Johnathan Corgan faeac11ca8 Remove the .fips DNS routing on package remove, not only on purge ...

Removing the .deb while fips-dns was not running left the resolver's
.fips routing file in place. prerm stops fips-dns, but systemd runs its
teardown only for an active unit, and postrm cleaned up the routing only
on purge. After an apt remove the resolver kept sending .fips queries to
[::1]:5354, where nothing listens once the daemon is gone, so .fips
lookups timed out until the file was deleted by hand.

postrm now runs the DNS cleanup on both remove and purge. A purge of an
installed package runs remove and then purge; the second pass finds no
file and restarts nothing. A purge of a package already removed runs
only the purge pass, which still cleans up. Configuration, keys and the
fips group are still removed only on purge.

The deb-install check now removes the package with the routing planted
and fips-dns stopped, then plants the routing again and purges from
config-files state, so each postrm branch is exercised on its own. The
packaging text test reads the remove|purge branch.

2026-10-06 00:25:59 +00:00

..

.gitignore

Fix DNS responder silent-drop on systemd-resolved deployments

2026-04-29 12:50:11 +00:00

test.sh

Remove the .fips DNS routing on package remove, not only on purge

2026-10-06 00:25:59 +00:00