Changeset 13702 in hybrid

Timestamp:

Jan 15, 2017, 9:59:56 PM (8 years ago)

Author:

rick

Message:

Put the trust anchor file it it\'s proper ( rooted ) location

Location:

branches/releng-11/nanobsd

Files:

• cfg/nanobsd.wleiden (modified) (2 diffs)
• files/etc/rc.conf (modified) (1 diff)
• files/usr/local/etc/unbound/unbound.conf (modified) (1 diff)

branches/releng-11/nanobsd/cfg/nanobsd.wleiden

@@ -235 +235 @@
 )
 
+# Unbound is running in alternative chroot location (port default) how-ever
+# this directory needs to be writeable by unbound for key generation etc.
+cust_unbound_rights() (
+        if [ -r ${NANO_WORLDDIR}/usr/local/etc/unbound ]; then
+                chroot ${NANO_WORLDDIR} sh -c "chown unbound:unbound /usr/local/etc/unbound"
+        fi
+)
 
 
@@ -440 +447 @@
 customize_cmd cust_set_root_password
 customize_cmd cust_sudo_rules
+customize_cmd cust_unbound_rights
 #customize_cmd cust_apply_nanobsd_patches
 late_customize_cmd late_cust_unset_common_var_and_tmp

branches/releng-11/nanobsd/files/etc/rc.conf

@@ -79 +79 @@
 local_unbound_enable="NO"
 unbound_enable="NO"
-unbound_anchorflags="-a /tmp/unbound.root.key"
 
 # Explicitly disable the memory-hungry alternatives

branches/releng-11/nanobsd/files/usr/local/etc/unbound/unbound.conf

@@ -434 +434 @@
         # and under the terms of our LICENSE (see that file in the source).
         # auto-trust-anchor-file: "/usr/local/etc/unbound/root.key"
-        auto-trust-anchor-file: "/tmp/unbound.root.key"
 
         # File with DLV trusted keys. Same format as trust-anchor-file.