diff --git a/features.in/net-dns/rootfs/image-scripts.d/60-net-dns b/features.in/net-dns/rootfs/image-scripts.d/60-net-dns index 4630c6ba..01dfa901 100755 --- a/features.in/net-dns/rootfs/image-scripts.d/60-net-dns +++ b/features.in/net-dns/rootfs/image-scripts.d/60-net-dns @@ -1,3 +1,17 @@ #!/bin/sh # set default nameserver, if any -for i in $GLOBAL_NAMESERVERS; do echo "nameserver $i"; done >> /etc/resolv.conf + +if [ $GLOBAL_NAMESERVERS = "example" ]; then + echo "# yandex" + echo "#nameserver 77.88.8.1" + echo "# google" + echo "#nameserver 8.8.8.8" + echo "# level3" + echo "#nameserver 4.2.2.1" + echo "#nameserver 4.2.2.2" + echo "#nameserver 4.2.2.3" +else + for i in $GLOBAL_NAMESERVERS; do + echo "nameserver $i" + done +fi >> /etc/resolv.conf diff --git a/features.in/net/rootfs/image-scripts.d/50-net-resolv b/features.in/net/rootfs/image-scripts.d/50-net-resolv index d5863ac5..e1222fa1 100755 --- a/features.in/net/rootfs/image-scripts.d/50-net-resolv +++ b/features.in/net/rootfs/image-scripts.d/50-net-resolv @@ -1,19 +1,8 @@ #!/bin/sh +# see also net-dns feature for actual nameserver control -# offer some convenient servers for static configuration cases -# (see also net-dns feature) -if [ -d /etc/net/ifaces/lo ]; then - { - echo "# yandex" - echo "#nameserver 77.88.8.1" - echo "# google" - echo "#nameserver 8.8.8.8" - echo "# level3" - echo "#nameserver 4.2.2.1" - echo "#nameserver 4.2.2.2" - echo "#nameserver 4.2.2.3" - } >> /etc/net/ifaces/lo/resolv.conf -fi +# purge hasher-provided files potentially disclosing +# build host's network configuration bits find /var -name resolv.conf -or -name nsswitch.conf -delete # hasher might have carried host /etc/hosts over, need to overwrite