From nobody Sat Jun 27 17:15:55 2026 X-Original-To: dev-commits-src-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4gnfMY3gwjz6jsMp for ; Sat, 27 Jun 2026 17:16:09 +0000 (UTC) (envelope-from shawn.webb@hardenedbsd.org) Received: from mail-oi1-x234.google.com (mail-oi1-x234.google.com [IPv6:2607:f8b0:4864:20::234]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "WR4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4gnfMX4vKHz3t1X for ; Sat, 27 Jun 2026 17:16:03 +0000 (UTC) (envelope-from shawn.webb@hardenedbsd.org) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=hardenedbsd.org header.s=google header.b="Rzi/WS5L"; dmarc=pass (policy=none) header.from=hardenedbsd.org; spf=pass (mx1.freebsd.org: domain of shawn.webb@hardenedbsd.org designates 2607:f8b0:4864:20::234 as permitted sender) smtp.mailfrom=shawn.webb@hardenedbsd.org Received: by mail-oi1-x234.google.com with SMTP id 5614622812f47-4876d5335b2so1280147b6e.1 for ; Sat, 27 Jun 2026 10:16:03 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hardenedbsd.org; s=google; t=1782580558; x=1783185358; darn=freebsd.org; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:from:to:cc:subject:date:message-id:reply-to; bh=8AxzeD7pcG6QXyj1jBl/NfSizosz0xY19WBFfFqQ95I=; b=Rzi/WS5LOT6ZysZmRgSQ/imxOsC2eWLG3/KKbU6SDun4gHUQP5pzOmkQ3jZSdMGiFf kGtIFjBLOKIJTPisafo54gHRFzR2u4ChJATSHxDCVXloRIzKOhrxS7JqaAwyTUzGAzWe ZAxORn1ATFO1ONfHYqT7H755gIASvh3RMs7gIAczkc2idp0d0wccssLSH6bj9xVIf/pU R+5x+uxiVaUCoA0+epSLeA+txycTr0xhOR4QaDvTXWeHngw+g5bfO+paAk3a/Sc7EF5f Qug9Aipdbjdpg/vQv5unztUgUqVBXYMGV4VNnMjbQ7gfUXbvAN3ywyrfNcQZcTKsGXpa jQ1A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1782580558; x=1783185358; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:x-gm-gg:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=8AxzeD7pcG6QXyj1jBl/NfSizosz0xY19WBFfFqQ95I=; b=pGfx5jo21/pyemgqHyN3Y7noIg7mzNQFufPXE1H5UZiImjPB6GH3cx7Dco7qnBlAFX Th5NZxhcXwYaL5EefI/6rLjPjstt8t7R0dvc+m13KTEVwV4YfKMlBeKaMR1fpPHC2CdV Q1BhwjliszyTNv7KeB4vTSiPiGP6mOy4/srl5nVFKeMlculdTFfj0Q72th5X936EV4QM MoY2UZVfS9fS+IM1rR2UlKSwd7EdjoAt+S9T6WcOnqDTbUs9LSD4moIaO2MdzDPb1zzO J9N6C2xr+SIGvL/h94sCo4NXl1FZAASQD43Hh17YH7cuEMAGISAgarnJ53sj5BI5tJ2b vLJg== X-Forwarded-Encrypted: i=1; AFNElJ+5mOg/KHRXTuad6fG+Kgevn5VM+W8EVETwyFwqYSfCRTY0OqKx8ucO2C5lFvdpaOXO1fD6TxNltCuLoS+rYQw3yR2A@freebsd.org X-Gm-Message-State: AOJu0YzH5rIw39K/NiprUXiB8mnMfnLQa7fUH5wJrMo1+g2oRQithgyx dWzqyY7geDbJYhLtU5vZPPsjUpmXKR2Sue8PiZ3SX4B4njpj7oXP8hlxA7ObVqFk6mA= X-Gm-Gg: AfdE7cl0Xj7qfQPPVmggcKX11nbwUHPt7cRKQ075aXkh7fWjyL3SYBNdo4aWPMV2Nw2 iOLowNVcDNgspEbvX9kO/mj63apWjqT2ffxgRVatSU858sH5AwlZOoh+abjOuOFDywMpqTxb99i /zA7F2STW5Cp+HBXHM0oQw8V9sbMgJoD+wcAoSg9eepXmmRsXkgiBi2FlfYnC0MkTBwBCTACyHY /vnhNBerr0J/pdBcKAxDTUuGCmXsrOLQBSy9/XCdEADy/UAE0NVGOvInZZ+D/qdsb7dst80oY6s lhUjHARLkhfODxy3DfyyqVCaKwOFgrt/WZ5Xul1iFzyfLYC5cjZ/VWUU1z/FESxvAbTaI3LSbjf 53ANGGi6pZbA4riYVQpx1c3GGKEuHl6i2xrowhqji26pVc99q4t7Mms5fIkYd03ekiUwIh65b+L k6IQJXcuYH X-Received: by 2002:a05:6808:170b:b0:493:b20:d7de with SMTP id 5614622812f47-4930b20dba8mr6299250b6e.15.1782580557747; Sat, 27 Jun 2026 10:15:57 -0700 (PDT) Received: from mutt-hbsd ([97.112.164.127]) by smtp.gmail.com with ESMTPSA id 5614622812f47-4935545dad9sm3493486b6e.16.2026.06.27.10.15.56 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 27 Jun 2026 10:15:56 -0700 (PDT) Date: Sat, 27 Jun 2026 17:15:55 +0000 From: Shawn Webb To: Dag-Erling =?utf-8?B?U23DuHJncmF2?= Cc: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org Subject: Re: git: f0a861efbafe - main - local-unbound-setup: Support IPv6-only systems Message-ID: <4hcpjimtjtfgsaloqpcibtjwxrn4kvimboed62ad7qbm2m3f7h@7iyktwsc3pij> X-Operating-System: FreeBSD mutt-hbsd 15.0-STABLE-HBSD FreeBSD 15.0-STABLE-HBSD HARDENEDBSD amd64 X-PGP-Key: https://git.hardenedbsd.org/hardenedbsd/pubkeys/-/blob/master/Shawn_Webb/03A4CBEBB82EA5A67D9F3853FF2E67A277F8E1FA.pub.asc References: <6a3e9019.1f234.5366f33f@gitrepo.freebsd.org> List-Id: Commit messages for all branches of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-all@freebsd.org Sender: owner-dev-commits-src-all@FreeBSD.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="krqill436aw6pepe" Content-Disposition: inline In-Reply-To: X-Spamd-Result: default: False [-5.60 / 15.00]; SIGNED_PGP(-2.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_SHORT(-1.00)[-1.000]; DMARC_POLICY_ALLOW(-0.50)[hardenedbsd.org,none]; MID_RHS_NOT_FQDN(0.50)[]; R_DKIM_ALLOW(-0.20)[hardenedbsd.org:s=google]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4864::/56:c]; PREVIOUSLY_DELIVERED(0.00)[dev-commits-src-all@freebsd.org]; MISSING_XM_UA(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:~]; TO_DN_SOME(0.00)[]; FROM_HAS_DN(0.00)[]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; RCVD_IN_DNSWL_NONE(0.00)[2607:f8b0:4864:20::234:from]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; RCVD_TLS_LAST(0.00)[]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCVD_COUNT_TWO(0.00)[2]; RCPT_COUNT_THREE(0.00)[4]; MLMMJ_DEST(0.00)[dev-commits-src-all@freebsd.org]; DKIM_TRACE(0.00)[hardenedbsd.org:+] X-Spamd-Bar: ----- X-Rspamd-Queue-Id: 4gnfMX4vKHz3t1X --krqill436aw6pepe Content-Type: text/plain; protected-headers=v1; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Subject: Re: git: f0a861efbafe - main - local-unbound-setup: Support IPv6-only systems MIME-Version: 1.0 On Fri, Jun 26, 2026 at 06:33:18PM +0000, Shawn Webb wrote: > On Fri, Jun 26, 2026 at 02:43:37PM +0000, Dag-Erling Sm=F8rgrav wrote: > > The branch main has been updated by des: > >=20 > > URL: https://cgit.FreeBSD.org/src/commit/?id=3Df0a861efbafeb81428d5e8c2= 3dac9da73fe14007 > >=20 > > commit f0a861efbafeb81428d5e8c23dac9da73fe14007 > > Author: Dag-Erling Sm=F8rgrav > > AuthorDate: 2026-06-26 14:43:26 +0000 > > Commit: Dag-Erling Sm=F8rgrav > > CommitDate: 2026-06-26 14:43:26 +0000 > >=20 > > local-unbound-setup: Support IPv6-only systems > > =20 > > * In the server configuration, disable protocols not supported by t= he > > kernel. > > =20 > > * In resolv.conf, instead of only using 127.0.0.1, use either 127.0= =2E0.1, > > ::1, or both depending on which protocols the kernel supports. > > =20 > > MFC after: 1 week > > Reviewed by: jlduran > > Differential Revision: https://reviews.freebsd.org/D57840 > > --- > > usr.sbin/unbound/setup/local-unbound-setup.sh | 50 +++++++++++++++++++= ++------ > > 1 file changed, 40 insertions(+), 10 deletions(-) > >=20 > > diff --git a/usr.sbin/unbound/setup/local-unbound-setup.sh b/usr.sbin/u= nbound/setup/local-unbound-setup.sh > > index ec3aeb673ecc..6b217ec574cd 100755 > > --- a/usr.sbin/unbound/setup/local-unbound-setup.sh > > +++ b/usr.sbin/unbound/setup/local-unbound-setup.sh > > @@ -72,6 +72,19 @@ RE_forward_addr=3D"((${RE_ipv4}|${RE_ipv6})(@${RE_po= rt})?)" > > RE_forward_name=3D"(${RE_dnsname}(@${RE_port})?)" > > RE_forward_tls=3D"(${RE_forward_addr}(#${RE_dnsname})?)" > > =20 > > +# > > +# Check if a kernel feature is available > > +# > > +has_feature() { > > + local name=3D$1 v > > + eval "v=3D\$kern_features_${name}" > > + if [ -z "$v" ] ; then > > + v=3D"$(sysctl -qn "kern.features.${name}")" > > + eval "kern_features_${name}=3D$((v))" > > + fi > > + return $((!v)) > > +} > > + >=20 > The function above seems like it might be useful outside the context > of local-unbound. I'm wondering if this would be a better fit for > libexec/rc/rc.subr. Ah, I partially misread the commit. Nevermind about the question above. Sorry about the noise. --=20 Shawn Webb Cofounder / Security Engineer HardenedBSD Signal Username: shawn_webb.74 Tor-ified Signal: +1 (719) 756-1197 / activist_opsec.27 https://git.hardenedbsd.org/hardenedbsd/pubkeys/-/raw/master/Shawn_Webb/03A= 4CBEBB82EA5A67D9F3853FF2E67A277F8E1FA.pub.asc --krqill436aw6pepe Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEA6TL67gupaZ9nzhT/y5nonf44foFAmpABUQACgkQ/y5nonf4 4fpZQA//d9s8fyNDw6lu44za8RB/KrBo/ONiR6mmcaYMA4KYJFZYjrB+GCBLq02v h6EjY421y/CeeTO56xPZO0I9Ygzbe77JUFOViE8yut7fhf6aB1AmGRBizLwILlK4 wPC/ByFUJzYVdI5kKFta0zxpLdIKhpsorhVEA6ySXsZ86LxxEimRaQLcvuzu6BJc F+QsqjBgAI1FJs8qjce2oiCrKolD+NIzsll9yVKNRzEXj3goH7GUVh1TRsYoLY2E M/CkNvbYajL3PIt9gMbyaW52mcIRnsYMk2SfDqpBW5Gukj5Jm06wKPnxpZYhpEjd ZnPGsfTJ05m3F3jYhj8KsYyl5kzj5I7fq+aosCv3xnNtX/8N2H0NBbPctVS0cMjB M1i/fKOdSl4KnjvSAl6jZTWUxkkeMtT4CGzM2W2acbuk8Ec6nP1JQHbW7bMND+ob shvri6mjYIkn/YWqAyguq13iedOYFySZGxM9BkoGc7OceJehUZvhq8nBL6v/q8Q5 HZ417YiY+pmXh3dXwDdMXK/Nfg5tyxf95g/Nyw0FYUsDxjxedLyKlPZmLBktH8bt AtvkAdJcsmhsSePyxOiLRKKtf8R/jB94oMqnUSHJzlfHIFF4cz95ptJxlWzAU+CX wYT31ahVfLiUSFxBfHG8OSJpd4Jos/sO7GXv1vSCIJsW0sR52ug= =UoXF -----END PGP SIGNATURE----- --krqill436aw6pepe--