From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mx.spodhuis.org (smtp.spodhuis.org [IPv6:2a02:898:31:0:48:4558:736d:7470]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by huchra.bufferbloat.net (Postfix) with ESMTPS id EF5E321F150 for ; Mon, 24 Mar 2014 15:16:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=spodhuis.org; s=d201312; h=In-Reply-To:Content-Type:MIME-Version:References:Message-ID:Subject:Cc:To:From:Date; bh=R8f325FDF3e57qlWWeejrxqfcc1HDALdQqvigZ0Fvl4=; b=e8/dOiXai992mum76CpxBbrLB+Vjf589WMPbRR2+czLj4A/6T9ndMOe/3Lgtbo4EqYxW7iNe4O+RAOi4pDvfaY/LNeBExfXfEObKo0Y9R71XmjXdPRjoBBB6Pdp4JyJAFOeQm3QyHRmCf1tTgr4eIReh7VZgUzeeQI+pJR6Y1/bvTvl1ndxfEWpiicUcCoBnVpSMeS5LbRFAI6wN; Received: from authenticated user by smtp.spodhuis.org with esmtpsa (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) id 1WSDAF-000KvQ-UO; Mon, 24 Mar 2014 22:16:16 +0000 Date: Mon, 24 Mar 2014 18:16:14 -0400 From: Phil Pennock To: Toke =?utf-8?Q?H=C3=B8iland-J=C3=B8rgensen?= Message-ID: <20140324221614.GB79741@redoubt.spodhuis.org> Mail-Followup-To: Toke =?utf-8?Q?H=C3=B8iland-J=C3=B8rgensen?= , "cerowrt-devel@lists.bufferbloat.net" References: <20140324191203.GA78098@redoubt.spodhuis.org> <878urzia18.fsf@alrua-x1.karlstad.toke.dk> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="7JfCtLOvnd9MIVvH" Content-Disposition: inline In-Reply-To: <878urzia18.fsf@alrua-x1.karlstad.toke.dk> OpenPGP: url=https://www.security.spodhuis.org/PGP/keys/0x3903637F.asc Cc: "cerowrt-devel@lists.bufferbloat.net" Subject: Re: [Cerowrt-devel] DNSSEC & NTP Bootstrapping X-BeenThere: cerowrt-devel@lists.bufferbloat.net X-Mailman-Version: 2.1.13 Precedence: list List-Id: Development issues regarding the cerowrt test router project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 24 Mar 2014 22:16:18 -0000 --7JfCtLOvnd9MIVvH Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On 2014-03-24 at 22:03 +0100, Toke H=C3=B8iland-J=C3=B8rgensen wrote: > A functionality similar to this is already implemented in openwrt and > runs as the first thing on boot. It finds the newest file in /etc and > sets the system time to that: Is dnsmasq maintaining the root trust anchors in /etc or in /var/lib somewhere? (sorry, am using unbound in highly hacked setup) > I do believe it would be feasible to include your script without the > preseed part pretty much as-is? It adds a dependency on dig, but I guess > that is not unreasonable (certainly not for cerowrt, but maybe for > openwrt default). The ntpdate dependency can probably be gotten away > with by substituting an appropriate ntpd -q command... I slapped my name on it as a copyright update, simply because I was touching it and wanted blame for mistakes to come to me instead of normal upstream, since I was posting to a(nother) mailing-list and sometimes that spreads further than I expect. I'm happy for this to be used/modified/distributed under whatever the CeroWRT/OpenWRT default license is. So: go for it. -Phil --7JfCtLOvnd9MIVvH Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iQEcBAEBCAAGBQJTMK6mAAoJEKBsj+IM0duFYFMH/RWRUjbLVJP65r0zp3N5NwUd qJ46w0bUqTH7EvlhSIHdZBVY5rD30uoKUx7NMJxqG42ZFbJ3NRipnL5KchVue/oD H6qQ/omgA4kea7qFqkLGjYaHsCvHwrXREwJ57Y2zkAv6FAiImsJM7z7kkDGD+QNz DWlh37vc+iS7UrqfRDEhN70PCAIfExwOep7T0Tw/xc9BtjUSOeizB8TscTnVQf4d MX1sOH0h9ifLl2TxY7R9cGp6eManVYb1eBRLpbvowQZu/eKu9HkskzW0j4bbfxYL 76xYuMweVuJcS3fN7nSkIqVarMYbcFoIntJfm+gX0kujdc7UWxRzHgGPPOBZLqA= =maQx -----END PGP SIGNATURE----- --7JfCtLOvnd9MIVvH--