Commit Graph

13 Commits

Author SHA1 Message Date
Petr Menšík
985c6a75ed Prefer local resolvers over direct root access. Enables successful trust
anchor updates also when no direct queries are available, but local
resolvers support dnssec. Fixes bug #1598078
2018-07-04 12:42:14 +02:00
Tomas Hozza
bbc56d0b27 Removed dependency and ordering on unbound-anchor.service in unbound.service
Once ntpdate.service is fixed to order itself After nss-lookup.target,
there will be an ordering loop. To reproduce this do:

[root@notas ~]# yum -y install unbound ntpdate chrony
[root@notas ~]# systemctl enable ntpdate.service chronyd.service unbound-anchor.timer unbound.service unbound-anchor.service
[root@notas ~]# systemd-analyze verify /usr/lib/systemd/system/*

And then in the output you can find:
Found ordering cycle on ntpdate.service/stop
Found dependency on nss-lookup.target/start
Found dependency on unbound.service/start
Found dependency on unbound-anchor.service/start
Found dependency on unbound-anchor.timer/start
Found dependency on time-sync.target/start
Found dependency on chrony-wait.service/stop
Found dependency on chronyd.service/stop
Found dependency on ntpdate.service/stop

Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-09-15 14:44:53 +02:00
Tomas Hozza
9668107e96 Removed After syslog.target since it is not needed any more
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-07-20 14:38:36 +02:00
Tomas Hozza
308425859f Added ExecReload section to unbound.service (#1195785)
Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-07-20 14:36:58 +02:00
Tomas Hozza
3e229ffe15 unbound.service now Wants unbound-anchor.timer
- unbound-anchor man page moved to the unbound-libs

Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-05-13 13:17:43 +02:00
Tomas Hozza
2a169a866b migrate cronjob to systemd timer unit (#1177285)
- change the period for unbound-anchor from monthly to daily (#1180267)
- Thanks to Tomasz Torcz <ttorcz@fedoraproject.org> for the initial patch

Signed-off-by: Tomas Hozza <thozza@redhat.com>
2015-04-27 16:50:57 +02:00
Paul Wouters
113e33794a * Sat Jun 01 2013 Paul Wouters <pwouters@redhat.com> - 1.4.20-13
- Run unbound-anchor as user unbound in unbound.service
2013-05-31 23:53:15 -04:00
Paul Wouters
3f230f2522 * fixup unbound.conf and the service file to use root.key, not root.anchor 2013-05-28 18:06:00 -04:00
Paul Wouters
259a0ee4dc +* Tue May 21 2013 Paul Wouters <pwouters@redhat.com> - 1.4.20-9
- Use /var/lib/unbound/root.anchor (more consistent with other distros)
- Enable round-robin (with noths() patch)
- Enable minimal responses
2013-05-24 16:42:52 -04:00
Paul Wouters
e01c1754e1 * ensure unbound service starts before nss-lookup.target 2013-04-11 12:01:35 -04:00
Paul Wouters
44eecbb1e3 * update root anchor call in systemd service file
also give sysconfig variable a space to make it more robust with systemd
2013-04-08 11:58:59 -04:00
Paul Wouters
90deaa6495 * add unbound-anchor support and more flexible config directories 2012-11-03 17:12:29 -04:00
Tom "spot" Callaway
a5236243e9 convert to systemd 2011-09-14 16:20:56 -04:00