mirror of
https://github.com/opentffoundation/opentf.git
synced 2025-12-21 10:47:34 -05:00
a15a6c9657
Signed-off-by: Janos <86970079+janosdebugs@users.noreply.github.com> Signed-off-by: Damian Stasik <920747+damianstasik@users.noreply.github.com> Signed-off-by: Roman Grinovski <roman.grinovski@gmail.com> Co-authored-by: Damian Stasik <920747+damianstasik@users.noreply.github.com> Co-authored-by: Roman Grinovski <roman.grinovski@gmail.com>
44 lines
1.9 KiB
Plaintext
44 lines
1.9 KiB
Plaintext
---
|
|
description: Upgrading to OpenTofu v1.6
|
|
---
|
|
|
|
# Upgrading to OpenTofu v1.6
|
|
|
|
OpenTofu v1.6 is the first release in the stable OpenTofu v1.0 series.
|
|
|
|
OpenTofu v1.6 honors the
|
|
[OpenTofu v1.0 Compatibility Promises](../../language/v1-compatibility-promises.mdx),
|
|
but there are some behavior changes outside of those promises that may affect a
|
|
small number of users. Specifically, the following updates may require
|
|
additional upgrade steps:
|
|
* [Linux DNS resolver changes](#linux-dns-resolver-changes)
|
|
|
|
See [the full changelog](https://github.com/opentofu/opentofu/blob/v1.6/CHANGELOG.md)
|
|
for more details. If you encounter any problems during upgrading which are not
|
|
covered this guide, please start a new topic in
|
|
[the OpenTofu community forum](https://github.com/opentofu/opentofu/discussions)
|
|
to discuss it.
|
|
|
|
## Linux DNS resolver changes
|
|
|
|
OpenTofu on Linux uses a built-in DNS resolver rather than using the DNS
|
|
resolver from the platform's C library, because this allows OpenTofu to run
|
|
on systems with many different C libraries.
|
|
|
|
In OpenTofu v1.6, the DNS resolver will now notice when you have set the
|
|
`trust-ad` option in your `/etc/resolve.conf` file, and will respond by setting
|
|
the "authentic data" option in outgoing DNS requests to better match the
|
|
behavior of the GNU libc DNS resolver.
|
|
|
|
OpenTofu does not pay any attention to the corresponding option in responses,
|
|
but some DNSSEC-aware recursive resolvers return different responses when the
|
|
request option isn't set. This should therefore avoid some potential situations
|
|
where a DNS request from OpenTofu might get a different response than a
|
|
similar request from other software on your system.
|
|
|
|
We don't expect this behavior change to be significant for most OpenTofu users.
|
|
|
|
Note that this change affects only DNS requests made by OpenTofu CLI itself,
|
|
and not requests made by providers. Provider plugins are separate programs
|
|
which handle DNS resolution themselves and so may have different behavior.
|