From 244db6bbc88fae7ba3426c057cfecb8706015939 Mon Sep 17 00:00:00 2001
From: 宋文武 <iyzsong@member.fsf.org>
Date: Wed, 22 Jan 2020 20:13:13 +0800
Subject: services: knot-resolver: Manage a root TA at
 /var/cache/knot-resolver.

* gnu/services/dns.scm (%kresd.conf): Add /var/cache/knot-resolver/root.keys
as the root TA.
---
 gnu/services/dns.scm | 1 +
 1 file changed, 1 insertion(+)

(limited to 'gnu/services')

diff --git a/gnu/services/dns.scm b/gnu/services/dns.scm
index 43b6261c07..a07946d085 100644
--- a/gnu/services/dns.scm
+++ b/gnu/services/dns.scm
@@ -658,6 +658,7 @@ (define-record-type* <knot-resolver-configuration>
 
 (define %kresd.conf
   (plain-file "kresd.conf" "-- -*- mode: lua -*-
+trust_anchors.add_file('/var/cache/knot-resolver/root.keys')
 net = { '127.0.0.1', '::1' }
 user('knot-resolver', 'knot-resolver')
 modules = { 'hints > iterate', 'stats', 'predict' }
-- 
cgit v1.2.3