opendev/system-config
Code Issues Proposed changes

bind9 : drop obsolete option for later versions

Browse Source 
dnssec-enable argument was made obsolete in 9.16 (focal) and removed
in 9.18.0 (jammy), so this fails on a Jammy host.  Template it in only
for earlier distros

Change-Id: I14983cc8eb5fd293052affefff31dac0a8dcb8f7
This commit is contained in:
Ian Wienand 2023-03-09 16:33:42 +11:00
parent a2569707fe
commit f91fd5c9a8
No known key found for this signature in database
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
playbooks/roles/master-nameserver/templates/named.conf.j2
View File

@ -10,7 +10,9 @@ options {
recursion yes; recursion yes;
allow-query { any; }; allow-query { any; };
{% if ansible_distribution_version is version('18.04', '<=') %}
dnssec-enable yes; dnssec-enable yes;
{% endif %}
dnssec-validation yes; dnssec-validation yes;
empty-zones-enable yes; empty-zones-enable yes;