MatthewVance / stubby-docker

Run Stubby without losing the performance benefits of having a local caching DNS resolver.
MIT License
90 stars 28 forks source link

DNSSEC keys #32

Open KoffeinKaio opened 2 years ago

KoffeinKaio commented 2 years ago

Hi there,

Im working on getting dnssec work in my homelab.

Your version of stubby has no access to create .getdns in /opt/stubby or /var/cache/stubby, therefore cant download the dnssec root keys.

workaround by setting appdata_dir: "/tmp"

works, but is just a workaround.

MatthewVance commented 2 years ago

Thanks for the report. Would it help if the /opt/stubby/.getdns directory was created as part of the build process in the following section? https://github.com/MatthewVance/stubby-docker/blob/1046cd96c4c7feca8c115528e7266714b508b5fc/stubby/Dockerfile#L99

Or would setting appdata_dir in the default config and point to a directory that Stubby has rights to be better?