The setting dnssec-enable in named.conf.options was deprecated in BIND 9.15 and removed in BIND 9.18. Ubuntu started shipping BIND 9.18 with version 22.04 (Jammy), which produces a config error and fails to start if the setting is present.
This PR allows for omitting dnssec-enable from named.conf.options by setting dns::server::options::dnssec_enable to undef, and also makes undef the default value for Ubuntu 22.04 and above.
The setting
dnssec-enableinnamed.conf.optionswas deprecated in BIND 9.15 and removed in BIND 9.18. Ubuntu started shipping BIND 9.18 with version 22.04 (Jammy), which produces a config error and fails to start if the setting is present.This PR allows for omitting
dnssec-enablefromnamed.conf.optionsby settingdns::server::options::dnssec_enabletoundef, and also makesundefthe default value for Ubuntu 22.04 and above.