packages/net/unbound/files/unbound.init, branch master

unbound: bring back the service to the startup menu

2025-06-08T09:35:21Z

* trivial fix for #25963 to workaround the current "10 line parsing limit" Signed-off-by: Dirk Brenken

unbound: add file parameter to service instance

2024-03-17T01:11:51Z

that way, procd does not needlessly restart unbound on triggers when everything remains the same - changes in non-default included configuration files will not be registered, however Signed-off-by: Jan Klos

unbound: clean up interface interpretation in UCI

2020-11-05T00:25:08Z

DNS flag day 2020, software should reflect the minimum EDNS 1232 bytes. Added iface_wan and iface_lan to control internal DNS assignemnts and to control what is local service ACL. Interface wild cards are not explicitly set so that they can be customized in extended conf. Signed-off-by: Eric Luehrsen

unbound: improve startup and dhcp script robustness

2020-07-12T18:56:46Z

- prevent rapid overlap in DHCP script updates - check and allow localhost forwards with specific applications - add option for rate limiting inbound queries - change UCI list to table format with Unbound conf references Signed-off-by: Eric Luehrsen

unbound: improve a few UCI settings

2019-06-19T04:50:28Z

- treat RFC6762 'local.' as nxdomain because avahi and other services will disable if SOA or NS records appear in central DNS. - allow two threads to be enabled with the 'heavy traffic' variant of Unbound packages. Signed-off-by: Eric Luehrsen

unbound: replace obsolete test expressions

2019-05-28T01:52:47Z

Expressions '-o', '-a', and '\( \)' within test or '[ ]' are obsolete. POSIX allows few arguments to test, so long expressions are not portable. '[ p -a q ]' can be replaced with '[ p ] && [ q ]' instead. Signed-off-by: Eric Luehrsen

unbound: log openssl-1.0.2 lacks TLS host verification

2018-08-10T06:11:13Z

ssl_set1_host() is not available without openssl-1.1.0. Unbound can not do host cert verification. DNS over TLS connects, but hosts are unverified. A patch for log err is added with a noitce in README.md. (see: https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=658) Also, squash some minor robustness and TLS usability fixes. Signed-off-by: Eric Luehrsen

unbound: fix boot time and default run directory

2018-08-03T07:27:03Z

Unbound struggles with boot ifup, so procd triggers changed to push outside of this noise. Unbound has run in /var/lib/unbound/, so chroot (jail) protects /etc/, and it can save flash wear. Compiled defaults reflect this now, so Unbound tools are easier run on the command line. Signed-off-by: Eric Luehrsen

unbound: add UCI for forward stub and auth zone clauses

2018-07-30T03:24:09Z

With growing interest, DNS over TLS can be setup in Unbounds foward-zone: clause. A broader UCI solution is added to support forward-, stub-, and auth- zone clauses in a new 'zone' section. This implentation required reworking scripts, because they did not scale. 'forward_domain' and 'prefetch_root' options are removed, and superceded by 'zone' section. Signed-off-by: Eric Luehrsen

unbound: limit outside script source to init funciton scope

2018-06-27T02:41:00Z

Signed-off-by: Eric Luehrsen