diff --git a/distro/config/apkg.toml b/distro/config/apkg.toml
index 085875394..561743493 100644
--- a/distro/config/apkg.toml
+++ b/distro/config/apkg.toml
@@ -15,6 +15,10 @@ compat = 3
 name = "el-7"
 distro = ["centos == 7", "rhel == 7"]
 
+[[distro.aliases]]
+name = "_deb-noxdp"
+distro = ["debian == 10", "ubuntu == 18.04"]
+
 # pkstyle aliases bellow are expected to be built-in in apkg >= 0.5.0
 # https://gitlab.nic.cz/packaging/apkg/-/issues/79
 [[distro.aliases]]
diff --git a/distro/pkg/_deb-noxdp/changelog b/distro/pkg/_deb-noxdp/changelog
new file mode 120000
index 000000000..e75b8c2c1
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/changelog
@@ -0,0 +1 @@
+../deb/changelog
\ No newline at end of file
diff --git a/distro/pkg/_deb-noxdp/clean b/distro/pkg/_deb-noxdp/clean
new file mode 120000
index 000000000..4743e86a5
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/clean
@@ -0,0 +1 @@
+../deb/clean
\ No newline at end of file
diff --git a/distro/pkg/_deb-noxdp/compat b/distro/pkg/_deb-noxdp/compat
new file mode 120000
index 000000000..508f3a8cd
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/compat
@@ -0,0 +1 @@
+../deb/compat
\ No newline at end of file
diff --git a/distro/pkg/_deb-noxdp/control b/distro/pkg/_deb-noxdp/control
new file mode 100644
index 000000000..be4fd3234
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/control
@@ -0,0 +1,272 @@
+Source: knot
+Section: net
+Priority: optional
+Maintainer: Knot DNS <knot-dns@labs.nic.cz>
+Uploaders:
+ Jakub Ružička <jakub.ruzicka@nic.cz>,
+ Daniel Salzman <daniel.salzman@nic.cz>,
+Build-Depends-Indep:
+ python3-setuptools,
+ python3-sphinx,
+Build-Depends:
+ autoconf,
+ automake,
+ debhelper (>= 11),
+ dh-python,
+ libcap-ng-dev,
+ libedit-dev,
+ libelf-dev,
+ libfstrm-dev,
+ libgnutls28-dev,
+ libidn2-dev,
+ liblmdb-dev,
+ libmaxminddb-dev,
+ libmnl-dev,
+ libnghttp2-dev,
+ libprotobuf-c-dev,
+ libsofthsm2 <!nocheck>,
+ libsystemd-dev [linux-any] | libsystemd-daemon-dev [linux-any],
+ libsystemd-dev [linux-any] | libsystemd-journal-dev [linux-any],
+ libtool,
+ liburcu-dev,
+ pkg-config,
+ protobuf-c-compiler,
+ python3-all,
+Standards-Version: 4.5.0
+Homepage: https://www.knot-dns.cz/
+Vcs-Browser: https://gitlab.nic.cz/knot/knot-dns
+Vcs-Git: https://gitlab.nic.cz/knot/knot-dns.git
+Rules-Requires-Root: no
+
+Package: knot
+Architecture: any
+Depends:
+ adduser,
+ libdnssec9 (= ${binary:Version}),
+ libknot13 (= ${binary:Version}),
+ libzscanner4 (= ${binary:Version}),
+ lsb-base (>= 3.0-6),
+ ${misc:Depends},
+ ${shlibs:Depends},
+Pre-Depends:
+ ${misc:Pre-Depends},
+Suggests:
+ systemd,
+Description: Authoritative domain name server
+ Knot DNS is a fast, authoritative only, high performance, feature
+ full and open source name server.
+ .
+ Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
+ registry and hence is well suited to run anything from the root
+ zone, the top-level domain, to many smaller standard domain names.
+
+Package: libknot13
+Architecture: any
+Multi-Arch: same
+Depends:
+ ${misc:Depends},
+ ${shlibs:Depends},
+Section: libs
+Description: DNS shared library from Knot DNS
+ Knot DNS is a fast, authoritative only, high performance, feature
+ full and open source name server.
+ .
+ Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
+ registry and hence is well suited to run anything from the root
+ zone, the top-level domain, to many smaller standard domain names.
+ .
+ This package provides a DNS shared library used by Knot DNS and
+ Knot Resolver.
+
+Package: libzscanner4
+Architecture: any
+Multi-Arch: same
+Depends:
+ ${misc:Depends},
+ ${shlibs:Depends},
+Section: libs
+Description: DNS zone-parsing shared library from Knot DNS
+ Knot DNS is a fast, authoritative only, high performance, feature
+ full and open source name server.
+ .
+ Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
+ registry and hence is well suited to run anything from the root
+ zone, the top-level domain, to many smaller standard domain names.
+ .
+ This package provides a fast zone parser shared library used by Knot
+ DNS and Knot Resolver.
+
+Package: libdnssec9
+Architecture: any
+Multi-Arch: same
+Depends:
+ ${misc:Depends},
+ ${shlibs:Depends},
+Section: libs
+Description: DNSSEC shared library from Knot DNS
+ Knot DNS is a fast, authoritative only, high performance, feature
+ full and open source name server.
+ .
+ Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
+ registry and hence is well suited to run anything from the root
+ zone, the top-level domain, to many smaller standard domain names.
+ .
+ This package provides common DNSSEC shared library used by Knot DNS
+ and Knot Resolver.
+
+Package: libknot-dev
+Architecture: any
+Depends:
+ libdnssec9 (= ${binary:Version}),
+ libgnutls28-dev,
+ libknot13 (= ${binary:Version}),
+ libzscanner4 (= ${binary:Version}),
+ ${misc:Depends},
+ ${shlibs:Depends},
+Section: libdevel
+Description: Knot DNS shared library development files
+ Knot DNS is a fast, authoritative only, high performance, feature
+ full and open source name server.
+ .
+ Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
+ registry and hence is well suited to run anything from the root
+ zone, the top-level domain, to many smaller standard domain names.
+ .
+ This package provides development files for shared libraries from Knot DNS.
+
+Package: knot-dnsutils
+Architecture: any
+Depends:
+ libdnssec9 (= ${binary:Version}),
+ libknot13 (= ${binary:Version}),
+ libzscanner4 (= ${binary:Version}),
+ ${misc:Depends},
+ ${shlibs:Depends},
+Description: DNS clients provided with Knot DNS (kdig, knsupdate)
+ Knot DNS is a fast, authoritative only, high performance, feature
+ full and open source name server.
+ .
+ Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
+ registry and hence is well suited to run anything from the root
+ zone, the top-level domain, to many smaller standard domain names.
+ .
+ This package delivers various DNS client programs from Knot DNS.
+ .
+  - kdig - query a DNS server in various ways
+  - knsupdate - perform dynamic updates (See RFC2136)
+ .
+ Those clients were designed to be almost 1:1 compatible with BIND dnsutils,
+ but they provide some enhancements, which are documented.
+ .
+ WARNING: knslookup is not provided as it is considered obsolete.
+
+Package: knot-dnssecutils
+Architecture: any
+Depends:
+ libdnssec9 (= ${binary:Version}),
+ libknot13 (= ${binary:Version}),
+ libzscanner4 (= ${binary:Version}),
+ ${misc:Depends},
+ ${shlibs:Depends},
+Description: DNSSEC tools provided with Knot DNS
+ Knot DNS is a fast, authoritative only, high performance, feature
+ full and open source name server.
+ .
+ Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
+ registry and hence is well suited to run anything from the root
+ zone, the top-level domain, to many smaller standard domain names.
+ .
+ This package delivers various DNSSEC tools from Knot DNS.
+ .
+  - kzonecheck
+  - kzonesign
+  - knsec3hash
+
+Package: knot-host
+Architecture: any
+Depends:
+ libdnssec9 (= ${binary:Version}),
+ libknot13 (= ${binary:Version}),
+ libzscanner4 (= ${binary:Version}),
+ ${misc:Depends},
+ ${shlibs:Depends},
+Description: Version of 'host' bundled with Knot DNS
+ Knot DNS is a fast, authoritative only, high performance, feature
+ full and open source name server.
+ .
+ Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
+ registry and hence is well suited to run anything from the root
+ zone, the top-level domain, to many smaller standard domain names.
+ .
+ This package provides the 'host' program from Knot DNS. This program is
+ designed to be almost 1:1 compatible with BIND 9.x 'host' program.
+
+Package: knot-module-dnstap
+Architecture: any
+Multi-Arch: same
+Depends:
+ knot (= ${binary:Version}),
+ ${misc:Depends},
+ ${shlibs:Depends},
+Description: dnstap module for Knot DNS
+ Knot DNS is a fast, authoritative only, high performance, feature
+ full and open source name server.
+ .
+ Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
+ registry and hence is well suited to run anything from the root
+ zone, the top-level domain, to many smaller standard domain names.
+ .
+ This package contains dnstap module for logging DNS traffic.
+
+Package: knot-module-geoip
+Architecture: any
+Multi-Arch: same
+Depends:
+ knot (= ${binary:Version}),
+ ${misc:Depends},
+ ${shlibs:Depends},
+Description: geoip module for Knot DNS
+ Knot DNS is a fast, authoritative only, high performance, feature
+ full and open source name server.
+ .
+ Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
+ registry and hence is well suited to run anything from the root
+ zone, the top-level domain, to many smaller standard domain names.
+ .
+ This package contains geoip module for geography-based responses.
+
+Package: knot-doc
+Architecture: all
+Multi-Arch: foreign
+Depends:
+ libjs-jquery,
+ libjs-sphinxdoc,
+ libjs-underscore,
+ ${misc:Depends},
+Section: doc
+Description: Documentation for Knot DNS
+ Knot DNS is a fast, authoritative only, high performance, feature
+ full and open source name server.
+ .
+ Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
+ registry and hence is well suited to run anything from the root
+ zone, the top-level domain, to many smaller standard domain names.
+ .
+ This package provides various documents that are useful for
+ maintaining a working Knot DNS installation.
+
+Package: python3-libknot
+Architecture: all
+Depends:
+ ${misc:Depends},
+ ${python3:Depends},
+Section: python
+Description: Python bindings for libknot
+ Knot DNS is a fast, authoritative only, high performance, feature
+ full and open source name server.
+ .
+ Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
+ registry and hence is well suited to run anything from the root
+ zone, the top-level domain, to many smaller standard domain names.
+ .
+ This package provides Python bindings for the libknot shared library.
diff --git a/distro/pkg/_deb-noxdp/copyright b/distro/pkg/_deb-noxdp/copyright
new file mode 120000
index 000000000..420be830b
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/copyright
@@ -0,0 +1 @@
+../deb/copyright
\ No newline at end of file
diff --git a/distro/pkg/_deb-noxdp/cz.nic.knotd.conf b/distro/pkg/_deb-noxdp/cz.nic.knotd.conf
new file mode 120000
index 000000000..78faf14db
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/cz.nic.knotd.conf
@@ -0,0 +1 @@
+../deb/cz.nic.knotd.conf
\ No newline at end of file
diff --git a/distro/pkg/_deb-noxdp/docs b/distro/pkg/_deb-noxdp/docs
new file mode 120000
index 000000000..89ce06d98
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/docs
@@ -0,0 +1 @@
+../deb/docs
\ No newline at end of file
diff --git a/distro/pkg/_deb-noxdp/knot-dnssecutils.install b/distro/pkg/_deb-noxdp/knot-dnssecutils.install
new file mode 120000
index 000000000..5f144171d
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/knot-dnssecutils.install
@@ -0,0 +1 @@
+../deb/knot-dnssecutils.install
\ No newline at end of file
diff --git a/distro/pkg/_deb-noxdp/knot-dnssecutils.manpages b/distro/pkg/_deb-noxdp/knot-dnssecutils.manpages
new file mode 120000
index 000000000..8368f4ec4
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/knot-dnssecutils.manpages
@@ -0,0 +1 @@
+../deb/knot-dnssecutils.manpages
\ No newline at end of file
diff --git a/distro/pkg/_deb-noxdp/knot-dnsutils.install b/distro/pkg/_deb-noxdp/knot-dnsutils.install
new file mode 100644
index 000000000..960fa92ce
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/knot-dnsutils.install
@@ -0,0 +1,2 @@
+usr/bin/kdig
+usr/bin/knsupdate
diff --git a/distro/pkg/_deb-noxdp/knot-dnsutils.manpages b/distro/pkg/_deb-noxdp/knot-dnsutils.manpages
new file mode 100644
index 000000000..3cc29ec8a
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/knot-dnsutils.manpages
@@ -0,0 +1,2 @@
+usr/share/man/man1/kdig.1
+usr/share/man/man1/knsupdate.1
diff --git a/distro/pkg/_deb-noxdp/knot-doc.install b/distro/pkg/_deb-noxdp/knot-doc.install
new file mode 120000
index 000000000..5fcf1fd6d
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/knot-doc.install
@@ -0,0 +1 @@
+../deb/knot-doc.install
\ No newline at end of file
diff --git a/distro/pkg/_deb-noxdp/knot-doc.links b/distro/pkg/_deb-noxdp/knot-doc.links
new file mode 120000
index 000000000..c655d9c7d
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/knot-doc.links
@@ -0,0 +1 @@
+../deb/knot-doc.links
\ No newline at end of file
diff --git a/distro/pkg/_deb-noxdp/knot-host.install b/distro/pkg/_deb-noxdp/knot-host.install
new file mode 120000
index 000000000..0f6b10210
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/knot-host.install
@@ -0,0 +1 @@
+../deb/knot-host.install
\ No newline at end of file
diff --git a/distro/pkg/_deb-noxdp/knot-host.manpages b/distro/pkg/_deb-noxdp/knot-host.manpages
new file mode 120000
index 000000000..63a185c34
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/knot-host.manpages
@@ -0,0 +1 @@
+../deb/knot-host.manpages
\ No newline at end of file
diff --git a/distro/pkg/_deb-noxdp/knot-module-dnstap.install b/distro/pkg/_deb-noxdp/knot-module-dnstap.install
new file mode 120000
index 000000000..3c8b5aa74
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/knot-module-dnstap.install
@@ -0,0 +1 @@
+../deb/knot-module-dnstap.install
\ No newline at end of file
diff --git a/distro/pkg/_deb-noxdp/knot-module-geoip.install b/distro/pkg/_deb-noxdp/knot-module-geoip.install
new file mode 120000
index 000000000..110892709
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/knot-module-geoip.install
@@ -0,0 +1 @@
+../deb/knot-module-geoip.install
\ No newline at end of file
diff --git a/distro/pkg/_deb-noxdp/knot.dirs b/distro/pkg/_deb-noxdp/knot.dirs
new file mode 120000
index 000000000..81617d220
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/knot.dirs
@@ -0,0 +1 @@
+../deb/knot.dirs
\ No newline at end of file
diff --git a/distro/pkg/_deb-noxdp/knot.init b/distro/pkg/_deb-noxdp/knot.init
new file mode 120000
index 000000000..9d55574dd
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/knot.init
@@ -0,0 +1 @@
+../deb/knot.init
\ No newline at end of file
diff --git a/distro/pkg/_deb-noxdp/knot.install b/distro/pkg/_deb-noxdp/knot.install
new file mode 120000
index 000000000..0168777d9
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/knot.install
@@ -0,0 +1 @@
+../deb/knot.install
\ No newline at end of file
diff --git a/distro/pkg/_deb-noxdp/knot.manpages b/distro/pkg/_deb-noxdp/knot.manpages
new file mode 120000
index 000000000..f87ec85a5
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/knot.manpages
@@ -0,0 +1 @@
+../deb/knot.manpages
\ No newline at end of file
diff --git a/distro/pkg/_deb-noxdp/knot.postinst b/distro/pkg/_deb-noxdp/knot.postinst
new file mode 120000
index 000000000..d0b2d37ef
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/knot.postinst
@@ -0,0 +1 @@
+../deb/knot.postinst
\ No newline at end of file
diff --git a/distro/pkg/_deb-noxdp/knot.postrm b/distro/pkg/_deb-noxdp/knot.postrm
new file mode 120000
index 000000000..62b9c11df
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/knot.postrm
@@ -0,0 +1 @@
+../deb/knot.postrm
\ No newline at end of file
diff --git a/distro/pkg/_deb-noxdp/knot.service b/distro/pkg/_deb-noxdp/knot.service
new file mode 120000
index 000000000..e869d3816
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/knot.service
@@ -0,0 +1 @@
+../deb/knot.service
\ No newline at end of file
diff --git a/distro/pkg/_deb-noxdp/libdnssec9.install b/distro/pkg/_deb-noxdp/libdnssec9.install
new file mode 120000
index 000000000..311fe2e36
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/libdnssec9.install
@@ -0,0 +1 @@
+../deb/libdnssec9.install
\ No newline at end of file
diff --git a/distro/pkg/_deb-noxdp/libdnssec9.symbols b/distro/pkg/_deb-noxdp/libdnssec9.symbols
new file mode 120000
index 000000000..f2e520802
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/libdnssec9.symbols
@@ -0,0 +1 @@
+../deb/libdnssec9.symbols
\ No newline at end of file
diff --git a/distro/pkg/_deb-noxdp/libknot-dev.install b/distro/pkg/_deb-noxdp/libknot-dev.install
new file mode 120000
index 000000000..c6f95da80
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/libknot-dev.install
@@ -0,0 +1 @@
+../deb/libknot-dev.install
\ No newline at end of file
diff --git a/distro/pkg/_deb-noxdp/libknot13.install b/distro/pkg/_deb-noxdp/libknot13.install
new file mode 120000
index 000000000..289b1b6e5
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/libknot13.install
@@ -0,0 +1 @@
+../deb/libknot13.install
\ No newline at end of file
diff --git a/distro/pkg/_deb-noxdp/libknot13.symbols b/distro/pkg/_deb-noxdp/libknot13.symbols
new file mode 100644
index 000000000..b4312e832
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/libknot13.symbols
@@ -0,0 +1,223 @@
+libknot.so.13 libknot13 #MINVER#
+ KNOT_DB_LMDB_DUPSORT@Base 3.2.0
+ KNOT_DB_LMDB_INTEGERKEY@Base 3.2.0
+ KNOT_DB_LMDB_MAPASYNC@Base 3.2.0
+ KNOT_DB_LMDB_NOSYNC@Base 3.2.0
+ KNOT_DB_LMDB_NOTLS@Base 3.2.0
+ KNOT_DB_LMDB_RDONLY@Base 3.2.0
+ KNOT_DB_LMDB_WRITEMAP@Base 3.2.0
+ KNOT_DUMP_STYLE_DEFAULT@Base 3.2.0
+ knot_ctl_accept@Base 3.2.0
+ knot_ctl_alloc@Base 3.2.0
+ knot_ctl_bind@Base 3.2.0
+ knot_ctl_close@Base 3.2.0
+ knot_ctl_connect@Base 3.2.0
+ knot_ctl_free@Base 3.2.0
+ knot_ctl_receive@Base 3.2.0
+ knot_ctl_send@Base 3.2.0
+ knot_ctl_set_timeout@Base 3.2.0
+ knot_ctl_unbind@Base 3.2.0
+ knot_db_lmdb_api@Base 3.2.0
+ knot_db_lmdb_del_exact@Base 3.2.0
+ knot_db_lmdb_get_mapsize@Base 3.2.0
+ knot_db_lmdb_get_path@Base 3.2.0
+ knot_db_lmdb_get_usage@Base 3.2.0
+ knot_db_lmdb_iter_del@Base 3.2.0
+ knot_db_lmdb_txn_begin@Base 3.2.0
+ knot_db_trie_api@Base 3.2.0
+ knot_dname_cmp@Base 3.2.0
+ knot_dname_copy@Base 3.2.0
+ knot_dname_copy_lower@Base 3.2.0
+ knot_dname_free@Base 3.2.0
+ knot_dname_from_str@Base 3.2.0
+ knot_dname_in_bailiwick@Base 3.2.0
+ knot_dname_is_case_equal@Base 3.2.0
+ knot_dname_is_equal@Base 3.2.0
+ knot_dname_labels@Base 3.2.0
+ knot_dname_lf@Base 3.2.0
+ knot_dname_matched_labels@Base 3.2.0
+ knot_dname_prefixlen@Base 3.2.0
+ knot_dname_realsize@Base 3.2.0
+ knot_dname_replace_suffix@Base 3.2.0
+ knot_dname_size@Base 3.2.0
+ knot_dname_store@Base 3.2.0
+ knot_dname_to_lower@Base 3.2.0
+ knot_dname_to_str@Base 3.2.0
+ knot_dname_to_wire@Base 3.2.0
+ knot_dname_unpack@Base 3.2.0
+ knot_dname_wire_check@Base 3.2.0
+ knot_dnssec_alg_names@Base 3.2.0
+ knot_edns_add_option@Base 3.2.0
+ knot_edns_alignment_size@Base 3.2.0
+ knot_edns_chain_parse@Base 3.2.0
+ knot_edns_chain_size@Base 3.2.0
+ knot_edns_chain_write@Base 3.2.0
+ knot_edns_client_subnet_get_addr@Base 3.2.0
+ knot_edns_client_subnet_parse@Base 3.2.0
+ knot_edns_client_subnet_set_addr@Base 3.2.0
+ knot_edns_client_subnet_size@Base 3.2.0
+ knot_edns_client_subnet_write@Base 3.2.0
+ knot_edns_cookie_client_check@Base 3.2.0
+ knot_edns_cookie_client_generate@Base 3.2.0
+ knot_edns_cookie_parse@Base 3.2.0
+ knot_edns_cookie_server_check@Base 3.2.0
+ knot_edns_cookie_server_generate@Base 3.2.0
+ knot_edns_cookie_size@Base 3.2.0
+ knot_edns_cookie_write@Base 3.2.0
+ knot_edns_ede_names@Base 3.2.0
+ knot_edns_get_ext_rcode@Base 3.2.0
+ knot_edns_get_option@Base 3.2.0
+ knot_edns_get_options@Base 3.2.0
+ knot_edns_get_version@Base 3.2.0
+ knot_edns_init@Base 3.2.0
+ knot_edns_keepalive_parse@Base 3.2.0
+ knot_edns_keepalive_size@Base 3.2.0
+ knot_edns_keepalive_write@Base 3.2.0
+ knot_edns_reserve_option@Base 3.2.0
+ knot_edns_set_ext_rcode@Base 3.2.0
+ knot_edns_set_version@Base 3.2.0
+ knot_error_from_libdnssec@Base 3.2.0
+ knot_get_obsolete_rdata_descriptor@Base 3.2.0
+ knot_get_rdata_descriptor@Base 3.2.0
+ knot_naptr_header_size@Base 3.2.0
+ knot_opcode_names@Base 3.2.0
+ knot_opt_code_to_string@Base 3.2.0
+ knot_pkt_begin@Base 3.2.0
+ knot_pkt_clear@Base 3.2.0
+ knot_pkt_copy@Base 3.2.0
+ knot_pkt_ext_rcode@Base 3.2.0
+ knot_pkt_ext_rcode_name@Base 3.2.0
+ knot_pkt_free@Base 3.2.0
+ knot_pkt_init_response@Base 3.2.0
+ knot_pkt_new@Base 3.2.0
+ knot_pkt_parse@Base 3.2.0
+ knot_pkt_parse_question@Base 3.2.0
+ knot_pkt_put_question@Base 3.2.0
+ knot_pkt_put_rotate@Base 3.2.0
+ knot_pkt_reclaim@Base 3.2.0
+ knot_pkt_reserve@Base 3.2.0
+ knot_probe_alloc@Base 3.2.0
+ knot_probe_consume@Base 3.2.0
+ knot_probe_data_set@Base 3.2.0
+ knot_probe_fd@Base 3.2.0
+ knot_probe_free@Base 3.2.0
+ knot_probe_produce@Base 3.2.0
+ knot_probe_set_consumer@Base 3.2.0
+ knot_probe_set_producer@Base 3.2.0
+ knot_probe_tcp_rtt@Base 3.2.0
+ knot_rcode_names@Base 3.2.0
+ knot_rdataset_add@Base 3.2.0
+ knot_rdataset_at@Base 3.2.0
+ knot_rdataset_clear@Base 3.2.0
+ knot_rdataset_copy@Base 3.2.0
+ knot_rdataset_eq@Base 3.2.0
+ knot_rdataset_intersect@Base 3.2.0
+ knot_rdataset_intersect2@Base 3.2.0
+ knot_rdataset_member@Base 3.2.0
+ knot_rdataset_merge@Base 3.2.0
+ knot_rdataset_subset@Base 3.2.0
+ knot_rdataset_subtract@Base 3.2.0
+ knot_rrclass_from_string@Base 3.2.0
+ knot_rrclass_to_string@Base 3.2.0
+ knot_rrset_add_rdata@Base 3.2.0
+ knot_rrset_clear@Base 3.2.0
+ knot_rrset_copy@Base 3.2.0
+ knot_rrset_equal@Base 3.2.0
+ knot_rrset_free@Base 3.2.0
+ knot_rrset_is_nsec3rel@Base 3.2.0
+ knot_rrset_new@Base 3.2.0
+ knot_rrset_rr_from_wire@Base 3.2.0
+ knot_rrset_rr_to_canonical@Base 3.2.0
+ knot_rrset_size@Base 3.2.0
+ knot_rrset_to_wire_extra@Base 3.2.0
+ knot_rrset_txt_dump@Base 3.2.0
+ knot_rrset_txt_dump_data@Base 3.2.0
+ knot_rrset_txt_dump_header@Base 3.2.0
+ knot_rrtype_additional_needed@Base 3.2.0
+ knot_rrtype_from_string@Base 3.2.0
+ knot_rrtype_is_dnssec@Base 3.2.0
+ knot_rrtype_is_metatype@Base 3.2.0
+ knot_rrtype_should_be_lowercased@Base 3.2.0
+ knot_rrtype_to_string@Base 3.2.0
+ knot_strerror@Base 3.2.0
+ knot_svcb_param_names@Base 3.2.0
+ knot_tcp_inbuf_update@Base 3.2.0
+ knot_tcp_outbufs_ack@Base 3.2.0
+ knot_tcp_outbufs_add@Base 3.2.0
+ knot_tcp_outbufs_can_send@Base 3.2.0
+ knot_tcp_outbufs_usage@Base 3.2.0
+ knot_tsig_add@Base 3.2.0
+ knot_tsig_append@Base 3.2.0
+ knot_tsig_client_check@Base 3.2.0
+ knot_tsig_client_check_next@Base 3.2.0
+ knot_tsig_create_rdata@Base 3.2.0
+ knot_tsig_key_copy@Base 3.2.0
+ knot_tsig_key_deinit@Base 3.2.0
+ knot_tsig_key_init@Base 3.2.0
+ knot_tsig_key_init_file@Base 3.2.0
+ knot_tsig_key_init_str@Base 3.2.0
+ knot_tsig_rcode_names@Base 3.2.0
+ knot_tsig_rdata_alg@Base 3.2.0
+ knot_tsig_rdata_alg_name@Base 3.2.0
+ knot_tsig_rdata_error@Base 3.2.0
+ knot_tsig_rdata_fudge@Base 3.2.0
+ knot_tsig_rdata_is_ok@Base 3.2.0
+ knot_tsig_rdata_mac@Base 3.2.0
+ knot_tsig_rdata_mac_length@Base 3.2.0
+ knot_tsig_rdata_orig_id@Base 3.2.0
+ knot_tsig_rdata_other_data@Base 3.2.0
+ knot_tsig_rdata_other_data_length@Base 3.2.0
+ knot_tsig_rdata_set_fudge@Base 3.2.0
+ knot_tsig_rdata_set_mac@Base 3.2.0
+ knot_tsig_rdata_set_orig_id@Base 3.2.0
+ knot_tsig_rdata_set_other_data@Base 3.2.0
+ knot_tsig_rdata_set_time_signed@Base 3.2.0
+ knot_tsig_rdata_time_signed@Base 3.2.0
+ knot_tsig_rdata_tsig_timers_length@Base 3.2.0
+ knot_tsig_rdata_tsig_variables_length@Base 3.2.0
+ knot_tsig_server_check@Base 3.2.0
+ knot_tsig_sign@Base 3.2.0
+ knot_tsig_sign_next@Base 3.2.0
+ knot_tsig_wire_maxsize@Base 3.2.0
+ knot_tsig_wire_size@Base 3.2.0
+ yp_addr@Base 3.2.0
+ yp_addr_noport@Base 3.2.0
+ yp_addr_noport_to_bin@Base 3.2.0
+ yp_addr_noport_to_txt@Base 3.2.0
+ yp_addr_range_to_bin@Base 3.2.0
+ yp_addr_range_to_txt@Base 3.2.0
+ yp_addr_to_bin@Base 3.2.0
+ yp_addr_to_txt@Base 3.2.0
+ yp_base64_to_bin@Base 3.2.0
+ yp_base64_to_txt@Base 3.2.0
+ yp_bool_to_bin@Base 3.2.0
+ yp_bool_to_txt@Base 3.2.0
+ yp_deinit@Base 3.2.0
+ yp_dname_to_bin@Base 3.2.0
+ yp_dname_to_txt@Base 3.2.0
+ yp_format_id@Base 3.2.0
+ yp_format_key0@Base 3.2.0
+ yp_format_key1@Base 3.2.0
+ yp_hex_to_bin@Base 3.2.0
+ yp_hex_to_txt@Base 3.2.0
+ yp_init@Base 3.2.0
+ yp_int_to_bin@Base 3.2.0
+ yp_int_to_txt@Base 3.2.0
+ yp_item_to_bin@Base 3.2.0
+ yp_item_to_txt@Base 3.2.0
+ yp_option_to_bin@Base 3.2.0
+ yp_option_to_txt@Base 3.2.0
+ yp_parse@Base 3.2.0
+ yp_schema_check_deinit@Base 3.2.0
+ yp_schema_check_init@Base 3.2.0
+ yp_schema_check_parser@Base 3.2.0
+ yp_schema_check_str@Base 3.2.0
+ yp_schema_copy@Base 3.2.0
+ yp_schema_find@Base 3.2.0
+ yp_schema_free@Base 3.2.0
+ yp_schema_merge@Base 3.2.0
+ yp_schema_purge_dynamic@Base 3.2.0
+ yp_set_input_file@Base 3.2.0
+ yp_set_input_string@Base 3.2.0
+ yp_str_to_bin@Base 3.2.0
+ yp_str_to_txt@Base 3.2.0
diff --git a/distro/pkg/_deb-noxdp/libzscanner4.install b/distro/pkg/_deb-noxdp/libzscanner4.install
new file mode 120000
index 000000000..821128835
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/libzscanner4.install
@@ -0,0 +1 @@
+../deb/libzscanner4.install
\ No newline at end of file
diff --git a/distro/pkg/_deb-noxdp/libzscanner4.symbols b/distro/pkg/_deb-noxdp/libzscanner4.symbols
new file mode 120000
index 000000000..1c8b8ed98
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/libzscanner4.symbols
@@ -0,0 +1 @@
+../deb/libzscanner4.symbols
\ No newline at end of file
diff --git a/distro/pkg/_deb-noxdp/not-installed b/distro/pkg/_deb-noxdp/not-installed
new file mode 120000
index 000000000..eb81d13cb
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/not-installed
@@ -0,0 +1 @@
+../deb/not-installed
\ No newline at end of file
diff --git a/distro/pkg/_deb-noxdp/prepare-environment b/distro/pkg/_deb-noxdp/prepare-environment
new file mode 120000
index 000000000..8fc05f82a
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/prepare-environment
@@ -0,0 +1 @@
+../deb/prepare-environment
\ No newline at end of file
diff --git a/distro/pkg/_deb-noxdp/rules b/distro/pkg/_deb-noxdp/rules
new file mode 100755
index 000000000..cb56c0340
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/rules
@@ -0,0 +1,87 @@
+#!/usr/bin/make -f
+
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all
+export DEB_CFLAGS_MAINT_APPEND  = -Wall -DNDEBUG
+export DEB_LDFLAGS_MAINT_APPEND = -Wl,--as-needed
+
+export DPKG_GENSYMBOLS_CHECK_LEVEL := 4
+export KNOT_SOFTHSM2_DSO = /usr/lib/softhsm/libsofthsm2.so
+
+include /usr/share/dpkg/default.mk
+
+ifeq (maint,$(filter $(DEB_BUILD_OPTIONS),maint))
+  FASTPARSER := --disable-fastparser
+else
+  FASTPARSER := --enable-fastparser
+endif
+
+ifeq ($(DEB_HOST_ARCH),$(filter $(DEB_HOST_ARCH),hurd-i386))
+  RECVMMSG:=--enable-recvmmsg=no
+else
+  RECVMMSG:=--enable-recvmmsg=yes
+endif
+
+ifeq ($(DEB_HOST_ARCH),$(filter $(DEB_HOST_ARCH),amd64 i386))
+  RUN_TEST :=
+else
+  RUN_TEST := -timeout --kill-after=5s 5m
+endif
+
+LIBKNOT_SYMBOLS := $(wildcard $(CURDIR)/debian/libknot*.symbols)
+
+# MAJOR.MINOR version part
+BASE_VERSION := $(shell echo $(DEB_VERSION) | sed 's/^\([^.]\+\.[^.]\+\).*/\1/')
+
+PYBUILD = pybuild --dir python --dest-dir debian/python3-libknot
+
+%:
+	dh $@ \
+	 --exclude=.la --exclude=example.com.zone \
+	 --with python3
+
+override_dh_auto_configure:
+	dh_auto_configure -- \
+	  --sysconfdir=/etc \
+	  --localstatedir=/var/lib \
+	  --libexecdir=/usr/lib/knot \
+	  --with-rundir=/run/knot \
+	  --with-moduledir=/usr/lib/$(DEB_HOST_MULTIARCH)/knot/modules-$(BASE_VERSION) \
+	  --with-storage=/var/lib/knot \
+	  --enable-systemd=auto \
+	  --enable-dnstap \
+	  --with-module-dnstap=shared \
+	  --with-module-geoip=shared \
+	  $(RECVMMSG) \
+	  $(FASTPARSER) \
+	  --disable-silent-rules \
+	  --disable-static
+
+override_dh_auto_configure-indep:
+	$(PYBUILD) --configure
+
+override_dh_auto_build-indep:
+	dh_auto_build -- html
+	$(PYBUILD) --build
+
+override_dh_auto_install-arch:
+	dh_auto_install -- install
+	# rename knot.sample.conf to knot.conf
+	mv $(CURDIR)/debian/tmp/etc/knot/knot.sample.conf $(CURDIR)/debian/tmp/etc/knot/knot.conf
+
+override_dh_auto_install-indep:
+	dh_auto_install -- install-html
+	# rename knot.sample.conf to knot.conf
+	mv $(CURDIR)/debian/tmp/etc/knot/knot.sample.conf $(CURDIR)/debian/tmp/etc/knot/knot.conf
+	$(PYBUILD) --install
+
+override_dh_auto_test-indep:
+override_dh_auto_test-arch:
+ifeq (,$(filter nocheck,$(DEB_BUILD_OPTIONS)))
+	$(RUN_TEST) dh_auto_test
+endif
+
+override_dh_missing:
+	dh_missing --fail-missing
+
+override_dh_installchangelogs:
+	dh_installchangelogs NEWS
diff --git a/distro/pkg/_deb-noxdp/source b/distro/pkg/_deb-noxdp/source
new file mode 120000
index 000000000..dfee404ce
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/source
@@ -0,0 +1 @@
+../deb/source
\ No newline at end of file
diff --git a/distro/pkg/_deb-noxdp/tests b/distro/pkg/_deb-noxdp/tests
new file mode 120000
index 000000000..3426a0753
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/tests
@@ -0,0 +1 @@
+../deb/tests
\ No newline at end of file
diff --git a/distro/pkg/_deb-noxdp/ufw b/distro/pkg/_deb-noxdp/ufw
new file mode 120000
index 000000000..24b7101b9
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/ufw
@@ -0,0 +1 @@
+../deb/ufw
\ No newline at end of file
diff --git a/distro/pkg/_deb-noxdp/watch b/distro/pkg/_deb-noxdp/watch
new file mode 120000
index 000000000..28be48c89
--- /dev/null
+++ b/distro/pkg/_deb-noxdp/watch
@@ -0,0 +1 @@
+../deb/watch
\ No newline at end of file
diff --git a/distro/pkg/deb/rules b/distro/pkg/deb/rules
index 8792f3ec4..a5ebce121 100755
--- a/distro/pkg/deb/rules
+++ b/distro/pkg/deb/rules
@@ -69,19 +69,9 @@ override_dh_auto_install-arch:
 	dh_auto_install -- install
 	# rename knot.sample.conf to knot.conf
 	mv $(CURDIR)/debian/tmp/etc/knot/knot.sample.conf $(CURDIR)/debian/tmp/etc/knot/knot.conf
-	# Some workarounds where XDP is unavailable
-	@if [ -f "$(CURDIR)/debian/tmp/usr/sbin/kxdpgun" ]; then \
-	  echo "XDP enabled"; \
-	  if grep -E -q "DoQ support: +no" "$(CURDIR)/debian/tmp/usr/sbin/knotd"; then \
-	    echo "Stripping the QUIC symbols"; \
-	    sed -i '/knot_xquic_/d' $(LIBKNOT_SYMBOLS); \
-	  fi \
-	else \
-	  echo "XDP disabled"; \
-	  touch $(CURDIR)/debian/tmp/usr/share/man/man8/kxdpgun.8; \
-	  printf '#!/bin/sh\n\necho "kxdpgun not available"\n' > $(CURDIR)/debian/tmp/usr/sbin/kxdpgun; \
-	  echo "Stripping the XDP symbols"; \
-	  sed -i -E '/knot_xdp_|knot_eth_|knot_tcp_[crst]|knot_xquic_|KNOT_XDP_/d' $(LIBKNOT_SYMBOLS); \
+	@if grep -E -q "DoQ support: +no" "$(CURDIR)/debian/tmp/usr/sbin/knotd"; then \
+	  echo "Stripping the QUIC symbols"; \
+	  sed -i '/knot_xquic_/d' $(LIBKNOT_SYMBOLS); \
 	fi
 
 override_dh_auto_install-indep: