Accepting request 1226894 from server:dns

OBS-URL: https://build.opensuse.org/request/show/1226894
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/unbound?expand=0&rev=72

unbound.changes

@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Wed Nov 27 11:45:12 UTC 2024 - Johannes Kastl <opensuse_buildservice@ojkastl.de>
+
+- add workaround for bug
+  https://github.com/NLnetLabs/unbound/issues/509
+  Starting up with 127.0.0.1 in the /etc/resolv.conf leads to long
+  delays if the anchor update is being run as ExecStartPre in the
+  unbound service
+
 -------------------------------------------------------------------
 Fri Oct 18 11:02:26 UTC 2024 - Jorik Cronenberg <jorik.cronenberg@suse.com>
 

unbound.service

@@ -13,7 +13,8 @@ User=unbound
 Group=unbound
 EnvironmentFile=-/etc/sysconfig/unbound
 #ExecStartPre=/sbin/runuser --shell /bin/sh -c "/usr/sbin/unbound-anchor -a /var/lib/unbound/root.key -c /etc/unbound/icannbundle.pem" unbound
-ExecStartPre=/usr/sbin/unbound-anchor -a /var/lib/unbound/root.key -c /etc/unbound/icannbundle.pem
+# https://github.com/NLnetLabs/unbound/issues/509
+ExecStartPre=/bin/bash -c 'if [ ! "$DISABLE_UNBOUND_ANCHOR" == "yes" ]; then /usr/sbin/unbound-anchor -a /var/lib/unbound/root.key -c /etc/unbound/icannbundle.pem -R; else echo "Updates of root keys with unbound-anchor is disabled"; fi'
 ExecStartPre=/usr/sbin/unbound-checkconf
 ExecStart=!/usr/sbin/unbound -d $UNBOUND_OPTIONS
 

unbound.sysconfig

@@ -1,3 +1,6 @@
 # for extra debug, add "-v -v" or change verbosity: in unbound.conf
 
 UNBOUND_OPTIONS=""
+
+# to disable the anchor update, set this to 'yes'
+DISABLE_UNBOUND_ANCHOR="no"