fips/fips-dns.service at be0708ac9b27c15036e35f294768d23a9f456088 - fips - Gitea on NOSTR

laantungir/fips

mirror of https://github.com/jmcorgan/fips.git synced 2026-07-22 07:48:26 +00:00

Files

Johnathan Corgan fe205e74de Multi-backend DNS configuration for .fips domain (#58 )

Replace the resolvectl-only fips-dns.service with a detection script
that configures whichever DNS resolver is available:

1. systemd dns-delegate (systemd >= 258, declarative drop-in)
2. systemd-resolved via resolvectl (most systemd distros)
3. dnsmasq (standalone)
4. NetworkManager with dnsmasq plugin
5. Warning with manual instructions if none found

Service reloads are non-fatal — config is written and the backend
is recorded even if the reload fails, preventing state file cleanup
issues under set -e.

Teardown reads the recorded backend from /run/fips/dns-backend and
reverses the configuration, or cleans up all possible backends if
the state file is missing.

Includes a Docker-based test harness (testing/dns-resolver/test.sh)
covering all five backends across Debian 12, Debian 13, Fedora,
and bare systems.

Fixes #52.

2026-04-11 18:45:17 +01:00

14 lines

261 B

Desktop File

Raw Blame History

 [Unit]
 Description=Configure DNS routing for .fips domain
 After=fips.service
 Requires=fips.service
 [Service]
 Type=oneshot
 ExecStart=/usr/lib/fips/fips-dns-setup
 ExecStop=/usr/lib/fips/fips-dns-teardown
 RemainAfterExit=yes
 [Install]
 WantedBy=multi-user.target