summary refs log tree commit diff
path: root/nixos/modules/services/networking/unbound.nix
diff options
context:
space:
mode:
authorPeng Mei Yu <i@pengmeiyu.com>2020-12-08 09:18:13 +0800
committerPeng Mei Yu <i@pengmeiyu.com>2020-12-08 14:31:15 +0800
commit3cd1a6706ceaeca09b3cc15322f9c75d25883a46 (patch)
treea031869b5d3dc98c49dd959e5fd4b57c7b3377f0 /nixos/modules/services/networking/unbound.nix
parent652b3fad35fa0bec9bde7106ca40893eebd73d73 (diff)
downloadnixpkgs-3cd1a6706ceaeca09b3cc15322f9c75d25883a46.tar
nixpkgs-3cd1a6706ceaeca09b3cc15322f9c75d25883a46.tar.gz
nixpkgs-3cd1a6706ceaeca09b3cc15322f9c75d25883a46.tar.bz2
nixpkgs-3cd1a6706ceaeca09b3cc15322f9c75d25883a46.tar.lz
nixpkgs-3cd1a6706ceaeca09b3cc15322f9c75d25883a46.tar.xz
nixpkgs-3cd1a6706ceaeca09b3cc15322f9c75d25883a46.tar.zst
nixpkgs-3cd1a6706ceaeca09b3cc15322f9c75d25883a46.zip
unbound: Add AF_NETLINK to allowed address families.
Unbound throws the following error:

--8<---------------cut here---------------start------------->8---
error: failed to list interfaces: getifaddrs: Address family not supported by protocol
fatal error: could not open ports
--8<---------------cut here---------------end--------------->8---

The solution is pulled from upstream:
https://github.com/NLnetLabs/unbound/pull/351
Diffstat (limited to 'nixos/modules/services/networking/unbound.nix')
-rw-r--r--nixos/modules/services/networking/unbound.nix2
1 files changed, 1 insertions, 1 deletions
diff --git a/nixos/modules/services/networking/unbound.nix b/nixos/modules/services/networking/unbound.nix
index 9a46fa3075f..622c3d8ea43 100644
--- a/nixos/modules/services/networking/unbound.nix
+++ b/nixos/modules/services/networking/unbound.nix
@@ -195,7 +195,7 @@ in
         RuntimeDirectory = "unbound";
         ConfigurationDirectory = "unbound";
         StateDirectory = "unbound";
-        RestrictAddressFamilies = [ "AF_INET" "AF_INET6" "AF_UNIX" ];
+        RestrictAddressFamilies = [ "AF_INET" "AF_INET6" "AF_NETLINK" "AF_UNIX" ];
         RestrictRealtime = true;
         SystemCallArchitectures = "native";
         SystemCallFilter = [