diff options
| author | W. Kosior <koszko@koszko.org> | 2024-09-04 20:50:17 +0200 |
|---|---|---|
| committer | W. Kosior <koszko@koszko.org> | 2025-02-06 16:38:41 +0100 |
| commit | 734fb3a45682fd6f2667dbc3d8841a4005584e2a (patch) | |
| tree | 03c81b2e0a46b4fed93408dfc5ae4462b17d86b1 /guix.scm | |
| parent | a5df69fe1e8a63441e8e28af718b474d776b8b6f (diff) | |
| download | guix-734fb3a45682fd6f2667dbc3d8841a4005584e2a.tar.gz guix-734fb3a45682fd6f2667dbc3d8841a4005584e2a.zip | |
services: Allow specifying user and group for knot resolver.
Kresd used to start as root and create cache files with root ownership before
dropping privileges. This made unprivileged kres-cache-gc (in a separate
service) fail when trying to read them. The new default is to start both as
`knot-resolver', with configuration fields that allow overriding this default.
* gnu/services/dns.scm (<knot-resolver-configuration>)[user]: New field.
(<knot-resolver-configuration>)[group]: New field.
(knot-resolver-shepherd-services): Pass the user&group from config to forkexec
constructors.
Change-Id: Id06a8eca140fdca14995a03e910f521d5f4636e5
Diffstat (limited to 'guix.scm')
0 files changed, 0 insertions, 0 deletions