Date: Sat, 27 Jun 2026 17:15:55 +0000 From: Shawn Webb <shawn.webb@hardenedbsd.org> To: Dag-Erling =?utf-8?B?U23DuHJncmF2?= <des@FreeBSD.org> Cc: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org Subject: Re: git: f0a861efbafe - main - local-unbound-setup: Support IPv6-only systems Message-ID: <4hcpjimtjtfgsaloqpcibtjwxrn4kvimboed62ad7qbm2m3f7h@7iyktwsc3pij> In-Reply-To: <lw6bx5ijns2rqkr7i3lzoblejqtq7szojcjvbwsuirio4vzqde@pycq45idu6jj> References: <6a3e9019.1f234.5366f33f@gitrepo.freebsd.org> <lw6bx5ijns2rqkr7i3lzoblejqtq7szojcjvbwsuirio4vzqde@pycq45idu6jj>
index | next in thread | previous in thread | raw e-mail
[-- Attachment #1 --] On Fri, Jun 26, 2026 at 06:33:18PM +0000, Shawn Webb wrote: > On Fri, Jun 26, 2026 at 02:43:37PM +0000, Dag-Erling Smørgrav wrote: > > The branch main has been updated by des: > > > > URL: https://cgit.FreeBSD.org/src/commit/?id=f0a861efbafeb81428d5e8c23dac9da73fe14007 > > > > commit f0a861efbafeb81428d5e8c23dac9da73fe14007 > > Author: Dag-Erling Smørgrav <des@FreeBSD.org> > > AuthorDate: 2026-06-26 14:43:26 +0000 > > Commit: Dag-Erling Smørgrav <des@FreeBSD.org> > > CommitDate: 2026-06-26 14:43:26 +0000 > > > > local-unbound-setup: Support IPv6-only systems > > > > * In the server configuration, disable protocols not supported by the > > kernel. > > > > * In resolv.conf, instead of only using 127.0.0.1, use either 127.0.0.1, > > ::1, or both depending on which protocols the kernel supports. > > > > MFC after: 1 week > > Reviewed by: jlduran > > Differential Revision: https://reviews.freebsd.org/D57840 > > --- > > usr.sbin/unbound/setup/local-unbound-setup.sh | 50 +++++++++++++++++++++------ > > 1 file changed, 40 insertions(+), 10 deletions(-) > > > > diff --git a/usr.sbin/unbound/setup/local-unbound-setup.sh b/usr.sbin/unbound/setup/local-unbound-setup.sh > > index ec3aeb673ecc..6b217ec574cd 100755 > > --- a/usr.sbin/unbound/setup/local-unbound-setup.sh > > +++ b/usr.sbin/unbound/setup/local-unbound-setup.sh > > @@ -72,6 +72,19 @@ RE_forward_addr="((${RE_ipv4}|${RE_ipv6})(@${RE_port})?)" > > RE_forward_name="(${RE_dnsname}(@${RE_port})?)" > > RE_forward_tls="(${RE_forward_addr}(#${RE_dnsname})?)" > > > > +# > > +# Check if a kernel feature is available > > +# > > +has_feature() { > > + local name=$1 v > > + eval "v=\$kern_features_${name}" > > + if [ -z "$v" ] ; then > > + v="$(sysctl -qn "kern.features.${name}")" > > + eval "kern_features_${name}=$((v))" > > + fi > > + return $((!v)) > > +} > > + > > The function above seems like it might be useful outside the context > of local-unbound. I'm wondering if this would be a better fit for > libexec/rc/rc.subr. Ah, I partially misread the commit. Nevermind about the question above. Sorry about the noise. -- Shawn Webb Cofounder / Security Engineer HardenedBSD Signal Username: shawn_webb.74 Tor-ified Signal: +1 (719) 756-1197 / activist_opsec.27 https://git.hardenedbsd.org/hardenedbsd/pubkeys/-/raw/master/Shawn_Webb/03A4CBEBB82EA5A67D9F3853FF2E67A277F8E1FA.pub.asc [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEA6TL67gupaZ9nzhT/y5nonf44foFAmpABUQACgkQ/y5nonf4 4fpZQA//d9s8fyNDw6lu44za8RB/KrBo/ONiR6mmcaYMA4KYJFZYjrB+GCBLq02v h6EjY421y/CeeTO56xPZO0I9Ygzbe77JUFOViE8yut7fhf6aB1AmGRBizLwILlK4 wPC/ByFUJzYVdI5kKFta0zxpLdIKhpsorhVEA6ySXsZ86LxxEimRaQLcvuzu6BJc F+QsqjBgAI1FJs8qjce2oiCrKolD+NIzsll9yVKNRzEXj3goH7GUVh1TRsYoLY2E M/CkNvbYajL3PIt9gMbyaW52mcIRnsYMk2SfDqpBW5Gukj5Jm06wKPnxpZYhpEjd ZnPGsfTJ05m3F3jYhj8KsYyl5kzj5I7fq+aosCv3xnNtX/8N2H0NBbPctVS0cMjB M1i/fKOdSl4KnjvSAl6jZTWUxkkeMtT4CGzM2W2acbuk8Ec6nP1JQHbW7bMND+ob shvri6mjYIkn/YWqAyguq13iedOYFySZGxM9BkoGc7OceJehUZvhq8nBL6v/q8Q5 HZ417YiY+pmXh3dXwDdMXK/Nfg5tyxf95g/Nyw0FYUsDxjxedLyKlPZmLBktH8bt AtvkAdJcsmhsSePyxOiLRKKtf8R/jB94oMqnUSHJzlfHIFF4cz95ptJxlWzAU+CX wYT31ahVfLiUSFxBfHG8OSJpd4Jos/sO7GXv1vSCIJsW0sR52ug= =UoXF -----END PGP SIGNATURE-----home | help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4hcpjimtjtfgsaloqpcibtjwxrn4kvimboed62ad7qbm2m3f7h>