GNU bug report logs - #68622
[PATCH 2/2] services: knot-resolver: Use default DNSSEC trust anchors.

Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.

Package: guix-patches; Reported by: Leo Nikkilä <hello@HIDDEN>; Keywords: patch; Done: Dale Mellor <guix-devel-0brg6a@HIDDEN>; Maintainer for guix-patches is guix-patches@HIDDEN.

Message received at 68622 <at> debbugs.gnu.org:


Received: (at 68622) by debbugs.gnu.org; 23 Apr 2024 17:46:27 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Tue Apr 23 13:46:26 2024
Received: from localhost ([127.0.0.1]:53482 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1rzKDp-0006AF-1S
	for submit <at> debbugs.gnu.org; Tue, 23 Apr 2024 13:46:26 -0400
Received: from [195.15.247.228] (port=48096 helo=rdmp.org)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <guix-devel-0brg6a@HIDDEN>) id 1rzIek-0000Fq-Dg
 for 68622 <at> debbugs.gnu.org; Tue, 23 Apr 2024 12:06:07 -0400
Received: from [127.0.0.1] (helo=[IPv6:::1])
 by rdmp.org with esmtp (Exim 4.96.1)
 (envelope-from <guix-devel-0brg6a@HIDDEN>) id 1rzIeN-000476-34
 for 68622 <at> debbugs.gnu.org; Tue, 23 Apr 2024 16:05:44 +0000
Message-ID: <506486b730337f1e1b612a7823b793a43c10a184.camel@HIDDEN>
Subject: Moved to 68621
From: Dale Mellor <"	guix-devel-0brg6a"@rdmp.org>
To: 68622 <at> debbugs.gnu.org
Date: Tue, 23 Apr 2024 17:05:43 +0100
Organization: DM Bespoke Computer Solutions Ltd
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
User-Agent: Evolution 3.48.4 
MIME-Version: 1.0
X-Spam-Score: 1.3 (+)
X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 Content preview:  This patch belongs to issue 68621, closing here. 
 Content analysis details:   (1.3 points, 10.0 required)
 pts rule name              description
 ---- ---------------------- --------------------------------------------------
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
 0.0 FROM_ADDR_WS           Malformed From address
X-Debbugs-Envelope-To: 68622
X-Mailman-Approved-At: Tue, 23 Apr 2024 13:46:16 -0400
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: 0.3 (/)

This patch belongs to issue 68621, closing here.





Information forwarded to guix-patches@HIDDEN:
bug#68622; Package guix-patches. Full text available.
bug closed, send any further explanations to 68622 <at> debbugs.gnu.org and Leo Nikkilä <hello@HIDDEN> Request was from Dale Mellor <guix-devel-0brg6a@HIDDEN> to control <at> debbugs.gnu.org. Full text available.

Message received at 68622 <at> debbugs.gnu.org:


Received: (at 68622) by debbugs.gnu.org; 23 Apr 2024 16:23:14 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Tue Apr 23 12:23:13 2024
Received: from localhost ([127.0.0.1]:53114 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1rzIvI-0003Mj-K8
	for submit <at> debbugs.gnu.org; Tue, 23 Apr 2024 12:23:13 -0400
Received: from [195.15.247.228] (port=22951 helo=rdmp.org)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <guix-devel-0brg6a@HIDDEN>) id 1rzIvG-0003L3-Bf
 for 68622 <at> debbugs.gnu.org; Tue, 23 Apr 2024 12:23:11 -0400
Received: from [127.0.0.1] (helo=[IPv6:::1])
 by rdmp.org with esmtp (Exim 4.96.1)
 (envelope-from <guix-devel-0brg6a@HIDDEN>) id 1rzIut-00047c-2p
 for 68622 <at> debbugs.gnu.org; Tue, 23 Apr 2024 16:22:48 +0000
Message-ID: <d4ddb8a0b850f42df0b8eb84eb768fe3d4452522.camel@HIDDEN>
Subject: Moved into 68621
From: Dale Mellor <guix-devel-0brg6a@HIDDEN>
To: 68622 <at> debbugs.gnu.org
Date: Tue, 23 Apr 2024 17:22:47 +0100
Organization: DM Bespoke Computer Solutions Ltd
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
User-Agent: Evolution 3.48.4 
MIME-Version: 1.0
X-Spam-Score: 1.3 (+)
X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 Content preview:  This patch belongs to issue 68621, closing this one. 
 Content analysis details:   (1.3 points, 10.0 required)
 pts rule name              description
 ---- ---------------------- --------------------------------------------------
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
X-Debbugs-Envelope-To: 68622
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: 0.3 (/)

This patch belongs to issue 68621, closing this one.





Information forwarded to guix-patches@HIDDEN:
bug#68622; Package guix-patches. Full text available.

Message received at submit <at> debbugs.gnu.org:


Received: (at submit) by debbugs.gnu.org; 20 Jan 2024 21:26:41 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Sat Jan 20 16:26:41 2024
Received: from localhost ([127.0.0.1]:35984 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1rRIrQ-0008RO-P6
	for submit <at> debbugs.gnu.org; Sat, 20 Jan 2024 16:26:41 -0500
Received: from lists.gnu.org ([2001:470:142::17]:57972)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <hello@HIDDEN>) id 1rRIrO-0008Qo-Tn
 for submit <at> debbugs.gnu.org; Sat, 20 Jan 2024 16:26:39 -0500
Received: from eggs.gnu.org ([2001:470:142:3::10])
 by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <hello@HIDDEN>) id 1rRIrA-0000B0-Sn
 for guix-patches@HIDDEN; Sat, 20 Jan 2024 16:26:26 -0500
Received: from out1-smtp.messagingengine.com ([66.111.4.25])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <hello@HIDDEN>) id 1rRIr7-0000BD-Ps
 for guix-patches@HIDDEN; Sat, 20 Jan 2024 16:26:23 -0500
Received: from compute3.internal (compute3.nyi.internal [10.202.2.43])
 by mailout.nyi.internal (Postfix) with ESMTP id 50C335C00B1;
 Sat, 20 Jan 2024 16:26:21 -0500 (EST)
Received: from mailfrontend1 ([10.202.2.162])
 by compute3.internal (MEProxy); Sat, 20 Jan 2024 16:26:21 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lnikki.la; h=cc
 :cc:content-transfer-encoding:content-type:date:date:from:from
 :in-reply-to:in-reply-to:message-id:mime-version:references
 :reply-to:subject:subject:to:to; s=fm1; t=1705785981; x=
 1705872381; bh=wb6atIrtr/vM2sOcGPQYGg7yB2t17e7SIUsHSIU8z94=; b=P
 WRGuNWV0OUv6J8tBNIC/E8qvjDjeBeIouNNaOBmz8fSXBA7i2iqSaXG6T/D8Pnmy
 R/toQKJ0+u9wA/Dzb6DN2SrZBz5TDul2vv3c9k9q6NoqmNknQn32MSyFZDt5hLJh
 04+VyG0eK3p5wKRtTuAIJ0fiS3e47k34SQYWpQowYxNqupT1tV1fJzkmWjVuYvlH
 JKGER6UjwmI+s8Bf+EHLkEE03uggTtpEo44U7npdOL8GSwjThlscsB0tEjpwcQlc
 KUGjtcHwcupgXdcw2fmIKlWK5jI/amX2qb4U6kT3YQCJZR/CKZGnNqraDyY/s92r
 Wn5gcV+MDZBZZSwVFxF7Q==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
 messagingengine.com; h=cc:cc:content-transfer-encoding
 :content-type:date:date:feedback-id:feedback-id:from:from
 :in-reply-to:in-reply-to:message-id:mime-version:references
 :reply-to:subject:subject:to:to:x-me-proxy:x-me-proxy
 :x-me-sender:x-me-sender:x-sasl-enc; s=fm3; t=1705785981; x=
 1705872381; bh=wb6atIrtr/vM2sOcGPQYGg7yB2t17e7SIUsHSIU8z94=; b=T
 2GkNHaK+YnwpEfpAjDN27aj/1ks/4PDZVhbZ9ADAc5lP1ScUx4w+8waEa1hJM9Tb
 5/JsJC61o5yZGM7EMBt8FoBKLiZcjkZL9MTDvGI+HgZm0eITVpcAgRtfZOFwpwaY
 Hmxa6H0prsCc1qhdd1BjGCzDue0tUWPBJ2gfcbJ1bQCMpBaAVODUdpUXSrSTCrFL
 Trg4X3jrHLHRD05PeQyBs3uRG3LKZyyB8/9eD5BeXL9l54EmxvXntbmZ6vYs2c1q
 pn3BLibx2YIsOzcb5q2DcHSXowyZBjLPn+F17RzpQnPe4766tq2lo58L4x2yMN2m
 7JvSvV75nIZrhkpjRytsA==
X-ME-Sender: <xms:fTqsZQ5KE0GKg3Prr9YKwoZ1KHj8APfeJDdvsWx2EKTTwKh1UiuZfQ>
 <xme:fTqsZR44nbqT7rmPBhwD84yNaV9cKhTiuhUbXBC3w3TBxTnu1RnnxsL0ao8p59qiE
 yOpklbUBn4LLWxLvUY>
X-ME-Received: <xmr:fTqsZfcwZGx02qxL1gOf3VS3IDRktyzR153F5qU5uG7gsNGEt8u8PJkML7V3GOEAfvf4QdTeuvLgVl0ZYEqJ5ZUCbEodhBNdINc>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvkedrvdekvddgudehtdcutefuodetggdotefrod
 ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh
 necuuegrihhlohhuthemuceftddtnecunecujfgurhephffvvefufffkofgjfhgggfestd
 ekredtredtjeenucfhrhhomhepnfgvohcupfhikhhkihhlmocuoehhvghllhhosehlnhhi
 khhkihdrlhgrqeenucggtffrrghtthgvrhhnpedvgefgvedtieefhfetieffudffudehte
 dtueelveefleeggedvveehledutdeltdenucevlhhushhtvghrufhiiigvpedtnecurfgr
 rhgrmhepmhgrihhlfhhrohhmpehhvghllhhosehlnhhikhhkihdrlhgr
X-ME-Proxy: <xmx:fTqsZVIvPsVuv8Zx9G_T-gekn9PyxiSY3AjsTJfdfGSZiuW5gDEijg>
 <xmx:fTqsZUKW2dGzYtLPN9LGHr2u9XNx2bXNNRholKzCnp_kvBex1-tcAw>
 <xmx:fTqsZWziYhiJQe1nQzZuIRR0f39OTxUMecrif-FS1ipby2_D2p9I9A>
 <xmx:fTqsZegf4Yq0twarjdpWpi1eP7PgDra5jwgFSPbjR8yc11Rg3voZgQ>
Feedback-ID: i41f146a7:Fastmail
Received: by mail.messagingengine.com (Postfix) with ESMTPA; Sat,
 20 Jan 2024 16:26:20 -0500 (EST)
From: =?utf-8?Q?Leo=20Nikkil=C3=A4?= <hello@HIDDEN>
To: guix-patches@HIDDEN
Subject: [PATCH 2/2] services: knot-resolver: Use default DNSSEC trust anchors.
Date: Sat, 20 Jan 2024 23:23:44 +0200
Message-ID: <20240120212542.17473-3-hello@HIDDEN>
X-Mailer: git-send-email 2.41.0
In-Reply-To: <20240120212542.17473-1-hello@HIDDEN>
References: <20240120212542.17473-1-hello@HIDDEN>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Received-SPF: pass client-ip=66.111.4.25; envelope-from=hello@HIDDEN;
 helo=out1-smtp.messagingengine.com
X-Spam_score_int: -27
X-Spam_score: -2.8
X-Spam_bar: --
X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,
 RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001,
 SPF_HELO_PASS=-0.001, SPF_PASS=-0.001,
 T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: 1.0 (+)
X-Debbugs-Envelope-To: submit
Cc: =?UTF-8?q?Leo=20Nikkil=C3=A4?= <hello@HIDDEN>
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.0 (/)

* gnu/services/dns.scm (%kresd.conf): Use default anchors.
(knot-resolver-activation): Install default anchors when missing.
---
 gnu/services/dns.scm | 17 +++++++++++++----
 1 file changed, 13 insertions(+), 4 deletions(-)

diff --git a/gnu/services/dns.scm b/gnu/services/dns.scm
index 6608046909..f83c5b6594 100644
--- a/gnu/services/dns.scm
+++ b/gnu/services/dns.scm
@@ -655,7 +655,6 @@ (define-record-type* <knot-resolver-configuration>
 
 (define %kresd.conf
   (plain-file "kresd.conf" "-- -*- mode: lua -*-
-trust_anchors.add_file('/var/cache/knot-resolver/root.keys')
 net = { '127.0.0.1', '::1' }
 user('knot-resolver', 'knot-resolver')
 modules = { 'hints > iterate', 'stats', 'predict' }
@@ -676,10 +675,20 @@ (define %knot-resolver-accounts
 (define (knot-resolver-activation config)
   #~(begin
       (use-modules (guix build utils))
-      (let ((rundir "/var/cache/knot-resolver")
-            (owner (getpwnam "knot-resolver")))
+      (let* ((rundir "/var/cache/knot-resolver")
+             (keyfile (string-append rundir "/root.keys"))
+             (owner (getpwnam "knot-resolver")))
         (mkdir-p rundir)
-        (chown rundir (passwd:uid owner) (passwd:gid owner)))))
+        (chown rundir (passwd:uid owner) (passwd:gid owner))
+
+        ;; Install initial trust anchors when missing.
+        (unless (file-exists? keyfile)
+          (copy-file #$(file-append (knot-resolver-configuration-package
+                                     config)
+                                    "/etc/knot-resolver/root.keys")
+                     keyfile)
+          (chown keyfile (passwd:uid owner) (passwd:gid owner))
+          (chmod keyfile #o755)))))
 
 (define knot-resolver-shepherd-services
   (match-lambda
-- 
2.41.0





Acknowledgement sent to Leo Nikkilä <hello@HIDDEN>:
New bug report received and forwarded. Copy sent to guix-patches@HIDDEN. Full text available.
Report forwarded to guix-patches@HIDDEN:
bug#68622; Package guix-patches. Full text available.
Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.
Last modified: Tue, 23 Apr 2024 18:00:12 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.