Update docker.io/library/mariadb Docker tag to v12

disable dnssec for catalog zones on auth-dns
Catalog zones are not real zones in the DNS hierarchy and don't have a parent zone. Therefore they will never have a valid DNSSEC delegation so we should skip signing those zones.
2026-05-19 09:16:08 +00:00 · 2026-05-19 11:01:52 +02:00
2 changed files with 2 additions and 3 deletions
--- a/resources/chaosknoten/ccchoir/docker_compose/compose.yaml.j2
+++ b/resources/chaosknoten/ccchoir/docker_compose/compose.yaml.j2
@ -3,7 +3,7 @@
 services:
  database:
-    image: docker.io/library/mariadb:11
+    image: docker.io/library/mariadb:12
    environment:
      - "MARIADB_DATABASE=wordpress"
      - "MARIADB_ROOT_PASSWORD={{ secret__mariadb_root_password }}"
--- a/roles/knot/templates/knot.conf.j2
+++ b/roles/knot/templates/knot.conf.j2
@ -67,8 +67,7 @@ template:
  # template for automatically created special zones
  - id: catalog
    catalog-role: generate
-    dnssec-signing: on
+    dnssec-signing: off
    dnssec-policy: default
 # define zones on this server
Author	SHA1	Message	Date
Renovate	dbf71420a3	Update docker.io/library/mariadb Docker tag to v12 All checks were successful / Ansible Lint (pull_request) Successful in 2m48s Details / Ansible Lint (push) Successful in 2m51s Details	2026-05-19 09:16:08 +00:00
lilly	3541c68357	disable dnssec for catalog zones on auth-dns All checks were successful / Ansible Lint (push) Successful in 2m35s Details Catalog zones are not real zones in the DNS hierarchy and don't have a parent zone. Therefore they will never have a valid DNSSEC delegation so we should skip signing those zones.	2026-05-19 11:01:52 +02:00