DNS KSK rollover, local_unbound and 11.2-STABLE

[Eugene Grosbein]

13.10.2018 21:16, Dag-Erling Smørgrav wrote:

> Eugene Grosbein <eugen at grosbein.net> writes:
>> Dag-Erling Smørgrav <des at des.no> writes:
>>> The local_unbound service was never intended to be started without a
>>> network connection.
>> Then this is regression since ISC BIND removal because it does not
>> have this problem.
> 
> Unbound is not a replacement for BIND.  It serves a different purpose.

I mean, for LAN as DNS recursive service.

>> We should deal with the problem so clean install of FreeBSD relying on
>> base system's local_inbound service work out of the box for PPPoE
>> users too.
> 
> Please send patches.

For services which require networking to be operational before starting
we have NETWORKING dummy dependency which has REQUIRE: netwait

NETWORKING itself requires netif and resolv, so it is safe to make this change:

Index: sbin/init/rc.d/local_unbound
===================================================================
--- sbin/init/rc.d/local_unbound        (revision 338465)
+++ sbin/init/rc.d/local_unbound        (working copy)
@@ -4,8 +4,8 @@
 #

 # PROVIDE: local_unbound
-# REQUIRE: FILESYSTEMS netif resolv
-# BEFORE: NETWORKING
+# REQUIRE: NETWORKING
+# BEFORE: DAEMON
 # KEYWORD: shutdown

 . /etc/rc.subr