1
0
mirror of https://github.com/tommytran732/Linux-Setup-Scripts synced 2024-12-22 23:02:25 -05:00

Work around Debian's very broken paclaging

Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
Tommy 2024-06-18 00:07:40 -07:00
parent 37a66b8b12
commit 6fa3abe492
Signed by: Tomster
GPG Key ID: 555C902A34EC968F

View File

@ -134,7 +134,11 @@ fi
# Setup unbound
sudo apt install -y unbound
sudo apt install -y unbound unbound-anchor
sudo mkdir -p /usr/share/dns
sudo chmod 755 /usr/share/dns
sudo unbound-anchor
sudo chmod 644 /usr/share/dns/root.key
echo 'server:
trust-anchor-signaling: yes
@ -171,6 +175,8 @@ forward-zone:
sudo chmod 644 /etc/unbound/unbound.conf.d/custom.conf
sudo sed -i 's#/var/lib/unbound#/usr/share/dns#g' /etc/unbound/unbound.conf.d/root-auto-trust-anchor-file.conf
mkdir -p /etc/systemd/system/unbound.service.d
echo $'[Service]
CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_SETGID CAP_SETUID CAP_SYS_CHROOT CAP_SYS_RESOURCE CAP_NET_RAW