From 6e6b56f40c74521b510efc5e9189c2a9e5bc5eb1 Mon Sep 17 00:00:00 2001 From: Micah Date: Thu, 23 Jun 2016 14:05:20 -0400 Subject: Make sure bind9 doesn't take over unbound (#8213). Change-Id: Icaab817870d005b7a854a3fb8c402705d0b2d77f --- puppet/modules/site_config/manifests/caching_resolver.pp | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/puppet/modules/site_config/manifests/caching_resolver.pp b/puppet/modules/site_config/manifests/caching_resolver.pp index 8bf465c1..59b135a3 100644 --- a/puppet/modules/site_config/manifests/caching_resolver.pp +++ b/puppet/modules/site_config/manifests/caching_resolver.pp @@ -2,10 +2,22 @@ class site_config::caching_resolver { tag 'leap_base' + # We need to make sure Package['bind9'] isn't installed because when it is, it + # keeps unbound from running. Some base debian installs will install bind9, + # and then start it, so unbound will never get properly started. So this will + # make sure bind9 is removed before. + package { 'bind9': + ensure => absent + } + file { [ '/etc/default/bind9', '/etc/bind/named.conf.options' ]: + ensure => absent + } + class { 'unbound': root_hints => false, anchor => false, ssl => false, + require => Package['bind9'], settings => { server => { verbosity => '1', -- cgit v1.2.3