On 2020-07-03 3:37 a.m., Christian Ehrhardt  wrote:
> Also subscribing Simon who submitted the bug report

I had forgotten about it, thanks for the reminder! I turned the patch
into a merge request [1] which tested fine on Debian/Sid. I'm waiting a
few more days for feedback but will merge it as-is if nobody shows up.
It's been ~3 years already ;)

Until that bug is fixed in Debian then Ubuntu, I think a good workaround
is to instead leverage the namespace features of systemd to achieve
something similar to chroot'ing unbound. Here's trimmed down example of
this:

  $ cat /etc/systemd/system/unbound.service.d/override.conf
  [Service]
  ReadWritePaths=/var/lib/unbound /run
  PrivateDevices=true
  PrivateTmp=yes
  ProtectSystem=strict
  ProtectHome=true

HTH,
Simon

1: https://salsa.debian.org/dns-team/unbound/-/merge_requests/10

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1885907

Title:
  Unbound crash with chroot

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/unbound/+bug/1885907/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to