Hi Thomas,

On Tue, Aug 27, 2013 at 08:40:21PM +0200, Thomas Hood wrote:
> The openvpn package includes a script /etc/openvpn/update-resolv-conf.

Yes it does. It was submitted by a user, and patched by others. I have
no great knowledge of it (I used it, it worked).

> Observation #1. The script adds nameserver addresses extracted from
> openvpn dhcp-option strings to the variables IF_DNS_NAMESERVERS and
> IF_DNS_SEARCH which are not initialized earlier in the script. These
> same variables are used by ifup to pass information to its hook
> scripts in /etc/network/if-*.d/.

Probably that's where the developer got the idea.

> Question #1. Does the script expect IF_DNS_NAMESERVERS and IF_DNS_SEARCH to
> contain information when it starts? Information coming from ifup?

No idea :-)

> Observation #2. The script calls resolvconf as follows.
> 
>     echo -n "$R" | /sbin/resolvconf -a "${dev}.inet"
> 
> Note that the resolvconf record name suffix ".inet" identifies ifup as
> the sender of the information to resolvconf: this is one of ifup's
> address family names; if /etc/network/interfaces contains "iface DEV
> inet ..." then ifup will create a resolvconf record named DEV.inet.
> 
> Question #2. Is it intentional that update-resolv-conf overwrites
> ifup's resolvconf record for the same device?

The script will be called on tun/tap interfaces that aren't usually,
specially when used by openvpn, controled by ifup. But I see the
possible issues.

> Depending on the answers, this will either become a wish that the
> answers be included in documentation or comments, or a bug report.

I'm happy to take patches to fix the possible problems. I'm no master of
resolvconf, so I didn't figure the issues this script may have. If you
have a fix in mind, it will be welcome, otherwise I'll have a look at it
as time permits.

Thanks,

Alberto

-- 
Alberto Gonzalez Iniesta    | Formación, consultoría y soporte técnico
agi@(inittab.org|debian.org)| en GNU/Linux y software libre
Encrypted mail preferred    | http://inittab.com

Key fingerprint = 5347 CBD8 3E30 A9EB 4D7D  4BF2 009B 3375 6B9A AA55


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to