diff options
author | Micah Anderson <micah@leap.se> | 2013-12-17 15:43:58 -0500 |
---|---|---|
committer | Micah Anderson <micah@leap.se> | 2013-12-18 13:10:31 -0500 |
commit | 88af29f3aba662aab4ca5ac3122d43139fb97004 (patch) | |
tree | 6b6edfdaba96f308b8bd68cdbb29349b45efc35c /puppet/modules/site_config/lib | |
parent | 5708e04af02ec7332be84dfb63200008c35b9af4 (diff) |
Fix for openvpn/unbound not starting at boot (#4506)
This change sets the sysctl net.ipv4.ip_nonlocal_bind to allow
applications to bind to an address, even when the link is down. This is
necessary because applications like unbound and openvpn fail to start on
boot in some situations because interfaces are not fully up (due to a
combination of non-deterministic booting because of the likely potential
setting of allow-hotplug in the interfaces file and the LSB boot
dependency on $network not being sufficient.
The only down-side to setting this is a daemon could bind to an
incorrect ip and we wouldn't get an error, but this would be a
configuration mistake, rather than a fatal condition.
Change-Id: I5c03083e8c20bb25afad85a1230f4555808d341c
Diffstat (limited to 'puppet/modules/site_config/lib')
0 files changed, 0 insertions, 0 deletions