Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[20.03-backport] knot: keyFiles, no dynamicUser #80172

Merged
merged 3 commits into from
Feb 17, 2020
Merged

[20.03-backport] knot: keyFiles, no dynamicUser #80172

merged 3 commits into from
Feb 17, 2020

Commits on Feb 15, 2020

  1. knot: put runtime paths outside the nix store 

    Otherwise knot tries to write to non-writable directories.
This for example breaks dnssec signing.
While it's possible to overwrite these path in the configuration,
having a sane defaults is nicer.

(cherry picked from commit 6adc09e)
    @Mic92
    Mic92 committed Feb 15, 2020
    Configuration menu
    Copy the full SHA
    e989a19 View commit details
    Browse the repository at this point in the history

  2. knot: drop dynamic user 

    This makes it hard to include secret files.
Also using tools like keymgr becomes harder.

(cherry picked from commit 88029bc)
    @Mic92
    Mic92 committed Feb 15, 2020
    Configuration menu
    Copy the full SHA
    0af3b75 View commit details
    Browse the repository at this point in the history

  3. knot: add keyFiles option 

    This useful to include tsig keys using nixops without adding those
world-readable to the nix store.

(cherry picked from commit e2ef8b4)
    @Mic92
    Mic92 committed Feb 15, 2020
    Configuration menu
    Copy the full SHA
    8325e2b View commit details
    Browse the repository at this point in the history