Browse Source

No need to run unbound-anchor anymore. Unwind(8) handles the bootstrap

correctly itself now. At leat considering the end of life times of
OpenBSD releases and the speed at which the root key signing key (KSK)
rolls.
On the other hand, unbound-anchor assumes a certain network quality
which we cannot guarantee in places where we want to run unwind(8).
This in turn can lead to unbound-anchor stalling the boot process.
OPENBSD_6_5
florian 5 years ago
parent
commit
bb213c52bf
1 changed files with 1 additions and 5 deletions
  1. +1
    -5
      src/etc/rc.d/unwind

+ 1
- 5
src/etc/rc.d/unwind View File

@ -1,13 +1,9 @@
#!/bin/ksh
#
# $OpenBSD: unwind,v 1.1 2019/01/26 10:59:07 florian Exp $
# $OpenBSD: unwind,v 1.2 2019/02/07 17:54:01 florian Exp $
daemon="/sbin/unwind"
. /etc/rc.d/rc.subr
rc_pre() {
/usr/sbin/unbound-anchor -a /etc/unwind/trustanchor/root.key || true
}
rc_cmd $1

Loading…
Cancel
Save