Update openSUSE Unbound trust anchor

This commit is contained in:
Stanislas Lange
2026-08-04 12:18:57 +02:00
parent efa3318843
commit 0000dda615
+9
View File
@@ -2276,6 +2276,12 @@ function installUnbound() {
fi fi
fi fi
# openSUSE ships the DNSSEC root trust anchor updater separately. Ensure the
# anchor can follow root key rollovers before starting the resolver.
if [[ $OS == "opensuse" ]] && ! command -v unbound-anchor >/dev/null; then
run_cmd_fatal "Installing Unbound trust anchor updater" zypper install -y unbound-anchor
fi
# Configure Unbound for OpenVPN (runs whether freshly installed or pre-existing) # Configure Unbound for OpenVPN (runs whether freshly installed or pre-existing)
# Create conf.d directory (works on all distros) # Create conf.d directory (works on all distros)
run_cmd "Creating Unbound config directory" mkdir -p /etc/unbound/unbound.conf.d run_cmd "Creating Unbound config directory" mkdir -p /etc/unbound/unbound.conf.d
@@ -2343,6 +2349,9 @@ function installUnbound() {
fi fi
} >/etc/unbound/unbound.conf.d/openvpn.conf } >/etc/unbound/unbound.conf.d/openvpn.conf
if [[ $OS == "opensuse" ]]; then
run_cmd_fatal "Updating Unbound root trust anchor" systemctl start unbound-anchor.service
fi
run_cmd "Enabling Unbound service" systemctl enable unbound run_cmd "Enabling Unbound service" systemctl enable unbound
run_cmd "Starting Unbound service" systemctl restart unbound run_cmd "Starting Unbound service" systemctl restart unbound