Re: git: f0a861efbafe - main - local-unbound-setup: Support IPv6-only systems
Date: Sat, 27 Jun 2026 17:15:55 UTC
On Fri, Jun 26, 2026 at 06:33:18PM +0000, Shawn Webb wrote:
> On Fri, Jun 26, 2026 at 02:43:37PM +0000, Dag-Erling Smørgrav wrote:
> > The branch main has been updated by des:
> >
> > URL: https://cgit.FreeBSD.org/src/commit/?id=f0a861efbafeb81428d5e8c23dac9da73fe14007
> >
> > commit f0a861efbafeb81428d5e8c23dac9da73fe14007
> > Author: Dag-Erling Smørgrav <des@FreeBSD.org>
> > AuthorDate: 2026-06-26 14:43:26 +0000
> > Commit: Dag-Erling Smørgrav <des@FreeBSD.org>
> > CommitDate: 2026-06-26 14:43:26 +0000
> >
> > local-unbound-setup: Support IPv6-only systems
> >
> > * In the server configuration, disable protocols not supported by the
> > kernel.
> >
> > * In resolv.conf, instead of only using 127.0.0.1, use either 127.0.0.1,
> > ::1, or both depending on which protocols the kernel supports.
> >
> > MFC after: 1 week
> > Reviewed by: jlduran
> > Differential Revision: https://reviews.freebsd.org/D57840
> > ---
> > usr.sbin/unbound/setup/local-unbound-setup.sh | 50 +++++++++++++++++++++------
> > 1 file changed, 40 insertions(+), 10 deletions(-)
> >
> > diff --git a/usr.sbin/unbound/setup/local-unbound-setup.sh b/usr.sbin/unbound/setup/local-unbound-setup.sh
> > index ec3aeb673ecc..6b217ec574cd 100755
> > --- a/usr.sbin/unbound/setup/local-unbound-setup.sh
> > +++ b/usr.sbin/unbound/setup/local-unbound-setup.sh
> > @@ -72,6 +72,19 @@ RE_forward_addr="((${RE_ipv4}|${RE_ipv6})(@${RE_port})?)"
> > RE_forward_name="(${RE_dnsname}(@${RE_port})?)"
> > RE_forward_tls="(${RE_forward_addr}(#${RE_dnsname})?)"
> >
> > +#
> > +# Check if a kernel feature is available
> > +#
> > +has_feature() {
> > + local name=$1 v
> > + eval "v=\$kern_features_${name}"
> > + if [ -z "$v" ] ; then
> > + v="$(sysctl -qn "kern.features.${name}")"
> > + eval "kern_features_${name}=$((v))"
> > + fi
> > + return $((!v))
> > +}
> > +
>
> The function above seems like it might be useful outside the context
> of local-unbound. I'm wondering if this would be a better fit for
> libexec/rc/rc.subr.
Ah, I partially misread the commit. Nevermind about the question
above. Sorry about the noise.
--
Shawn Webb
Cofounder / Security Engineer
HardenedBSD
Signal Username: shawn_webb.74
Tor-ified Signal: +1 (719) 756-1197 / activist_opsec.27
https://git.hardenedbsd.org/hardenedbsd/pubkeys/-/raw/master/Shawn_Webb/03A4CBEBB82EA5A67D9F3853FF2E67A277F8E1FA.pub.asc