cafkafk/nixpkgs
cafkafk/nixpkgs
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2

nixos/unbond: unbound should be required for nss-lookup.target

Browse source 
Other units depend on nss-lookup.target and expect the DNS resolution to
work once that target is reached. The previous version
`wants=nss-lookup.target` made this unit require the nss-lookup.target
to be reached before this was started.

Another change that we can probalby do is drop the before relationship
with the nss-lookup.target. That might just be implied with the current
version.
This commit is contained in:
Andreas Rammhold 2020-11-03 19:21:39 +01:00
parent 5c16c31e06
commit 5903ea5395
No known key found for this signature in database
GPG key ID: E432E410B5E48C86
1 changed files with 1 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
nixos/modules/services/networking/unbound.nix
View file

@ -154,8 +154,7 @@ in
description = "Unbound recursive Domain Name Server"; description = "Unbound recursive Domain Name Server";
after = [ "network.target" ]; after = [ "network.target" ];
before = [ "nss-lookup.target" ]; before = [ "nss-lookup.target" ];
wants = [ "nss-lookup.target" ]; wantedBy = [ "multi-user.target" "nss-lookup.target" ];
wantedBy = [ "multi-user.target" ];
preStart = lib.mkIf cfg.enableRootTrustAnchor '' preStart = lib.mkIf cfg.enableRootTrustAnchor ''
${cfg.package}/bin/unbound-anchor -a ${rootTrustAnchorFile} || echo "Root anchor updated!" ${cfg.package}/bin/unbound-anchor -a ${rootTrustAnchorFile} || echo "Root anchor updated!"