From unknown Fri Aug 15 16:56:11 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#68622] [PATCH 2/2] services: knot-resolver: Use default DNSSEC trust anchors. Resent-From: Leo =?UTF-8?Q?Nikkil=C3=A4?= Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Sat, 20 Jan 2024 21:27:03 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 68622 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 68622@debbugs.gnu.org Cc: Leo =?UTF-8?Q?Nikkil=C3=A4?= X-Debbugs-Original-To: guix-patches@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.170578600132459 (code B ref -1); Sat, 20 Jan 2024 21:27:03 +0000 Received: (at submit) by debbugs.gnu.org; 20 Jan 2024 21:26:41 +0000 Received: from localhost ([127.0.0.1]:35984 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1rRIrQ-0008RO-P6 for submit@debbugs.gnu.org; Sat, 20 Jan 2024 16:26:41 -0500 Received: from lists.gnu.org ([2001:470:142::17]:57972) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1rRIrO-0008Qo-Tn for submit@debbugs.gnu.org; Sat, 20 Jan 2024 16:26:39 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1rRIrA-0000B0-Sn for guix-patches@gnu.org; Sat, 20 Jan 2024 16:26:26 -0500 Received: from out1-smtp.messagingengine.com ([66.111.4.25]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1rRIr7-0000BD-Ps for guix-patches@gnu.org; Sat, 20 Jan 2024 16:26:23 -0500 Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailout.nyi.internal (Postfix) with ESMTP id 50C335C00B1; Sat, 20 Jan 2024 16:26:21 -0500 (EST) Received: from mailfrontend1 ([10.202.2.162]) by compute3.internal (MEProxy); Sat, 20 Jan 2024 16:26:21 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lnikki.la; h=cc :cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to; s=fm1; t=1705785981; x= 1705872381; bh=wb6atIrtr/vM2sOcGPQYGg7yB2t17e7SIUsHSIU8z94=; b=P WRGuNWV0OUv6J8tBNIC/E8qvjDjeBeIouNNaOBmz8fSXBA7i2iqSaXG6T/D8Pnmy R/toQKJ0+u9wA/Dzb6DN2SrZBz5TDul2vv3c9k9q6NoqmNknQn32MSyFZDt5hLJh 04+VyG0eK3p5wKRtTuAIJ0fiS3e47k34SQYWpQowYxNqupT1tV1fJzkmWjVuYvlH JKGER6UjwmI+s8Bf+EHLkEE03uggTtpEo44U7npdOL8GSwjThlscsB0tEjpwcQlc KUGjtcHwcupgXdcw2fmIKlWK5jI/amX2qb4U6kT3YQCJZR/CKZGnNqraDyY/s92r Wn5gcV+MDZBZZSwVFxF7Q== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-proxy :x-me-sender:x-me-sender:x-sasl-enc; s=fm3; t=1705785981; x= 1705872381; bh=wb6atIrtr/vM2sOcGPQYGg7yB2t17e7SIUsHSIU8z94=; b=T 2GkNHaK+YnwpEfpAjDN27aj/1ks/4PDZVhbZ9ADAc5lP1ScUx4w+8waEa1hJM9Tb 5/JsJC61o5yZGM7EMBt8FoBKLiZcjkZL9MTDvGI+HgZm0eITVpcAgRtfZOFwpwaY Hmxa6H0prsCc1qhdd1BjGCzDue0tUWPBJ2gfcbJ1bQCMpBaAVODUdpUXSrSTCrFL Trg4X3jrHLHRD05PeQyBs3uRG3LKZyyB8/9eD5BeXL9l54EmxvXntbmZ6vYs2c1q pn3BLibx2YIsOzcb5q2DcHSXowyZBjLPn+F17RzpQnPe4766tq2lo58L4x2yMN2m 7JvSvV75nIZrhkpjRytsA== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvkedrvdekvddgudehtdcutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecunecujfgurhephffvvefufffkofgjfhgggfestd ekredtredtjeenucfhrhhomhepnfgvohcupfhikhhkihhlmocuoehhvghllhhosehlnhhi khhkihdrlhgrqeenucggtffrrghtthgvrhhnpedvgefgvedtieefhfetieffudffudehte dtueelveefleeggedvveehledutdeltdenucevlhhushhtvghrufhiiigvpedtnecurfgr rhgrmhepmhgrihhlfhhrohhmpehhvghllhhosehlnhhikhhkihdrlhgr X-ME-Proxy: Feedback-ID: i41f146a7:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Sat, 20 Jan 2024 16:26:20 -0500 (EST) From: Leo =?UTF-8?Q?Nikkil=C3=A4?= Date: Sat, 20 Jan 2024 23:23:44 +0200 Message-ID: <20240120212542.17473-3-hello@lnikki.la> X-Mailer: git-send-email 2.41.0 In-Reply-To: <20240120212542.17473-1-hello@lnikki.la> References: <20240120212542.17473-1-hello@lnikki.la> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Received-SPF: pass client-ip=66.111.4.25; envelope-from=hello@lnikki.la; helo=out1-smtp.messagingengine.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: 1.0 (+) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.0 (/) * gnu/services/dns.scm (%kresd.conf): Use default anchors. (knot-resolver-activation): Install default anchors when missing. --- gnu/services/dns.scm | 17 +++++++++++++---- 1 file changed, 13 insertions(+), 4 deletions(-) diff --git a/gnu/services/dns.scm b/gnu/services/dns.scm index 6608046909..f83c5b6594 100644 --- a/gnu/services/dns.scm +++ b/gnu/services/dns.scm @@ -655,7 +655,6 @@ (define-record-type* (define %kresd.conf (plain-file "kresd.conf" "-- -*- mode: lua -*- -trust_anchors.add_file('/var/cache/knot-resolver/root.keys') net = { '127.0.0.1', '::1' } user('knot-resolver', 'knot-resolver') modules = { 'hints > iterate', 'stats', 'predict' } @@ -676,10 +675,20 @@ (define %knot-resolver-accounts (define (knot-resolver-activation config) #~(begin (use-modules (guix build utils)) - (let ((rundir "/var/cache/knot-resolver") - (owner (getpwnam "knot-resolver"))) + (let* ((rundir "/var/cache/knot-resolver") + (keyfile (string-append rundir "/root.keys")) + (owner (getpwnam "knot-resolver"))) (mkdir-p rundir) - (chown rundir (passwd:uid owner) (passwd:gid owner))))) + (chown rundir (passwd:uid owner) (passwd:gid owner)) + + ;; Install initial trust anchors when missing. + (unless (file-exists? keyfile) + (copy-file #$(file-append (knot-resolver-configuration-package + config) + "/etc/knot-resolver/root.keys") + keyfile) + (chown keyfile (passwd:uid owner) (passwd:gid owner)) + (chmod keyfile #o755))))) (define knot-resolver-shepherd-services (match-lambda -- 2.41.0 From unknown Fri Aug 15 16:56:11 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#68622] Moved into 68621 References: <20240120212542.17473-3-hello@lnikki.la> In-Reply-To: <20240120212542.17473-3-hello@lnikki.la> Resent-From: Dale Mellor Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Tue, 23 Apr 2024 16:24:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 68622 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 68622@debbugs.gnu.org Received: via spool by 68622-submit@debbugs.gnu.org id=B68622.171388939412957 (code B ref 68622); Tue, 23 Apr 2024 16:24:02 +0000 Received: (at 68622) by debbugs.gnu.org; 23 Apr 2024 16:23:14 +0000 Received: from localhost ([127.0.0.1]:53114 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1rzIvI-0003Mj-K8 for submit@debbugs.gnu.org; Tue, 23 Apr 2024 12:23:13 -0400 Received: from [195.15.247.228] (port=22951 helo=rdmp.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1rzIvG-0003L3-Bf for 68622@debbugs.gnu.org; Tue, 23 Apr 2024 12:23:11 -0400 Received: from [127.0.0.1] (helo=[IPv6:::1]) by rdmp.org with esmtp (Exim 4.96.1) (envelope-from ) id 1rzIut-00047c-2p for 68622@debbugs.gnu.org; Tue, 23 Apr 2024 16:22:48 +0000 Message-ID: From: Dale Mellor Date: Tue, 23 Apr 2024 17:22:47 +0100 Organization: DM Bespoke Computer Solutions Ltd Content-Type: text/plain Content-Transfer-Encoding: 7bit User-Agent: Evolution 3.48.4 MIME-Version: 1.0 X-Spam-Score: 1.3 (+) X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: This patch belongs to issue 68621, closing this one. Content analysis details: (1.3 points, 10.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 SPF_PASS SPF: sender matches SPF record -0.0 SPF_HELO_PASS SPF: HELO matches SPF record 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.3 (/) This patch belongs to issue 68621, closing this one. From debbugs-submit-bounces@debbugs.gnu.org Tue Apr 23 12:24:31 2024 Received: (at control) by debbugs.gnu.org; 23 Apr 2024 16:24:31 +0000 Received: from localhost ([127.0.0.1]:53123 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1rzIwY-0003ao-Ty for submit@debbugs.gnu.org; Tue, 23 Apr 2024 12:24:31 -0400 Received: from [195.15.247.228] (port=1502 helo=rdmp.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1rzIwW-0003ZG-JW for control@debbugs.gnu.org; Tue, 23 Apr 2024 12:24:29 -0400 Received: from [127.0.0.1] (helo=[IPv6:::1]) by rdmp.org with esmtp (Exim 4.96.1) (envelope-from ) id 1rzIwA-00047f-0R for control@debbugs.gnu.org; Tue, 23 Apr 2024 16:24:06 +0000 Message-ID: Subject: close 68620 and 68622 From: Dale Mellor To: control Date: Tue, 23 Apr 2024 17:24:05 +0100 Organization: DM Bespoke Computer Solutions Ltd Content-Type: text/plain Content-Transfer-Encoding: 7bit User-Agent: Evolution 3.48.4 MIME-Version: 1.0 X-Spam-Score: 1.3 (+) X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: close 68620 close 68622 Content analysis details: (1.3 points, 10.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 SPF_PASS SPF: sender matches SPF record -0.0 SPF_HELO_PASS SPF: HELO matches SPF record 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.3 (/) close 68620 close 68622 From unknown Fri Aug 15 16:56:11 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#68622] Moved to 68621 References: <20240120212542.17473-3-hello@lnikki.la> In-Reply-To: <20240120212542.17473-3-hello@lnikki.la> Resent-From: Dale Mellor <" guix-devel-0brg6a"@rdmp.org> Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Tue, 23 Apr 2024 17:47:16 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 68622 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 68622@debbugs.gnu.org Received: via spool by 68622-submit@debbugs.gnu.org id=B68622.171389438723729 (code B ref 68622); Tue, 23 Apr 2024 17:47:16 +0000 Received: (at 68622) by debbugs.gnu.org; 23 Apr 2024 17:46:27 +0000 Received: from localhost ([127.0.0.1]:53482 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1rzKDp-0006AF-1S for submit@debbugs.gnu.org; Tue, 23 Apr 2024 13:46:26 -0400 Received: from [195.15.247.228] (port=48096 helo=rdmp.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1rzIek-0000Fq-Dg for 68622@debbugs.gnu.org; Tue, 23 Apr 2024 12:06:07 -0400 Received: from [127.0.0.1] (helo=[IPv6:::1]) by rdmp.org with esmtp (Exim 4.96.1) (envelope-from ) id 1rzIeN-000476-34 for 68622@debbugs.gnu.org; Tue, 23 Apr 2024 16:05:44 +0000 Message-ID: <506486b730337f1e1b612a7823b793a43c10a184.camel@rdmp.org> From: Dale Mellor <" guix-devel-0brg6a"@rdmp.org> Date: Tue, 23 Apr 2024 17:05:43 +0100 Organization: DM Bespoke Computer Solutions Ltd Content-Type: text/plain Content-Transfer-Encoding: 7bit User-Agent: Evolution 3.48.4 MIME-Version: 1.0 X-Spam-Score: 1.3 (+) X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: This patch belongs to issue 68621, closing here. Content analysis details: (1.3 points, 10.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 SPF_PASS SPF: sender matches SPF record -0.0 SPF_HELO_PASS SPF: HELO matches SPF record 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 FROM_ADDR_WS Malformed From address X-Mailman-Approved-At: Tue, 23 Apr 2024 13:46:16 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 0.3 (/) This patch belongs to issue 68621, closing here.