-
-
Notifications
You must be signed in to change notification settings - Fork 64
Add support for DNS Service record configuration #236
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: master
Are you sure you want to change the base?
Conversation
|
|
||
| ### Use DNS Service records for dynamic NTP configuration | ||
|
|
||
| You can configure chrony to use DNS Service records for dynamic NTP server discovery. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
TIL. Didn't know chrony supports this.
| $safe_name = regsubst($srv_record, '[^a-zA-Z0-9_-]', '_', 'G') | ||
| # Use actual srv_record for filenames | ||
| $sources_file = "${sourcedir}/${srv_record}.sources" | ||
| $script_file = "${sourcedir}/${srv_record}.sh" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I wonder if this will be executable on systems with SELinux enforcing (EL variants).
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
what can we do about that?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I suppose an acceptance test would be the way, but that might be a lot of work. I guess someone who actually uses this feature on SELinux could figure it out.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
could probably set seltype on the file, and have an acceptance test that sets this up using the .invalid TLD, then run the script. The lookup will fail, but the script should succeed
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Not sure if the acceptance test is worth it. Maybe seltype would be enough?
21eafdc to
e45b1ef
Compare
cd84716 to
a6b0ad4
Compare
kenyon
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Just some removal of redundant comments where the code is self-explanatory.
a6b0ad4 to
7977c54
Compare
Pull Request (PR) description
Add support for reconfiguration via DNS SRV records.
This Pull Request (PR) fixes the following issues
Fixes #131