Attention is currently required from: flichtenheld, plaisthos. d12fk has posted comments on this change. ( http://gerrit.openvpn.net/c/openvpn/+/838?usp=email )
Change subject: dns: apply settings via script on unixoid systems ...................................................................... Patch Set 8: (5 comments) File distro/dns-scripts/systemd-dns-updown.sh: http://gerrit.openvpn.net/c/openvpn/+/838/comment/e7242d2e_9ce75db6 : PS7, Line 91: [[ "$(readlink /etc/resolv.conf)" =~ systemd ]] || return 1 > This fallback is nice, but I really would like to see some kind of message > about it in the log. Problem is that scripts can't log anything afaik. File src/openvpn/dns.c: http://gerrit.openvpn.net/c/openvpn/+/838/comment/431ae915_d56a1d76 : PS7, Line 545: int res = openvpn_run_script(&argv, es, S_FATAL|S_EXITCODE, "dns script"); > This actually lead to annoying problems in my testing. […] Acknowledged File src/openvpn/options.c: http://gerrit.openvpn.net/c/openvpn/+/838/comment/65694cc7_b840e8a4 : PS7, Line 911: o->dns_options.script = DNS_UPDOWN_PATH; > This does not work well as an unconditional default I think. […] Built-in script now runs as built-in and should not be complained about any longer. http://gerrit.openvpn.net/c/openvpn/+/838/comment/55e960a6_805f6e3f : PS7, Line 8045: else if (streq(p[0], "dns-script") && p[1]) > New script should be documented in `doc/man-sections/script-options. […] Actually missed pushing the doc commit the whole time, thanks for pointing it out. http://gerrit.openvpn.net/c/openvpn/+/838/comment/c7497690_9e53e4ce : PS7, Line 8052: set_user_script(options, &options->dns_options.script, p[1], p[0], false); > Again, this does not behave nice at all. […] Not sure if we need the possibility to disable --dns-script, as on Windows it is not possible either, but it is implemented now by --dns-script disable, with disable being a reserved "filename" for that purpose. Seemed reasonable. Also the built-in script requires script-security 1 now, 2 is only needed for user defined scripts, works as intended this way. -- To view, visit http://gerrit.openvpn.net/c/openvpn/+/838?usp=email To unsubscribe, or for help writing mail filters, visit http://gerrit.openvpn.net/settings Gerrit-Project: openvpn Gerrit-Branch: master Gerrit-Change-Id: Ifbe4ffb44d3bfcaa50adb38cacb3436fcdc71b10 Gerrit-Change-Number: 838 Gerrit-PatchSet: 8 Gerrit-Owner: d12fk <he...@openvpn.net> Gerrit-Reviewer: flichtenheld <fr...@lichtenheld.com> Gerrit-Reviewer: plaisthos <arne-open...@rfc2549.org> Gerrit-CC: openvpn-devel <openvpn-devel@lists.sourceforge.net> Gerrit-Attention: plaisthos <arne-open...@rfc2549.org> Gerrit-Attention: flichtenheld <fr...@lichtenheld.com> Gerrit-Comment-Date: Thu, 27 Feb 2025 00:29:40 +0000 Gerrit-HasComments: Yes Gerrit-Has-Labels: No Comment-In-Reply-To: flichtenheld <fr...@lichtenheld.com> Gerrit-MessageType: comment
_______________________________________________ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-devel