Changeset View
Changeset View
Standalone View
Standalone View
systemd-resolved.in
- This file was copied from unbound.in.
| #!/bin/sh | #!/bin/sh | ||||
| # Copyright (c) 2009-2016 Roy Marples | # Copyright (c) 2025 Roy Marples | ||||
| # All rights reserved | # All rights reserved | ||||
| # unbound subscriber for resolvconf | # systemd-resolved subscriber for resolvconf | ||||
| # Redistribution and use in source and binary forms, with or without | # Redistribution and use in source and binary forms, with or without | ||||
| # modification, are permitted provided that the following conditions | # modification, are permitted provided that the following conditions | ||||
| # are met: | # are met: | ||||
| # * Redistributions of source code must retain the above copyright | # * Redistributions of source code must retain the above copyright | ||||
| # notice, this list of conditions and the following disclaimer. | # notice, this list of conditions and the following disclaimer. | ||||
| # * Redistributions in binary form must reproduce the above | # * Redistributions in binary form must reproduce the above | ||||
| # copyright notice, this list of conditions and the following | # copyright notice, this list of conditions and the following | ||||
| # disclaimer in the documentation and/or other materials provided | # disclaimer in the documentation and/or other materials provided | ||||
| # with the distribution. | # with the distribution. | ||||
| # | # | ||||
| # THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS | # THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS | ||||
| # "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT | # "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT | ||||
| # LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR | # LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR | ||||
| # A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT | # A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT | ||||
| # OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, | # OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, | ||||
| # SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT | # SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT | ||||
| # LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, | # LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, | ||||
| # DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY | # DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY | ||||
| # THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT | # THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT | ||||
| # (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE | # (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE | ||||
| # OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. | # OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. | ||||
| unbound_insecure= | |||||
| [ -f "@SYSCONFDIR@"/resolvconf.conf ] || exit 0 | [ -f "@SYSCONFDIR@"/resolvconf.conf ] || exit 0 | ||||
| . "@SYSCONFDIR@/resolvconf.conf" || exit 1 | . "@SYSCONFDIR@/resolvconf.conf" || exit 1 | ||||
| [ -z "$unbound_conf" ] && exit 0 | |||||
| [ -z "$RESOLVCONF" ] && eval "$(@SBINDIR@/resolvconf -v)" | case "${systemd_resolved:-NO}" in | ||||
| [Yy][Ee][Ss]|[Tt][Rr][Uu][Ee]|[Oo][Nn]|1) ;; | |||||
| *) exit 0;; | |||||
| esac | |||||
| [ -n "$RESOLVCONF" ] || eval "$(@SBINDIR@/resolvconf -v)" | |||||
| NL=" | NL=" | ||||
| " | " | ||||
| : ${unbound_pid:=/var/run/unbound.pid} | : ${systemd_resolved_conf:=/run/systemd/resolved.conf.d/60-resolvconf.conf} | ||||
| : ${unbound_service:=unbound} | : ${systemd_delegate_dir:=/run/systemd/dns-delegate.d} | ||||
| newconf="# Generated by resolvconf$NL" | |||||
| # Try to ensure that config dirs exist | |||||
| if command -v config_mkdirs >/dev/null 2>&1; then | |||||
| config_mkdirs "$systemd_resolved_conf" "$systemd_delegate_dir/x" | |||||
| else | |||||
| @SBINDIR@/resolvconf -D "$systemd_resolved_conf" "$systemd_delegate_dir/x" | |||||
| fi | |||||
| header="# Generated by resolvconf$NL" | |||||
| header="${header}$NL" | |||||
| header="${header}[Resolve]$NL" | |||||
| conf="$header" | |||||
| # We emit blank values to force them to reset on SIGHUP | |||||
| conf="${conf}DNS=$NAMESERVERS$NL" | |||||
| # Indicate these nameservers are for all domain lookups by using ~. | |||||
| conf="${conf}Domains=$SEARCH${NAMESERVERS:+ ~.}$NL" | |||||
| printf %s "$conf" >"$systemd_resolved_conf" | |||||
| # DNS Delegates requires https://github.com/systemd/systemd/pull/34368 | |||||
| rm -f "$systemd_delegate_dir/resolvconf-"*".dns-delegate" | |||||
| header="# Generated by resolvconf$NL" | |||||
| header="${header}$NL" | |||||
| header="${header}[Delegate]$NL" | |||||
| for d in $DOMAINS; do | for d in $DOMAINS; do | ||||
| dn="${d%%:*}" | dn="${d%%:*}" | ||||
| ns="${d#*:}" | ns="${d#*:}" | ||||
| case "$unbound_insecure" in | dconf="${header}Domains=" | ||||
| [Yy][Ee][Ss]|[Tt][Rr][Uu][Ee]|[Oo][Nn]|1) | search=false | ||||
| newconf="$newconf${NL}server:$NL" | for sd in $SEARCH; do | ||||
| newconf="$newconf domain-insecure: \"$dn\"$NL" | if [ "$sd" = "$dn" ]; then | ||||
| ;; | search=true | ||||
| esac | break | ||||
| newconf="$newconf${NL}forward-zone:$NL name: \"$dn\"$NL" | fi | ||||
| done | |||||
| if ! $search; then | |||||
| dconf="${dconf}~" | |||||
| fi | |||||
| dconf="${dconf}$dn$NL" | |||||
| dconf="${dconf}DNS=" | |||||
| while [ -n "$ns" ]; do | while [ -n "$ns" ]; do | ||||
| newconf="$newconf forward-addr: ${ns%%,*}$NL" | dconf="$dconf${ns%%,*} " | ||||
| [ "$ns" = "${ns#*,}" ] && break | [ "$ns" = "${ns#*,}" ] && break | ||||
| ns="${ns#*,}" | ns="${ns#*,}" | ||||
| done | done | ||||
| dconf="$dconf$NL" | |||||
| printf %s "$dconf" >"$systemd_delegate_dir/resolvconf-$dn.dns-delegate" | |||||
| done | done | ||||
| if [ -n "$NAMESERVERS" ]; then | pid=$(pidof systemd-resolved) | ||||
| newconf="$newconf${NL}forward-zone:$NL name: \".\"$NL" | if [ -n "$pid" ]; then | ||||
| for n in $NAMESERVERS; do | kill -HUP $pid | ||||
| newconf="$newconf forward-addr: $n$NL" | |||||
| done | |||||
| fi | |||||
| # Try to ensure that config dirs exist | |||||
| if type config_mkdirs >/dev/null 2>&1; then | |||||
| config_mkdirs "$unbound_conf" | |||||
| else | |||||
| @SBINDIR@/resolvconf -D "$unbound_conf" | |||||
| fi | |||||
| restart_unbound() | |||||
| { | |||||
| if [ -n "$unbound_restart" ]; then | |||||
| eval $unbound_restart | |||||
| elif [ -n "$RESTARTCMD" ]; then | |||||
| set -- ${unbound_service} | |||||
| eval "$RESTARTCMD" | |||||
| else | |||||
| @SBINDIR@/resolvconf -r ${unbound_service} | |||||
| fi | |||||
| } | |||||
| if [ ! -f "$unbound_conf" ] || \ | |||||
| [ "$(cat "$unbound_conf")" != "$(printf %s "$newconf")" ] | |||||
| then | |||||
| printf %s "$newconf" >"$unbound_conf" | |||||
| # If we can't sent a HUP then force a restart | |||||
| if [ -s "$unbound_pid" ]; then | |||||
| if ! kill -HUP $(cat "$unbound_pid") 2>/dev/null; then | |||||
| restart_unbound | |||||
| fi | |||||
| else | |||||
| restart_unbound | |||||
| fi | |||||
| fi | fi | ||||