-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi Robert,
On 13-04-13 03:27 PM, Robert Edmonds wrote: > hi, simon: > > i've split your patch into a chroot part and an auto-trust-anchor-file > part (see attached). i'm going to apply the first patch but not the > second, because the auto-trust-anchor-file directive can be specified > multiple times and not necessarily for the root zone trust anchor only > (and the unbound-anchor utility only deals with the root trust anchor). Good point. > i think it would be possible to eliminate the ROOT_TRUST_ANCHOR_FILE > variable from /etc/default/unbound, but the handling would need to be a > bit more robust: > > * loop over each line from the output of: > "unbound-checkconf $CHROOT_DIR/$UNBOUND_CONF -o auto-trust-anchor-file": > > + read the anchor file and extract the zone name > > + if the zone name is "." (i.e., the root zone), then the > unbound-anchor utility is invoked on the anchor file > > this functionality could probably be extracted into a dedicated script > (say, /usr/sbin/unbound-update-root-trust-anchor-file) which gets called > from /etc/init.d/unbound, rather than embedding it into the init script. > though this is probably a bit too much effort to go to in order to > eliminate a single duplicated variable from /etc/default/unbound. Agreed and thanks a lot for integrating the chroot patch. Regards, Simon -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQIcBAEBCgAGBQJRatttAAoJEKxARU5IGrhR9Q4QALDgLsHAfeUoA+BRqcg7fMT5 2FeTppnsoNkW8WAojYdT1uLKU6L0lX4XaWBTk7TuV9MBpQ+51lxx1lv3mWGUItaZ 8LZGgPdlDusg+UcxM6VMWxtxvMm1YMB/znFqaHtKjbq/ixvIPu2Tq4obtugg/ccr B45o/SNZcstgnV8sEe1l+FqLIgpysybW10MZFVqweCLURM+tPKtcoZBMvu9/O/7y qyMBgbXENS3XSR0N98jynAn5ijeMf+kAd+Mq9Ccb6pPn1+x8IaX8GjsqcNtvGtAz 066RbaS0dyBiMLXItUET1LZvC/YwfT360KSs6k2rbxAjcHNN/kCHh+b78zVrjTcA 1hWX1m7R1Bv5s5L9XCN2kPpJVKZ0eTgwfUuBYMB4Kz1qVlHQvyaFMGY+FKZ/Z/Al UQpWIWP55/Lo1FhuNePX78GwonbVMroFB4pc7tu8jMfC8ePgrI/QvmEPFc3GwDjm QlDHmeuDYP4V6JShaJwHPXrfd9FzPNBu3rCLnoXKQCWM0zQak65A6IcJ1iswOmqg X0fMX8kWPwoO+VzbQxOU0YlsHXylcU9rn6vbG2h9VOLhg4Dy3A6VCMpv3NdlVnRV MO+2MAfgcVopueVvGTUsY05SgCVCbs1Qs5YFEzwlY69fEiLW2x06GwOGPWm7Gr9q nX8fX27orwu+GLh7scrx =SIH0 -----END PGP SIGNATURE----- -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
