From bb25f0b71635e0061b9b65a51d1462438b6a862e Mon Sep 17 00:00:00 2001
From: Paul Belanger <pabelanger@redhat.com>
Date: Thu, 21 Sep 2017 15:00:10 -0400
Subject: [PATCH] Update logfile for unbound on centos/fedora

Because of missing selinux rules, unbound does not properly write
logging to /var/log/unbound.log. We can move the file into
/var/lib/unbound/unbound.log and selinux should be happy.

Change-Id: I4f3265c16320613d4ba74a02df1361c5d9cf2fb1
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
---
 .../elements/nodepool-base/finalise.d/89-unbound  | 15 ++++++++++-----
 1 file changed, 10 insertions(+), 5 deletions(-)

diff --git a/nodepool/elements/nodepool-base/finalise.d/89-unbound b/nodepool/elements/nodepool-base/finalise.d/89-unbound
index 71cbe27cc8..c22c3c6ec0 100755
--- a/nodepool/elements/nodepool-base/finalise.d/89-unbound
+++ b/nodepool/elements/nodepool-base/finalise.d/89-unbound
@@ -38,12 +38,18 @@ mv /tmp/forwarding.conf /etc/unbound/
 chown root:root /etc/unbound/forwarding.conf
 chmod a+r /etc/unbound/forwarding.conf
 
-dd of=/tmp/unbound-logging.conf <<EOF
+if [[ "$DISTRO_NAME" =~ (centos|fedora) ]] ; then
+    LOG_FILE="/var/lib/unbound/unbound.log"
+else
+    LOG_FILE="/var/log/unbound.log"
+fi
+
+UNBOUND_LOGGING_CONF="\
 server:
-  logfile: "/var/log/unbound.log"
+  logfile: \"$LOG_FILE\"
   # Log only errors
-  verbosity: 0
-EOF
+  verbosity: 0"
+echo "$UNBOUND_LOGGING_CONF" > /tmp/unbound-logging.conf
 
 if [[ "$DISTRO_NAME" =~ (centos|fedora|opensuse) ]] ; then
     UNBOUND_CONFD=/etc/unbound/conf.d
@@ -55,7 +61,6 @@ mv /tmp/unbound-logging.conf $UNBOUND_CONFD
 chown root:root $UNBOUND_CONFD/unbound-logging.conf
 chmod a+r $UNBOUND_CONFD/unbound-logging.conf
 
-
 touch /var/log/unbound.log
 chown unbound /var/log/unbound.log
 chmod 0644 /var/log/unbound.log