denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

resolve: Don't install individual servers via resolvconf

Browse Source 
The resolvconf implementation provided by systemd via resolvectl strips
everything after the interface name, so each additional server that's
installed replaces the previous one.  And even for other resolvconf
implementations installing them individually doesn't seem necessary as
we track and refcount them anyway.

Closes strongswan/strongswan#1353
This commit is contained in:
Tobias Brunner
2022-12-19 16:14:25 +01:00
parent bd6014a97b
commit 17fd304e60
2 changed files with 50 additions and 56 deletions
Download Patch File Download Diff File Expand all files Collapse all files
conf/plugins/resolve.opt
+6 -7
View File
@@ -1,14 +1,13 @@
charon.plugins.resolve.file = /etc/resolv.conf
File where to add DNS server entries if not using resolvconf(8).
charon.plugins.resolve.resolvconf.iface_prefix = lo.ipsec
Prefix used for interface names sent to resolvconf(8).
charon.plugins.resolve.resolvconf.iface = lo.ipsec
Interface name/protocol sent to resolvconf(8).
Prefix used for interface names sent to **resolvconf**(8). The nameserver
address is appended to this prefix to make it unique. The result has to be
a valid interface name according to the rules defined by resolvconf. Also,
it should have a high priority according to the order defined in
**interface-order**(5).
The interface name and protocol sent to **resolvconf**(8). This has to be a
valid interface name according to the rules defined by resolvconf. Also, it
should have a high priority according to the order defined in
**interface-order**(5) if relevant on the system.
charon.plugins.resolve.resolvconf.path = /sbin/resolvconf
Path/command for resolvconf(8).