net/chrony: dns/dnsmasq: change rcfile ordering

Make sure that these services start in proper order, and sooner
such that chrony can synchronize time before other services need it.

Note that there is a circular dependency or bootstrapping problem
here in that the system time needs to be halfway correct if you
require your time servers to be looked up through DNS with DNSSEC
enabled because crypto usually needs correct clocks for expiration
checks on signatures to work so the name service needs a correct time,
and looking up the time server needs a working name service.

So be sure you can bootstrap with a skewed time.

Reported by:	Lexi Winter
PR:		282566

I am not MFHing this, it's too intrusive.
This commit is contained in:
Matthias Andree 2024-12-08 16:15:46 +01:00
parent 842aa9df3f
commit f7c8a6233b
4 changed files with 5 additions and 4 deletions

View file

@ -1,7 +1,7 @@
PORTNAME= dnsmasq PORTNAME= dnsmasq
DISTVERSION= 2.90 DISTVERSION= 2.90
# Leave the PORTREVISION in even if 0 to avoid accidental PORTEPOCH bumps: # Leave the PORTREVISION in even if 0 to avoid accidental PORTEPOCH bumps:
PORTREVISION= 3 PORTREVISION= 4
PORTEPOCH= 1 PORTEPOCH= 1
CATEGORIES= dns CATEGORIES= dns
MASTER_SITES= https://www.thekelleys.org.uk/dnsmasq/ \ MASTER_SITES= https://www.thekelleys.org.uk/dnsmasq/ \

View file

@ -1,8 +1,8 @@
#!/bin/sh #!/bin/sh
# PROVIDE: dnsmasq # PROVIDE: dnsmasq
# REQUIRE: SERVERS ldconfig # REQUIRE: NETWORKING ldconfig ntpdate
# BEFORE: DAEMON named # BEFORE: DAEMON chrony named
# KEYWORD: shutdown # KEYWORD: shutdown
# #
# Start before named so as not to break named_wait if named is # Start before named so as not to break named_wait if named is

View file

@ -1,5 +1,6 @@
PORTNAME= chrony PORTNAME= chrony
DISTVERSION= 4.6.1 DISTVERSION= 4.6.1
PORTREVISION= 1
CATEGORIES= net CATEGORIES= net
MASTER_SITES= https://chrony-project.org/releases/ \ MASTER_SITES= https://chrony-project.org/releases/ \
LOCAL/mandree LOCAL/mandree

View file

@ -1,7 +1,7 @@
#!/bin/sh #!/bin/sh
# PROVIDE: chronyd # PROVIDE: chronyd
# REQUIRE: DAEMON # REQUIRE: SERVERS
# KEYWORD: nojail shutdown # KEYWORD: nojail shutdown
# #
# Add the following lines to /etc/rc.conf.local or /etc/rc.conf # Add the following lines to /etc/rc.conf.local or /etc/rc.conf