resolv.conf: Add "trust-ad" option

Since we are running unbound locally which always runs DNSSEC
validation, we can simply trust it and pass the ad flag on to
applications which make use of it.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
This commit is contained in:
Michael Tremer
2020-02-05 11:45:47 +00:00
committed by Arne Fitzenreiter
parent ff9788d2d8
commit 07d9e1914a

View File

@@ -19,6 +19,7 @@ write_resolv_conf() {
(
[ -n "${DOMAINNAME}" ] && echo "search ${DOMAINNAME}"
echo "nameserver 127.0.0.1"
echo "options trust-ad"
) > /etc/resolv.conf
}