Bug description
The named.conf shipped by bind on the Red Hat family includes /etc/crypto-policies/back-ends/bind.config inside its options block, which applies the system-wide crypto policy to named. The role's template drops that include, so named ignores update-crypto-policies and the crypto_policy role.
Steps to reproduce
- Deploy the role.
- Run
grep crypto-policies /etc/named.conf: no match, while the packaged /etc/named.conf contains the include.
Expected behavior
The include is kept, as in the packaged file.
Environment
LFOps main, Rocky Linux 9.8 and 10.2.
Additional context
The template also omits secroots-file, recursing-file and geoip-directory from the packaged file.
Bug description
The
named.confshipped by bind on the Red Hat family includes/etc/crypto-policies/back-ends/bind.configinside itsoptionsblock, which applies the system-wide crypto policy to named. The role's template drops that include, so named ignoresupdate-crypto-policiesand thecrypto_policyrole.Steps to reproduce
grep crypto-policies /etc/named.conf: no match, while the packaged/etc/named.confcontains the include.Expected behavior
The include is kept, as in the packaged file.
Environment
LFOps main, Rocky Linux 9.8 and 10.2.
Additional context
The template also omits
secroots-file,recursing-fileandgeoip-directoryfrom the packaged file.