Re: s6, listen(8), etc.

[Jonathan de Boyne Pollard]

Daniel Kahn Gillmor:

     #!/bin/sh
     mkdir -p /run/kresd/workdir && \
     setfacl -m u:kresd:rwx /run/kresd/workdir && \
     cd /run/kresd/workdir && \
     exec listen -udp::53 \
                 -tcp::53 \
                 -tcp:label=tls:853 \
                 -unix:label=control,mode=0600:/run/kresd/control \
     chpst -u kresd -p 1 \
     /usr/sbin/kresd

start:

        #!/bin/sh -e
        install -d -m 0755 -o kresd /run/kresd/workdir

stop:

        #!/bin/sh -e
        rm -r /run/kresd/

run:

        #!/bin/nosh
        udp-socket-listen --systemd-compatibility --combine4and6 :: domain
        tcp-socket-listen --systemd-compatibility --combine4and6 --backlog 2 :: 
domain
        local-datagram-socket-listen --systemd-compatibility --mode 0666 
/run/kresd/query.socket
        local-stream-socket-listen --systemd-compatibility --mode 0600 
/run/kresd/control
        ./service

service:

        #!/bin/nosh
        chdir /run/kresd/workdir
        softlimit -p 1
        setuidgid kresd
        kresd