* libor.peltan <[email protected]> [2018-10-29 16:20]:
> 2) No, "discontinuity in changes history" is not expected. Could you please
> describe what did you do before such warning appeared, with longer snippets
> of the log? In any case, there is no need to be scared of journal getting
> full, once you read the documentation ;)
> https://www.knot-dns.cz/docs/2.7/singlehtml/index.html#journal-behaviour
I restarted the server after upgrading it from 2.7.2 to 2.7.3:
Oct 29 10:04:21 alita knotd[8410]: info: stopping server
Oct 29 10:04:21 alita knotd[8410]: info: updating persistent timer DB
Oct 29 10:04:22 alita knotd[8410]: info: shutting down
Oct 29 10:04:22 alita knotd[18283]: info: Knot DNS 2.7.3 starting
Oct 29 10:04:22 alita knotd[18283]: info: binding to interface 127.0.0.1@5354
Oct 29 10:04:22 alita knotd[18283]: info: binding to interface ::1@5354
Oct 29 10:04:22 alita knotd[18283]: info: changing GID to 147
Oct 29 10:04:22 alita knotd[18283]: info: changing UID to 143
Oct 29 10:04:22 alita knotd[18283]: info: process not allowed to set
capabilities, skipping
Oct 29 10:04:22 alita knotd[18283]: info: loading 2 zones
Oct 29 10:04:22 alita knotd[18283]: info: [example.com.] zone will be loaded
Oct 29 10:04:22 alita knotd[18283]: info: [dnssec-test.intern.] zone will be
loaded
Oct 29 10:04:22 alita knotd[18283]: info: starting server
Oct 29 10:04:22 alita knotd[18283]: info: [dnssec-test.intern.] DNSSEC, key,
tag 41236, algorithm RSASHA256, KSK, public, active
Oct 29 10:04:22 alita knotd[18283]: info: [dnssec-test.intern.] DNSSEC, key,
tag 49126, algorithm RSASHA256, public, active
Oct 29 10:04:22 alita knotd[18283]: info: [example.com.] DNSSEC, key, tag
38882, algorithm RSASHA256, KSK, public, active
Oct 29 10:04:22 alita knotd[18283]: info: [example.com.] DNSSEC, key, tag
3505, algorithm RSASHA256, public, active
Oct 29 10:04:22 alita knotd[18283]: info: [dnssec-test.intern.] DNSSEC, signing
started
Oct 29 10:04:22 alita knotd[18283]: info: [dnssec-test.intern.] DNSSEC,
successfully signed
Oct 29 10:04:22 alita knotd[18283]: warning: [dnssec-test.intern.] journal,
discontinuity in changes history (1540307365 -> 28), dropping older changesets
Oct 29 10:04:23 alita knotd[18283]: info: [example.com.] DNSSEC, signing started
Oct 29 10:04:23 alita knotd[18283]: info: [example.com.] DNSSEC, zone is
up-to-date
Oct 29 10:04:23 alita knotd[18283]: warning: [example.com.] with automatic
DNSSEC signing and outgoing transfers enabled, 'zonefile-load: difference'
should be set to avoid mal
Oct 29 10:04:23 alita knotd[18283]: info: [example.com.] loaded, serial
1540737051, 4960 bytes
Oct 29 10:04:23 alita knotd[18283]: info: [example.com.] DNSSEC, next signing
at 2018-10-31T14:00:50
Oct 29 10:04:24 alita knotd[18283]: info: [dnssec-test.intern.] loaded, serial
1540803862, 2788 bytes
Oct 29 10:04:24 alita knotd[18283]: info: [dnssec-test.intern.] DNSSEC, next
signing at 2018-11-05T10:04:22
Serial 28 is the serial from the (unsigned) master file.
Regards
Sebastian
--
GPG Key: 0x58A2D94A93A0B9CE (F4F6 B1A3 866B 26E9 450A 9D82 58A2 D94A 93A0 B9CE)
'Are you Death?' ... IT'S THE SCYTHE, ISN'T IT? PEOPLE ALWAYS NOTICE THE SCYTHE.
-- Terry Pratchett, The Fifth Elephant
--
https://lists.nic.cz/cgi-bin/mailman/listinfo/knot-dns-users