services: knot-resolver: Manage a root TA at /var/cache/knot-resolver.

* gnu/services/dns.scm (%kresd.conf): Add /var/cache/knot-resolver/root.keys
as the root TA.

diff --git a/gnu/services/dns.scm b/gnu/services/dns.scm
index 43b6261..a07946d 100644 (file)
--- a/gnu/services/dns.scm
+++ b/gnu/services/dns.scm
@@ -658,6 +658,7 @@
 
 (define %kresd.conf
   (plain-file "kresd.conf" "-- -*- mode: lua -*-
+trust_anchors.add_file('/var/cache/knot-resolver/root.keys')
 net = { '127.0.0.1', '::1' }
 user('knot-resolver', 'knot-resolver')
 modules = { 'hints > iterate', 'stats', 'predict' }