| Commit message (Collapse) | Author | Age | Files | Lines |
|---|
| |
|
|
| |
During the previous increase I didn't realize the comment added now.
|
| |
|
|
| |
Fix cross-references, heading levels, etc.
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Replaces all mentions of `knot-resolver.readthedocs.io` with
`www.knot-resolver.cz/documentation/latest`.
Some of the links used to point to the `latest` documentation, which
meant the latest `master` commit, but the current system does not really
allow us to do this, so instead we link to the latest stable (which is
what `www.knot-resolver.cz/documentation/latest` basically is).
We also cannot reliably get the documentation for a particular version
in the code, so it all just points to `latest` as well. This may change
in the future, although I do not yet have a good approach in mind
(particularly, I don't want to bother our admins with nginx
configuration updates for each newly released version).
|
| |
|
|
| |
It's promised in docs already. The extra metadata can be useful.
|
| |
|
|
|
|
| |
This will allow it to work even when socket is elsewhere.
The service depended on fixed config file location already,
through ExecStart.
|
| | |
|
| | |
|
| |
|
|
|
|
| |
- separate meson option, disabled by default
- deb,rpm: don't install these legacy units
- deb,rpm: use the new knot-resolver.service on all the places
|
| |
|
|
|
|
|
|
|
| |
I can't see why not. Also avoid unnecessary /usr/bin/env
kresd doesn't work well without `ninja install` anyway.
bindir: maybe we should install the python binaries into sbin instead.
We're also being slightly inconsistent - allowing to override some
directories by meson but not respecting it for the python stuff.
|
| |
|
|
| |
reload
|
| |\ |
|
| | | |
|
| |/ |
|
| |
|
|
| |
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
|
| |
|
|
|
|
| |
The point is to allow other services wait for DNS availability.
Of course, kresd may not be the DNS provider for this machine,
but it seems reasonable to still do this by default.
|
| | |
|
| |
|
|
|
| |
Obviously this is is racy and cannot be relied upon.
Caller still has to handle connection errors.
|
| |
|
|
|
|
| |
Target name must be unique in meson, but the installed files share
the same name. To get around this, use a temporary target name and
rename it when installing the file to its proper location.
|
| |
|
|
|
| |
Since 5.1.3, we no longer drop capabilities as root, thus the
tmpfiles no longer need to be owned by root.
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
| |
Change the owner of kresd files to root:knot-resolver. This improves
behaviour for Fedora, where kresd can run under root (e.g. in Docker).
Otherwise, running kresd as root on Fedora would fail because of dropped
capabilities and attempting to access /var/lib/knot-resolver, which was
owned by knot-resolver.
This change makes it possible for both root (user) and knot-resolver
(group) to have the same permissions on these directories despite
dropped capabilities.
|
| |
|
|
|
| |
These files did not have GNU GPL v3 boilderplate in them so
I've added machine readable tag with appropriate license.
|
| |
|
|
|
|
|
| |
In 5.0.0, the cache directory has been moved and the previous path is
incorrect.
Fixes #543
|
| |
|
|
|
|
| |
By some magic (unknown so far) the service was ending up in the slice
anyway, but it seems much better to put it there explicitly.
Closely related to !925.
|
| | |
|
| | |
|
| |
|
|
|
|
|
|
| |
The preconfig is used to set distro-specific values to avoid messing
with user config, in partciular:
- binding to control sockets under systemd
- setting default cache location
|
| | |
|
| | |
|
| | |
|
| |
|
|
|
|
| |
- mention process management
- describe privileges and capabilities which have to be configured
- move garbage collector to this section, as is it enabled by default
|
| | |
|
| |
|
|
|
| |
It logically belongs here and it will make high-level structure less
crowded.
|
| |
|
|
|
|
|
| |
512k (or more) seems to be hard limit valued used by multiple distros
(fedora, arch, ubuntu, debian).
Closes #476
|
| | |
|
| | |
|
| |
|
|
|
|
|
| |
The Group= settings was ommited and default group of User= was
implicitly used. Now the group set at build time is respected.
GC didn't respect the user/group set at build time at all.
|
| |
|
|
|
| |
Motivation: core-dump might be very useful, and in this case there
are even very useful pointers on the C stack.
|
| |
|
|
|
|
|
| |
The missing Wants= and After= directives for network-online.target
made it possible for kresd to start before network interfaces were
properly initialized and configured with IP addresses, leading to a
failure to bind to addresses.
|
| |
|
|
|
| |
The watchdog module now can be loaded without systemd, has customisable
callbacks, and can do real DNS queries and check their results.
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
