Signaling trust anchor is enabled by default

diff --git a/daemon/lua/sandbox.lua b/daemon/lua/sandbox.lua
index 5d57c22ef2b6c99bfaf983220270eebffc31f621..dd43c147441fd5f3dd90fdabed96aed726877844 100644 (file)
--- a/daemon/lua/sandbox.lua
+++ b/daemon/lua/sandbox.lua
@@ -200,6 +200,9 @@ else -- Lua 5.2+
        _SANDBOX = make_sandbox(_ENV)
 end
 
+-- Load embedded modules
+modules.load('ta_signal_query')
+
 -- Interactive command evaluation
 function eval_cmd(line, raw)
        -- Compatibility sandbox code loading

diff --git a/modules/ta_signal_query/README.rst b/modules/ta_signal_query/README.rst
index 93db257f419075ba9ad5fd59638a1c2dbdb83263..00bdd48f5aaef65942cfb19f48e460a336c1af1d 100644 (file)
--- a/modules/ta_signal_query/README.rst
+++ b/modules/ta_signal_query/README.rst
@@ -18,12 +18,5 @@ of new keys. This is of particular interest for the DNS root zone in the event
 of key and/or algorithm rollovers that rely on RFC 5011 to automatically
 update a validating DNS resolver’s trust anchor.
 
-.. tip:: It is recommended to always keep this module enabled.
-
-Example configuration
-^^^^^^^^^^^^^^^^^^^^^
-
-.. code-block:: lua
-
-       -- Signal trust anchor keys configured in the validator
-       modules = { 'ta_signal_query' }
+This module is enabled by default. You may use modules.unload('ta_signal_query')
+in your configuration.

diff --git a/tests/deckard b/tests/deckard
index d43b0c893c74ffeb11c4a28b6b1c307eda207768..f5bfe683de82772073e4d3edbb4b08f35cd3f346 160000 (submodule)
--- a/tests/deckard
+++ b/tests/deckard
@@ -1 +1 @@
-Subproject commit d43b0c893c74ffeb11c4a28b6b1c307eda207768
+Subproject commit f5bfe683de82772073e4d3edbb4b08f35cd3f346