Tony Breeds 62b6ae4164 [base/unbound] Install dns-root-data package
Setting up a new Noble base server errors with:
  unbound[9702]: [9702:0] error: unable to open /var/lib/unbound/root.key for reading: No such file or directory
  unbound[9702]: [9702:0] error: error reading auto-trust-anchor-file: /var/lib/unbound/root.key

Rather that install and setup the root.key as described in[1] we install
the dns-root-data package which is recomended by the unbound package anyway

[1] https://nlnetlabs.nl/documentation/unbound/howto-anchor/

Change-Id: I6e6adffa8910931efa1f52d37848cce54f3b00c8
2024-08-01 10:02:18 +10:00

36 lines
772 B
YAML

- name: Include OS-specific tasks
include_tasks: "{{ item }}"
vars:
params:
files: "{{ distro_lookup_path }}"
loop: "{{ query('first_found', params, errors='ignore') }}"
- name: Install unbound
package:
state: present
name: unbound
- name: Install dns-root-data on Noble
package:
state: present
name: dns-root-data
when: ansible_distribution == "Ubuntu" and ansible_distribution_major_version|int >= 24
- name: Write dhclient config files
include_tasks: dhclient.yaml
loop:
- /etc/dhcp/dhclient.conf
- /etc/dhcp/dhclient-eth0.conf
- name: Write resolv.conf
copy:
src: resolv.conf
dest: /etc/resolv.conf
mode: 0444
- name: Enable unbound
service:
name: unbound
enabled: true
state: started