json11/libjson11.la  -lboost_program_options -lcrypto ../ext/ipcrypt/libipcrypt.la -lsodium   -lsqlite3  -lp11-kit  -lluajit-5.1   
 libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o pdnsutil arguments.o auth-caches.o auth-catalogzone.o auth-packetcache.o auth-querycache.o auth-zonecache.o backends/gsql/gsqlbackend.o base32.o base64.o bindlexer.o bindparser.o credentials.o dbdnsseckeeper.o dns.o dnsbackend.o dnslabeltext.o dnsname.o dnspacket.o dnsparser.o dnsrecords.o dnssecinfra.o dnssecsigner.o dnswriter.o dynlistener.o ednscookies.o ednsoptions.o ednssubnet.o gettime.o gss_context.o ipcipher.o iputils.o json.o logger.o lua-auth4.o lua-base4.o misc.o nsecrecords.o opensslsigners.o pdnsutil.o qtype.o rcpgenerator.o serialtweaker.o shuffle.o signingpipe.o sillyrecords.o statbag.o stubresolver.o svc-records.o threadname.o tsigutils.o ueberbackend.o unix_utility.o uuid-utils.o zonemd.o zoneparser-tng.o sodiumsigners.o ssqlite3.o pkcs11signers.o -Wl,--export-dynamic  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib ../ext/yahttp/yahttp/.libs/libyahttp.a ../ext/json11/.libs/libjson11.a -lboost_program_options -lcrypto ../ext/ipcrypt/.libs/libipcrypt.a -lsodium -lsqlite3 -lp11-kit -lluajit-5.1 -pthread
-/bin/bash ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -export-dynamic -L/usr/lib -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o pdns_server arguments.o auth-caches.o auth-carbon.o auth-catalogzone.o auth-main.o auth-packetcache.o auth-primarycommunicator.o auth-querycache.o auth-secondarycommunicator.o auth-zonecache.o axfr-retriever.o backends/gsql/gsqlbackend.o base32.o base64.o bindlexer.o bindparser.o communicator.o coverage.o credentials.o dbdnsseckeeper.o dns.o dnsbackend.o dnslabeltext.o dnsname.o dnspacket.o dnsparser.o dnsproxy.o dnsrecords.o dnssecinfra.o dnssecsigner.o dnswriter.o dynhandler.o dynlistener.o ednscookies.o ednsoptions.o ednssubnet.o gettime.o gss_context.o iputils.o ixfr.o json.o logger.o lua-auth4.o lua-base4.o misc.o nameserver.o nsecrecords.o opensslsigners.o packethandler.o proxy-protocol.o qtype.o query-local-address.o rcpgenerator.o resolver.o responsestats.o responsestats-auth.o rfc2136handler.o secpoll-auth.o secpoll.o serialtweaker.o shuffle.o signingpipe.o sillyrecords.o statbag.o stubresolver.o svc-records.o tcpreceiver.o threadname.o tkey.o trusted-notification-proxy.o tsigutils.o tsigverifier.o ueberbackend.o unix_semaphore.o unix_utility.o uuid-utils.o version.o webserver.o ws-api.o ws-auth.o zoneparser-tng.o lua-record.o minicurl.o sodiumsigners.o  ssqlite3.o pkcs11signers.o  ../ext/yahttp/yahttp/libyahttp.la ../ext/json11/libjson11.la -lcrypto -lsystemd  -lcurl -lsodium   -lsqlite3  -lp11-kit  -lluajit-5.1   
+/bin/sh ../libtool  --tag=CXX   --mode=link g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION='"4.9.4-2.Debian"' -pie   -lcrypto ../ext/arc4random/libarc4random.la -pthread -export-dynamic -L/usr/lib -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z,relro -Wl,-z,now -o pdns_server arguments.o auth-caches.o auth-carbon.o auth-catalogzone.o auth-main.o auth-packetcache.o auth-primarycommunicator.o auth-querycache.o auth-secondarycommunicator.o auth-zonecache.o axfr-retriever.o backends/gsql/gsqlbackend.o base32.o base64.o bindlexer.o bindparser.o communicator.o coverage.o credentials.o dbdnsseckeeper.o dns.o dnsbackend.o dnslabeltext.o dnsname.o dnspacket.o dnsparser.o dnsproxy.o dnsrecords.o dnssecinfra.o dnssecsigner.o dnswriter.o dynhandler.o dynlistener.o ednscookies.o ednsoptions.o ednssubnet.o gettime.o gss_context.o iputils.o ixfr.o json.o logger.o lua-auth4.o lua-base4.o misc.o nameserver.o nsecrecords.o opensslsigners.o packethandler.o proxy-protocol.o qtype.o query-local-address.o rcpgenerator.o resolver.o responsestats.o responsestats-auth.o rfc2136handler.o secpoll-auth.o secpoll.o serialtweaker.o shuffle.o signingpipe.o sillyrecords.o statbag.o stubresolver.o svc-records.o tcpreceiver.o threadname.o tkey.o trusted-notification-proxy.o tsigutils.o tsigverifier.o ueberbackend.o unix_semaphore.o unix_utility.o uuid-utils.o version.o webserver.o ws-api.o ws-auth.o zoneparser-tng.o lua-record.o minicurl.o sodiumsigners.o  ssqlite3.o pkcs11signers.o  ../ext/yahttp/yahttp/libyahttp.la ../ext/json11/libjson11.la -lcrypto -lsystemd  -lcurl -lsodium   -lsqlite3  -lp11-kit  -lluajit-5.1   
 libtool: link: g++ -std=c++17 -DSYSCONFDIR=\"/etc/powerdns\" -DPKGLIBDIR=\"/usr/lib/x86_64-linux-gnu/pdns\" -DLOCALSTATEDIR=\"/var/run\" -fPIE -DPIE -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 --param ssp-buffer-size=4 -fstack-protector -g -O2 -Wall -Wextra -Wshadow -Wmissing-declarations -Wredundant-decls -g -O2 -ffile-prefix-map=/build/reproducible-path/pdns-4.9.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DPACKAGEVERSION=\"4.9.4-2.Debian\" -pie -Wl,-z -Wl,relro -Wl,-z -Wl,now -Wl,-z -Wl,relro -Wl,-z -Wl,now -o pdns_server arguments.o auth-caches.o auth-carbon.o auth-catalogzone.o auth-main.o auth-packetcache.o auth-primarycommunicator.o auth-querycache.o auth-secondarycommunicator.o auth-zonecache.o axfr-retriever.o backends/gsql/gsqlbackend.o base32.o base64.o bindlexer.o bindparser.o communicator.o coverage.o credentials.o dbdnsseckeeper.o dns.o dnsbackend.o dnslabeltext.o dnsname.o dnspacket.o dnsparser.o dnsproxy.o dnsrecords.o dnssecinfra.o dnssecsigner.o dnswriter.o dynhandler.o dynlistener.o ednscookies.o ednsoptions.o ednssubnet.o gettime.o gss_context.o iputils.o ixfr.o json.o logger.o lua-auth4.o lua-base4.o misc.o nameserver.o nsecrecords.o opensslsigners.o packethandler.o proxy-protocol.o qtype.o query-local-address.o rcpgenerator.o resolver.o responsestats.o responsestats-auth.o rfc2136handler.o secpoll-auth.o secpoll.o serialtweaker.o shuffle.o signingpipe.o sillyrecords.o statbag.o stubresolver.o svc-records.o tcpreceiver.o threadname.o tkey.o trusted-notification-proxy.o tsigutils.o tsigverifier.o ueberbackend.o unix_semaphore.o unix_utility.o uuid-utils.o version.o webserver.o ws-api.o ws-auth.o zoneparser-tng.o lua-record.o minicurl.o sodiumsigners.o ssqlite3.o pkcs11signers.o -Wl,--export-dynamic  ../ext/arc4random/.libs/libarc4random.a -L/usr/lib ../ext/yahttp/yahttp/.libs/libyahttp.a ../ext/json11/.libs/libjson11.a -lcrypto -lsystemd -lcurl -lsodium -lsqlite3 -lp11-kit -lluajit-5.1 -pthread
 ./pdns_server --config=default > pdns.conf-dist
 make[4]: Leaving directory '/build/reproducible-path/pdns-4.9.4/pdns'
@@ -20440,82 +20477,82 @@
 + cat
 + cat
 ++ mktemp
-+ TMPFILE=/tmp/tmp.PGIRaEO952
++ TMPFILE=/tmp/tmp.gmZlebFtjO
 + trap cleanup EXIT
 + cat
 + ./launch-pdns
 Waiting for pdns_server to start...
-Mar 22 00:06:28 Loading '../../modules/bindbackend/.libs//libbindbackend.so'
-Mar 22 00:06:28 This is a standalone pdns
-Mar 22 00:06:28 Listening on controlsocket in './pdns.controlsocket'
-Mar 22 00:06:28 UDP server bound to 127.0.0.1:5301
-Mar 22 00:06:28 TCP server bound to 127.0.0.1:5301
-Mar 22 00:06:28 PowerDNS Authoritative Server 4.9.4 (C) PowerDNS.COM BV
-Mar 22 00:06:28 Using 64-bits mode. Built using gcc 14.2.0.
-Mar 22 00:06:28 PowerDNS comes with ABSOLUTELY NO WARRANTY. This is free software, and you are welcome to redistribute it according to the terms of the GPL version 2.
-Mar 22 00:06:28 [stub-resolver] No upstream resolvers configured, stub resolving (including secpoll and ALIAS) impossible.
-Mar 22 00:06:28 [stub-resolver] No upstream resolvers configured, stub resolving (including secpoll and ALIAS) impossible.
-Mar 22 00:06:28 Failed to retrieve security status update for '4.9.4-2.Debian' on 'auth-4.9.4-2.Debian.security-status.secpoll.powerdns.com.': RCODE was Server Failure
-Mar 22 00:06:28 [bindbackend] Parsing 1 domain(s), will report when done
-Mar 22 00:06:28 [bindbackend] Done parsing domains, 0 rejected, 1 new, 0 removed
-Mar 22 00:06:28 Creating backend connection for TCP
-Mar 22 00:06:28 About to create 3 backend threads for UDP
-Mar 22 00:06:28 Done launching threads, ready to distribute questions
+Apr 25 08:38:58 Loading '../../modules/bindbackend/.libs//libbindbackend.so'
+Apr 25 08:38:58 This is a standalone pdns
+Apr 25 08:38:58 Listening on controlsocket in './pdns.controlsocket'
+Apr 25 08:38:58 UDP server bound to 127.0.0.1:5301
+Apr 25 08:38:58 TCP server bound to 127.0.0.1:5301
+Apr 25 08:38:58 PowerDNS Authoritative Server 4.9.4 (C) PowerDNS.COM BV
+Apr 25 08:38:58 Using 64-bits mode. Built using gcc 14.2.0.
+Apr 25 08:38:58 PowerDNS comes with ABSOLUTELY NO WARRANTY. This is free software, and you are welcome to redistribute it according to the terms of the GPL version 2.
+Apr 25 08:38:58 [stub-resolver] No upstream resolvers configured, stub resolving (including secpoll and ALIAS) impossible.
+Apr 25 08:38:58 [stub-resolver] No upstream resolvers configured, stub resolving (including secpoll and ALIAS) impossible.
+Apr 25 08:38:58 Failed to retrieve security status update for '4.9.4-2.Debian' on 'auth-4.9.4-2.Debian.security-status.secpoll.powerdns.com.': RCODE was Server Failure
+Apr 25 08:38:58 [bindbackend] Parsing 1 domain(s), will report when done
+Apr 25 08:38:58 [bindbackend] Done parsing domains, 0 rejected, 1 new, 0 removed
+Apr 25 08:38:58 Creating backend connection for TCP
+Apr 25 08:38:58 About to create 3 backend threads for UDP
+Apr 25 08:38:58 Done launching threads, ready to distribute questions
++ tee /tmp/tmp.gmZlebFtjO
 + ../../pdns/sdig 127.0.0.1 5301 smoke.bind.example.org A
-+ tee /tmp/tmp.PGIRaEO952
 Reply to question for qname='smoke.bind.example.org.', qtype=A
 Rcode: 0 (No Error), RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0
 0	smoke.bind.example.org.	172800	IN	A	127.0.0.123
-+ grep -c '127\.0\.0\.123' /tmp/tmp.PGIRaEO952
++ grep -c '127\.0\.0\.123' /tmp/tmp.gmZlebFtjO
 1
 + echo success
 success
 + cleanup
-+ rm -f /tmp/tmp.PGIRaEO952
++ rm -f /tmp/tmp.gmZlebFtjO
 + rm -f named.conf bind.example.org.zone
 ++ cat pdns.pid
-+ kill 944270
++ kill 905309
 + rm -f pdns.conf pdns.pid pdns.controlsocket
 
 
 tests-source: running smoke-lmdb
 
 ++ mktemp
-+ TMPFILE=/tmp/tmp.frQhub3AZn
++ TMPFILE=/tmp/tmp.WGJiTyVAZu
 + trap cleanup EXIT
 + cat
 + ../../pdns/pdnsutil --config-dir=. create-zone smoke.lmdb.example.org
 Creating empty zone 'smoke.lmdb.example.org'
 + ./launch-pdns
 Waiting for pdns_server to start...
-Mar 22 00:06:30 Loading '../../modules/lmdbbackend/.libs//liblmdbbackend.so'
-Mar 22 00:06:30 This is a standalone pdns
-Mar 22 00:06:30 Listening on controlsocket in './pdns.controlsocket'
-Mar 22 00:06:30 UDP server bound to 127.0.0.1:5301
-Mar 22 00:06:30 TCP server bound to 127.0.0.1:5301
-Mar 22 00:06:30 PowerDNS Authoritative Server 4.9.4 (C) PowerDNS.COM BV
-Mar 22 00:06:30 Using 64-bits mode. Built using gcc 14.2.0.
-Mar 22 00:06:30 PowerDNS comes with ABSOLUTELY NO WARRANTY. This is free software, and you are welcome to redistribute it according to the terms of the GPL version 2.
-Mar 22 00:06:31 [stub-resolver] No upstream resolvers configured, stub resolving (including secpoll and ALIAS) impossible.
-Mar 22 00:06:31 [stub-resolver] No upstream resolvers configured, stub resolving (including secpoll and ALIAS) impossible.
-Mar 22 00:06:31 Failed to retrieve security status update for '4.9.4-2.Debian' on 'auth-4.9.4-2.Debian.security-status.secpoll.powerdns.com.': RCODE was Server Failure
-Mar 22 00:06:31 Creating backend connection for TCP
-Mar 22 00:06:31 About to create 3 backend threads for UDP
-Mar 22 00:06:31 Done launching threads, ready to distribute questions
+Apr 25 08:39:00 Loading '../../modules/lmdbbackend/.libs//liblmdbbackend.so'
+Apr 25 08:39:00 This is a standalone pdns
+Apr 25 08:39:00 Listening on controlsocket in './pdns.controlsocket'
+Apr 25 08:39:00 UDP server bound to 127.0.0.1:5301
+Apr 25 08:39:00 TCP server bound to 127.0.0.1:5301
+Apr 25 08:39:00 PowerDNS Authoritative Server 4.9.4 (C) PowerDNS.COM BV
+Apr 25 08:39:00 Using 64-bits mode. Built using gcc 14.2.0.
+Apr 25 08:39:00 PowerDNS comes with ABSOLUTELY NO WARRANTY. This is free software, and you are welcome to redistribute it according to the terms of the GPL version 2.
+Apr 25 08:39:00 [stub-resolver] No upstream resolvers configured, stub resolving (including secpoll and ALIAS) impossible.
+Apr 25 08:39:00 [stub-resolver] No upstream resolvers configured, stub resolving (including secpoll and ALIAS) impossible.
+Apr 25 08:39:00 Failed to retrieve security status update for '4.9.4-2.Debian' on 'auth-4.9.4-2.Debian.security-status.secpoll.powerdns.com.': RCODE was Server Failure
+Apr 25 08:39:00 Creating backend connection for TCP
+Apr 25 08:39:00 About to create 3 backend threads for UDP
+Apr 25 08:39:01 Done launching threads, ready to distribute questions
 + ../../pdns/sdig 127.0.0.1 5301 smoke.lmdb.example.org SOA
-+ tee /tmp/tmp.frQhub3AZn
++ tee /tmp/tmp.WGJiTyVAZu
 Reply to question for qname='smoke.lmdb.example.org.', qtype=SOA
 Rcode: 0 (No Error), RD: 0, QR: 1, TC: 0, AA: 1, opcode: 0
 0	smoke.lmdb.example.org.	3600	IN	SOA	a.misconfigured.dns.server.invalid. hostmaster.smoke.lmdb.example.org. 0 10800 3600 604800 3600
-+ grep -c a.misconfigured /tmp/tmp.frQhub3AZn
++ grep -c a.misconfigured /tmp/tmp.WGJiTyVAZu
 1
 + echo success
 success
 + cleanup
-+ rm -f /tmp/tmp.frQhub3AZn
++ rm -f /tmp/tmp.WGJiTyVAZu
 + rm -f pdns.lmdb pdns.lmdb-1 pdns.lmdb-1-lock pdns.lmdb-lock
 ++ cat pdns.pid
-+ kill 944705
++ kill 905503
 + rm -f pdns.conf pdns.pid pdns.controlsocket
 
 make check || (cat pdns/test-suite.log; false)
@@ -20721,7 +20758,7 @@
 make[5]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/bindbackend'
 make[6]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/bindbackend'
  /usr/bin/mkdir -p '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns'
- /bin/bash ../../libtool   --mode=install /usr/bin/install -c   libbindbackend.la '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns'
+ /bin/sh ../../libtool   --mode=install /usr/bin/install -c   libbindbackend.la '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns'
 libtool: install: /usr/bin/install -c .libs/libbindbackend.so /build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns/libbindbackend.so
 libtool: install: /usr/bin/install -c .libs/libbindbackend.lai /build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns/libbindbackend.la
 libtool: warning: remember to run 'libtool --finish /usr/lib/x86_64-linux-gnu/pdns'
@@ -20734,7 +20771,7 @@
 make[4]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/ldapbackend'
 make[5]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/ldapbackend'
  /usr/bin/mkdir -p '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns'
- /bin/bash ../../libtool   --mode=install /usr/bin/install -c   libldapbackend.la '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns'
+ /bin/sh ../../libtool   --mode=install /usr/bin/install -c   libldapbackend.la '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns'
 libtool: install: /usr/bin/install -c .libs/libldapbackend.so /build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns/libldapbackend.so
 libtool: install: /usr/bin/install -c .libs/libldapbackend.lai /build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns/libldapbackend.la
 libtool: warning: remember to run 'libtool --finish /usr/lib/x86_64-linux-gnu/pdns'
@@ -20746,7 +20783,7 @@
 make[4]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/lmdbbackend'
 make[5]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/lmdbbackend'
  /usr/bin/mkdir -p '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns'
- /bin/bash ../../libtool   --mode=install /usr/bin/install -c   liblmdbbackend.la '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns'
+ /bin/sh ../../libtool   --mode=install /usr/bin/install -c   liblmdbbackend.la '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns'
 libtool: install: /usr/bin/install -c .libs/liblmdbbackend.so /build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns/liblmdbbackend.so
 libtool: install: /usr/bin/install -c .libs/liblmdbbackend.lai /build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns/liblmdbbackend.la
 libtool: warning: remember to run 'libtool --finish /usr/lib/x86_64-linux-gnu/pdns'
@@ -20757,7 +20794,7 @@
 make[4]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/lua2backend'
 make[5]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/lua2backend'
  /usr/bin/mkdir -p '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns'
- /bin/bash ../../libtool   --mode=install /usr/bin/install -c   liblua2backend.la '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns'
+ /bin/sh ../../libtool   --mode=install /usr/bin/install -c   liblua2backend.la '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns'
 libtool: install: /usr/bin/install -c .libs/liblua2backend.so /build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns/liblua2backend.so
 libtool: install: /usr/bin/install -c .libs/liblua2backend.lai /build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns/liblua2backend.la
 libtool: warning: remember to run 'libtool --finish /usr/lib/x86_64-linux-gnu/pdns'
@@ -20768,7 +20805,7 @@
 make[4]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/pipebackend'
 make[5]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/pipebackend'
  /usr/bin/mkdir -p '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns'
- /bin/bash ../../libtool   --mode=install /usr/bin/install -c   libpipebackend.la '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns'
+ /bin/sh ../../libtool   --mode=install /usr/bin/install -c   libpipebackend.la '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns'
 libtool: install: /usr/bin/install -c .libs/libpipebackend.so /build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns/libpipebackend.so
 libtool: install: /usr/bin/install -c .libs/libpipebackend.lai /build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns/libpipebackend.la
 libtool: warning: remember to run 'libtool --finish /usr/lib/x86_64-linux-gnu/pdns'
@@ -20779,7 +20816,7 @@
 make[4]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/gmysqlbackend'
 make[5]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/gmysqlbackend'
  /usr/bin/mkdir -p '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns'
- /bin/bash ../../libtool   --mode=install /usr/bin/install -c   libgmysqlbackend.la '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns'
+ /bin/sh ../../libtool   --mode=install /usr/bin/install -c   libgmysqlbackend.la '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns'
 libtool: install: /usr/bin/install -c .libs/libgmysqlbackend.so /build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns/libgmysqlbackend.so
 libtool: install: /usr/bin/install -c .libs/libgmysqlbackend.lai /build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns/libgmysqlbackend.la
 libtool: warning: remember to run 'libtool --finish /usr/lib/x86_64-linux-gnu/pdns'
@@ -20791,7 +20828,7 @@
 make[4]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/godbcbackend'
 make[5]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/godbcbackend'
  /usr/bin/mkdir -p '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns'
- /bin/bash ../../libtool   --mode=install /usr/bin/install -c   libgodbcbackend.la '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns'
+ /bin/sh ../../libtool   --mode=install /usr/bin/install -c   libgodbcbackend.la '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns'
 libtool: install: /usr/bin/install -c .libs/libgodbcbackend.so /build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns/libgodbcbackend.so
 libtool: install: /usr/bin/install -c .libs/libgodbcbackend.lai /build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns/libgodbcbackend.la
 libtool: warning: remember to run 'libtool --finish /usr/lib/x86_64-linux-gnu/pdns'
@@ -20803,7 +20840,7 @@
 make[4]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/gpgsqlbackend'
 make[5]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/gpgsqlbackend'
  /usr/bin/mkdir -p '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns'
- /bin/bash ../../libtool   --mode=install /usr/bin/install -c   libgpgsqlbackend.la '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns'
+ /bin/sh ../../libtool   --mode=install /usr/bin/install -c   libgpgsqlbackend.la '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns'
 libtool: install: /usr/bin/install -c .libs/libgpgsqlbackend.so /build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns/libgpgsqlbackend.so
 libtool: install: /usr/bin/install -c .libs/libgpgsqlbackend.lai /build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns/libgpgsqlbackend.la
 libtool: warning: remember to run 'libtool --finish /usr/lib/x86_64-linux-gnu/pdns'
@@ -20815,7 +20852,7 @@
 make[4]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/gsqlite3backend'
 make[5]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/gsqlite3backend'
  /usr/bin/mkdir -p '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns'
- /bin/bash ../../libtool   --mode=install /usr/bin/install -c   libgsqlite3backend.la '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns'
+ /bin/sh ../../libtool   --mode=install /usr/bin/install -c   libgsqlite3backend.la '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns'
 libtool: install: /usr/bin/install -c .libs/libgsqlite3backend.so /build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns/libgsqlite3backend.so
 libtool: install: /usr/bin/install -c .libs/libgsqlite3backend.lai /build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns/libgsqlite3backend.la
 libtool: warning: remember to run 'libtool --finish /usr/lib/x86_64-linux-gnu/pdns'
@@ -20827,7 +20864,7 @@
 make[4]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/geoipbackend'
 make[5]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/geoipbackend'
  /usr/bin/mkdir -p '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns'
- /bin/bash ../../libtool   --mode=install /usr/bin/install -c   libgeoipbackend.la '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns'
+ /bin/sh ../../libtool   --mode=install /usr/bin/install -c   libgeoipbackend.la '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns'
 libtool: install: /usr/bin/install -c .libs/libgeoipbackend.so /build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns/libgeoipbackend.so
 libtool: install: /usr/bin/install -c .libs/libgeoipbackend.lai /build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns/libgeoipbackend.la
 libtool: warning: remember to run 'libtool --finish /usr/lib/x86_64-linux-gnu/pdns'
@@ -20840,7 +20877,7 @@
 make[5]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/remotebackend'
 make[6]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/remotebackend'
  /usr/bin/mkdir -p '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns'
- /bin/bash ../../libtool   --mode=install /usr/bin/install -c   libremotebackend.la '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns'
+ /bin/sh ../../libtool   --mode=install /usr/bin/install -c   libremotebackend.la '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns'
 libtool: install: /usr/bin/install -c .libs/libremotebackend.so /build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns/libremotebackend.so
 libtool: install: /usr/bin/install -c .libs/libremotebackend.lai /build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns/libremotebackend.la
 libtool: warning: remember to run 'libtool --finish /usr/lib/x86_64-linux-gnu/pdns'
@@ -20852,7 +20889,7 @@
 make[4]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/tinydnsbackend'
 make[5]: Entering directory '/build/reproducible-path/pdns-4.9.4/modules/tinydnsbackend'
  /usr/bin/mkdir -p '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns'
- /bin/bash ../../libtool   --mode=install /usr/bin/install -c   libtinydnsbackend.la '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns'
+ /bin/sh ../../libtool   --mode=install /usr/bin/install -c   libtinydnsbackend.la '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns'
 libtool: install: /usr/bin/install -c .libs/libtinydnsbackend.so /build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns/libtinydnsbackend.so
 libtool: install: /usr/bin/install -c .libs/libtinydnsbackend.lai /build/reproducible-path/pdns-4.9.4/debian/tmp/usr/lib/x86_64-linux-gnu/pdns/libtinydnsbackend.la
 libtool: warning: remember to run 'libtool --finish /usr/lib/x86_64-linux-gnu/pdns'
@@ -20872,7 +20909,7 @@
 make[4]: Entering directory '/build/reproducible-path/pdns-4.9.4/pdns'
 make[5]: Entering directory '/build/reproducible-path/pdns-4.9.4/pdns'
  /usr/bin/mkdir -p '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/bin'
-  /bin/bash ../libtool   --mode=install /usr/bin/install -c pdns_control pdnsutil zone2sql zone2json dnsgram dnspcap2calidns dnspcap2protobuf dnsreplay dnsscan dnsscope dnswasher dumresp pdns_notify nproxy nsec3dig saxfr stubquery ixplore sdig calidns dnsbulktest dnstcpbench ixfrdist zone2ldap '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/bin'
+  /bin/sh ../libtool   --mode=install /usr/bin/install -c pdns_control pdnsutil zone2sql zone2json dnsgram dnspcap2calidns dnspcap2protobuf dnsreplay dnsscan dnsscope dnswasher dumresp pdns_notify nproxy nsec3dig saxfr stubquery ixplore sdig calidns dnsbulktest dnstcpbench ixfrdist zone2ldap '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/bin'
 libtool: install: /usr/bin/install -c pdns_control /build/reproducible-path/pdns-4.9.4/debian/tmp/usr/bin/pdns_control
 libtool: install: /usr/bin/install -c pdnsutil /build/reproducible-path/pdns-4.9.4/debian/tmp/usr/bin/pdnsutil
 libtool: install: /usr/bin/install -c zone2sql /build/reproducible-path/pdns-4.9.4/debian/tmp/usr/bin/zone2sql
@@ -20898,7 +20935,7 @@
 libtool: install: /usr/bin/install -c ixfrdist /build/reproducible-path/pdns-4.9.4/debian/tmp/usr/bin/ixfrdist
 libtool: install: /usr/bin/install -c zone2ldap /build/reproducible-path/pdns-4.9.4/debian/tmp/usr/bin/zone2ldap
  /usr/bin/mkdir -p '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/sbin'
-  /bin/bash ../libtool   --mode=install /usr/bin/install -c pdns_server '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/sbin'
+  /bin/sh ../libtool   --mode=install /usr/bin/install -c pdns_server '/build/reproducible-path/pdns-4.9.4/debian/tmp/usr/sbin'
 libtool: install: /usr/bin/install -c pdns_server /build/reproducible-path/pdns-4.9.4/debian/tmp/usr/sbin/pdns_server
  /usr/bin/mkdir -p '/build/reproducible-path/pdns-4.9.4/debian/tmp/etc/powerdns'
  /usr/bin/install -c -m 644 pdns.conf-dist ixfrdist.example.yml '/build/reproducible-path/pdns-4.9.4/debian/tmp/etc/powerdns'
@@ -20973,64 +21010,64 @@
  diversion by libc6 from: /lib64/ld-linux-x86-64.so.2
 dpkg-shlibdeps: warning: diversions involved - output may be incorrect
  diversion by libc6 to: /lib64/ld-linux-x86-64.so.2.usr-is-merged
-dpkg-shlibdeps: warning: debian/pdns-backend-pgsql/usr/lib/x86_64-linux-gnu/pdns/libgpgsqlbackend.so contains an unresolvable reference to symbol _Z9getLoggerv: it's probably a plugin
-dpkg-shlibdeps: warning: 81 other similar warnings have been skipped (use -v to see them all)
-dpkg-shlibdeps: warning: debian/pdns-backend-sqlite3/usr/lib/x86_64-linux-gnu/pdns/libgsqlite3backend.so contains an unresolvable reference to symbol _ZN14BackendFactory7declareERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEES7_S7_S7_: it's probably a plugin
-dpkg-shlibdeps: warning: 76 other similar warnings have been skipped (use -v to see them all)
-dpkg-shlibdeps: warning: debian/pdns-backend-odbc/usr/lib/x86_64-linux-gnu/pdns/libgodbcbackend.so contains an unresolvable reference to symbol _ZN11GSQLBackend10getCommentER7Comment: it's probably a plugin
-dpkg-shlibdeps: warning: debian/pdns-backend-tinydns/usr/lib/x86_64-linux-gnu/pdns/libtinydnsbackend.so contains an unresolvable reference to symbol _Z13BackendMakersv: it's probably a plugin
-dpkg-shlibdeps: warning: 76 other similar warnings have been skipped (use -v to see them all)
+dpkg-shlibdeps: warning: debian/pdns-backend-lua2/usr/lib/x86_64-linux-gnu/pdns/liblua2backend.so contains an unresolvable reference to symbol _ZNK17DNSResourceRecord21getZoneRepresentationB5cxx11Eb: it's probably a plugin
+dpkg-shlibdeps: warning: 38 other similar warnings have been skipped (use -v to see them all)
+dpkg-shlibdeps: warning: debian/pdns-backend-lmdb/usr/lib/x86_64-linux-gnu/pdns/liblmdbbackend.so contains an unresolvable reference to symbol _ZN10DNSBackend7getAuthERK7DNSNameP7SOAData: it's probably a plugin
+dpkg-shlibdeps: warning: 52 other similar warnings have been skipped (use -v to see them all)
+dpkg-shlibdeps: warning: debian/pdns-backend-ldap/usr/lib/x86_64-linux-gnu/pdns/libldapbackend.so contains an unresolvable reference to symbol _Z3argv: it's probably a plugin
+dpkg-shlibdeps: warning: 35 other similar warnings have been skipped (use -v to see them all)
+dpkg-shlibdeps: warning: debian/pdns-backend-geoip/usr/lib/x86_64-linux-gnu/pdns/libgeoipbackend.so contains an unresolvable reference to symbol _ZNK9DNSPacket13getRealRemoteEv: it's probably a plugin
+dpkg-shlibdeps: warning: debian/pdns-backend-pipe/usr/lib/x86_64-linux-gnu/pdns/libpipebackend.so contains an unresolvable reference to symbol _ZN5QTypeaSERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE: it's probably a plugin
+dpkg-shlibdeps: warning: debian/pdns-backend-tinydns/usr/lib/x86_64-linux-gnu/pdns/libtinydnsbackend.so contains an unresolvable reference to symbol _ZN12PacketReader11get16BitIntEv: it's probably a plugin
+dpkg-shlibdeps: warning: 28 other similar warnings have been skipped (use -v to see them all)
 dpkg-shlibdeps: warning: 32 other similar warnings have been skipped (use -v to see them all)
-dpkg-shlibdeps: warning: debian/pdns-backend-pipe/usr/lib/x86_64-linux-gnu/pdns/libpipebackend.so contains an unresolvable reference to symbol _ZN5RegexC1ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE: it's probably a plugin
-dpkg-shlibdeps: warning: debian/pdns-backend-remote/usr/lib/x86_64-linux-gnu/pdns/libremotebackend.so contains an unresolvable reference to symbol _ZN6LoggerlsERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE: it's probably a plugin
 dpkg-shlibdeps: warning: 36 other similar warnings have been skipped (use -v to see them all)
-dpkg-shlibdeps: warning: debian/pdns-backend-bind/usr/lib/x86_64-linux-gnu/pdns/libbindbackend.so contains an unresolvable reference to symbol bind_directory: it's probably a plugin
-dpkg-shlibdeps: warning: 38 other similar warnings have been skipped (use -v to see them all)
-dpkg-shlibdeps: warning: debian/pdns-backend-mysql/usr/lib/x86_64-linux-gnu/pdns/libgmysqlbackend.so contains an unresolvable reference to symbol _ZN11GSQLBackend12setPrimariesERK7DNSNameRKSt6vectorI12ComboAddressSaIS4_EE: it's probably a plugin
-dpkg-shlibdeps: warning: 65 other similar warnings have been skipped (use -v to see them all)
+dpkg-shlibdeps: warning: debian/pdns-backend-sqlite3/usr/lib/x86_64-linux-gnu/pdns/libgsqlite3backend.so contains an unresolvable reference to symbol _ZN11GSQLBackend12setPrimariesERK7DNSNameRKSt6vectorI12ComboAddressSaIS4_EE: it's probably a plugin
+dpkg-shlibdeps: warning: 76 other similar warnings have been skipped (use -v to see them all)
+dpkg-shlibdeps: warning: debian/pdns-backend-odbc/usr/lib/x86_64-linux-gnu/pdns/libgodbcbackend.so contains an unresolvable reference to symbol _ZN7ArgvMap6mustDoERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE: it's probably a plugin
+dpkg-shlibdeps: warning: 76 other similar warnings have been skipped (use -v to see them all)
+dpkg-shlibdeps: warning: debian/pdns-backend-pgsql/usr/lib/x86_64-linux-gnu/pdns/libgpgsqlbackend.so contains an unresolvable reference to symbol _ZN11GSQLBackend10setOptionsERK7DNSNameRKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE: it's probably a plugin
+dpkg-shlibdeps: warning: 81 other similar warnings have been skipped (use -v to see them all)
+dpkg-shlibdeps: warning: debian/pdns-backend-mysql/usr/lib/x86_64-linux-gnu/pdns/libgmysqlbackend.so contains an unresolvable reference to symbol _ZN11GSQLBackend6lookupERK5QTypeRK7DNSNameiP9DNSPacket: it's probably a plugin
 dpkg-shlibdeps: warning: 82 other similar warnings have been skipped (use -v to see them all)
-dpkg-shlibdeps: warning: debian/pdns-backend-lua2/usr/lib/x86_64-linux-gnu/pdns/liblua2backend.so contains an unresolvable reference to symbol _ZN8AuthLua4D2Ev: it's probably a plugin
+dpkg-shlibdeps: warning: debian/pdns-backend-bind/usr/lib/x86_64-linux-gnu/pdns/libbindbackend.so contains an unresolvable reference to symbol _ZN7DNSName7chopOffEv: it's probably a plugin
+dpkg-shlibdeps: warning: debian/pdns-backend-remote/usr/lib/x86_64-linux-gnu/pdns/libremotebackend.so contains an unresolvable reference to symbol _Z12boolFromJsonRKN6json114JsonERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEb: it's probably a plugin
+dpkg-shlibdeps: warning: 65 other similar warnings have been skipped (use -v to see them all)
 dpkg-shlibdeps: warning: 38 other similar warnings have been skipped (use -v to see them all)
-dpkg-shlibdeps: warning: debian/pdns-backend-geoip/usr/lib/x86_64-linux-gnu/pdns/libgeoipbackend.so contains an unresolvable reference to symbol _ZN6LoggerlsERFRSoS0_E: it's probably a plugin
-dpkg-shlibdeps: warning: debian/pdns-backend-lmdb/usr/lib/x86_64-linux-gnu/pdns/liblmdbbackend.so contains an unresolvable reference to symbol _ZN7DNSNameC1EPKcmmbPtS2_Pjt: it's probably a plugin
-dpkg-shlibdeps: warning: 28 other similar warnings have been skipped (use -v to see them all)
-dpkg-shlibdeps: warning: 52 other similar warnings have been skipped (use -v to see them all)
-dpkg-shlibdeps: warning: debian/pdns-backend-ldap/usr/lib/x86_64-linux-gnu/pdns/libldapbackend.so contains an unresolvable reference to symbol _ZN6LoggerlsERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE: it's probably a plugin
-dpkg-shlibdeps: warning: 35 other similar warnings have been skipped (use -v to see them all)
    dh_installdeb
    dh_gencontrol
    dh_md5sums
    dh_builddeb
-dpkg-deb: building package 'pdns-tools' in '../pdns-tools_4.9.4-2_amd64.deb'.
-dpkg-deb: building package 'pdns-backend-bind' in '../pdns-backend-bind_4.9.4-2_amd64.deb'.
-dpkg-deb: building package 'pdns-ixfrdist' in '../pdns-ixfrdist_4.9.4-2_amd64.deb'.
 dpkg-deb: building package 'pdns-server' in '../pdns-server_4.9.4-2_amd64.deb'.
+dpkg-deb: building package 'pdns-ixfrdist' in '../pdns-ixfrdist_4.9.4-2_amd64.deb'.
+dpkg-deb: building package 'pdns-ixfrdist-dbgsym' in '../pdns-ixfrdist-dbgsym_4.9.4-2_amd64.deb'.
+dpkg-deb: building package 'pdns-tools' in '../pdns-tools_4.9.4-2_amd64.deb'.
+dpkg-deb: building package 'pdns-server-dbgsym' in '../pdns-server-dbgsym_4.9.4-2_amd64.deb'.
+dpkg-deb: building package 'pdns-backend-bind-dbgsym' in '../pdns-backend-bind-dbgsym_4.9.4-2_amd64.deb'.
 dpkg-deb: building package 'pdns-backend-pipe' in '../pdns-backend-pipe_4.9.4-2_amd64.deb'.
-dpkg-deb: building package 'pdns-backend-ldap' in '../pdns-backend-ldap_4.9.4-2_amd64.deb'.
+dpkg-deb: building package 'pdns-backend-bind' in '../pdns-backend-bind_4.9.4-2_amd64.deb'.
+dpkg-deb: building package 'pdns-tools-dbgsym' in '../pdns-tools-dbgsym_4.9.4-2_amd64.deb'.
+dpkg-deb: building package 'pdns-backend-lmdb-dbgsym' in '../pdns-backend-lmdb-dbgsym_4.9.4-2_amd64.deb'.
+dpkg-deb: building package 'pdns-backend-pipe-dbgsym' in '../pdns-backend-pipe-dbgsym_4.9.4-2_amd64.deb'.
+dpkg-deb: building package 'pdns-backend-lua2-dbgsym' in '../pdns-backend-lua2-dbgsym_4.9.4-2_amd64.deb'.
+dpkg-deb: building package 'pdns-backend-geoip' in '../pdns-backend-geoip_4.9.4-2_amd64.deb'.
 dpkg-deb: building package 'pdns-backend-lua2' in '../pdns-backend-lua2_4.9.4-2_amd64.deb'.
+dpkg-deb: building package 'pdns-backend-ldap-dbgsym' in '../pdns-backend-ldap-dbgsym_4.9.4-2_amd64.deb'.
 dpkg-deb: building package 'pdns-backend-lmdb' in '../pdns-backend-lmdb_4.9.4-2_amd64.deb'.
-dpkg-deb: building package 'pdns-backend-geoip' in '../pdns-backend-geoip_4.9.4-2_amd64.deb'.
-dpkg-deb: building package 'pdns-backend-mysql' in '../pdns-backend-mysql_4.9.4-2_amd64.deb'.
-dpkg-deb: building package 'pdns-backend-odbc' in '../pdns-backend-odbc_4.9.4-2_amd64.deb'.
-dpkg-deb: building package 'pdns-backend-pgsql' in '../pdns-backend-pgsql_4.9.4-2_amd64.deb'.
-dpkg-deb: building package 'pdns-backend-remote' in '../pdns-backend-remote_4.9.4-2_amd64.deb'.
-dpkg-deb: building package 'pdns-backend-sqlite3' in '../pdns-backend-sqlite3_4.9.4-2_amd64.deb'.
-dpkg-deb: building package 'pdns-backend-tinydns' in '../pdns-backend-tinydns_4.9.4-2_amd64.deb'.
 dpkg-deb: building package 'pdns-backend-odbc-dbgsym' in '../pdns-backend-odbc-dbgsym_4.9.4-2_amd64.deb'.
 dpkg-deb: building package 'pdns-backend-sqlite3-dbgsym' in '../pdns-backend-sqlite3-dbgsym_4.9.4-2_amd64.deb'.
-dpkg-deb: building package 'pdns-backend-mysql-dbgsym' in '../pdns-backend-mysql-dbgsym_4.9.4-2_amd64.deb'.
 dpkg-deb: building package 'pdns-backend-pgsql-dbgsym' in '../pdns-backend-pgsql-dbgsym_4.9.4-2_amd64.deb'.
-dpkg-deb: building package 'pdns-backend-bind-dbgsym' in '../pdns-backend-bind-dbgsym_4.9.4-2_amd64.deb'.
+dpkg-deb: building package 'pdns-backend-odbc' in '../pdns-backend-odbc_4.9.4-2_amd64.deb'.
+dpkg-deb: building package 'pdns-backend-pgsql' in '../pdns-backend-pgsql_4.9.4-2_amd64.deb'.
+dpkg-deb: building package 'pdns-backend-sqlite3' in '../pdns-backend-sqlite3_4.9.4-2_amd64.deb'.
 dpkg-deb: building package 'pdns-backend-geoip-dbgsym' in '../pdns-backend-geoip-dbgsym_4.9.4-2_amd64.deb'.
-dpkg-deb: building package 'pdns-backend-ldap-dbgsym' in '../pdns-backend-ldap-dbgsym_4.9.4-2_amd64.deb'.
-dpkg-deb: building package 'pdns-backend-lmdb-dbgsym' in '../pdns-backend-lmdb-dbgsym_4.9.4-2_amd64.deb'.
+dpkg-deb: building package 'pdns-backend-mysql-dbgsym' in '../pdns-backend-mysql-dbgsym_4.9.4-2_amd64.deb'.
 dpkg-deb: building package 'pdns-backend-remote-dbgsym' in '../pdns-backend-remote-dbgsym_4.9.4-2_amd64.deb'.
-dpkg-deb: building package 'pdns-backend-pipe-dbgsym' in '../pdns-backend-pipe-dbgsym_4.9.4-2_amd64.deb'.
+dpkg-deb: building package 'pdns-backend-remote' in '../pdns-backend-remote_4.9.4-2_amd64.deb'.
+dpkg-deb: building package 'pdns-backend-mysql' in '../pdns-backend-mysql_4.9.4-2_amd64.deb'.
+dpkg-deb: building package 'pdns-backend-ldap' in '../pdns-backend-ldap_4.9.4-2_amd64.deb'.
 dpkg-deb: building package 'pdns-backend-tinydns-dbgsym' in '../pdns-backend-tinydns-dbgsym_4.9.4-2_amd64.deb'.
-dpkg-deb: building package 'pdns-backend-lua2-dbgsym' in '../pdns-backend-lua2-dbgsym_4.9.4-2_amd64.deb'.
-dpkg-deb: building package 'pdns-ixfrdist-dbgsym' in '../pdns-ixfrdist-dbgsym_4.9.4-2_amd64.deb'.
-dpkg-deb: building package 'pdns-server-dbgsym' in '../pdns-server-dbgsym_4.9.4-2_amd64.deb'.
-dpkg-deb: building package 'pdns-tools-dbgsym' in '../pdns-tools-dbgsym_4.9.4-2_amd64.deb'.
+dpkg-deb: building package 'pdns-backend-tinydns' in '../pdns-backend-tinydns_4.9.4-2_amd64.deb'.
  dpkg-genbuildinfo --build=binary -O../pdns_4.9.4-2_amd64.buildinfo
  dpkg-genchanges --build=binary -O../pdns_4.9.4-2_amd64.changes
 dpkg-genchanges: info: binary-only upload (no source code included)
@@ -21038,12 +21075,14 @@
 dpkg-buildpackage: info: binary-only upload (no source included)
 dpkg-genchanges: info: not including original source code in upload
 I: copying local configuration
+I: user script /srv/workspace/pbuilder/851067/tmp/hooks/B01_cleanup starting
+I: user script /srv/workspace/pbuilder/851067/tmp/hooks/B01_cleanup finished
 I: unmounting dev/ptmx filesystem
 I: unmounting dev/pts filesystem
 I: unmounting dev/shm filesystem
 I: unmounting proc filesystem
 I: unmounting sys filesystem
 I: cleaning the build env 
-I: removing directory /srv/workspace/pbuilder/587718 and its subdirectories
-I: Current time: Sat Mar 22 00:09:56 -12 2025
-I: pbuilder-time-stamp: 1742645396
+I: removing directory /srv/workspace/pbuilder/851067 and its subdirectories
+I: Current time: Sat Apr 25 08:42:10 +14 2026
+I: pbuilder-time-stamp: 1777056130