Re: Switching from rhel base 9.16 to 9.18 copr

2024-05-06 Thread John Thurston
This doesn't answer the question you have asked, so feel free to hit 
'delete'.


I suggest that what you are trying to do has the potential to cause you 
suffering later. If you are switching to the COPR distribution, don't 
fight it. Turn off and disable the base service/daemon. Copy your .conf 
files over to the new location for the COPR distribution. Move on with 
your life.


When you are satisfied that the COPR distribution is meeting your needs 
(and you aren't going back to the base), replace that .conf in /etc with 
something defining only localhost. Your installation will look like 
every one else who is using the COPR distribution, and package updates 
to the base can happen without affecting the installation you care 
about. If some update to base does re-enable it, it will behave 
substantially differently from your real installation, and you will 
notice it.


--
Do things because you should, not just because you can.

John Thurston907-465-8591
john.thurs...@alaska.gov
Department of Administration
State of Alaska

On 5/5/2024 8:15 AM, Luca vom Bruch via bind-users wrote:


Hello,

I use bind (stock from alma 9.3) as a nameserver for a webhosting 
server with webmin/virtualmin.


If I install BIND via copr (RHEL9 and derivatives only offer 9.16 
instead of 9.18 – I want to experiment with DoT for opportunistic TLS 
between nameservers, upcoming standard RFC 9539 - Unilateral 
Opportunistic Deployment of Encrypted Recursive-to-Authoritative DNS 
(ietf.org) 
 
)


what are the necessary steps to make isc-bind read the existing config 
files? named.conf in /etc and zones in /var/named?


will the daemon only listen to /etc/opt/isc/scls/isc-bind/named.conf? 
should I edit the systemctl .service file to adjust the config path?


Thanks,

Luca

-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Switching from rhel base 9.16 to 9.18 copr

2024-05-05 Thread Carlos Horowicz

I used these symlinks to transition from RHEL standard 9.16 to COPR 9.18

ln -s /var/opt/isc/scls/isc-bind/named /var/named
ln -s /etc/opt/isc/scls/isc-bind/named.conf /etc/named.conf
ln -s /var/opt/isc/scls/isc-bind/run/named /run/named
ln -s /opt/isc/isc-bind/root/usr/sbin/rndc /usr/sbin/rndc
ln -s /etc/opt/isc/scls/isc-bind/rndc.key /etc/rndc.key

Hopefully it's what you're looking for.

On 05/05/2024 18:35, Peter wrote:

On Sun, May 05, 2024 at 06:15:13PM +0200, Luca vom Bruch via bind-users wrote:
! Hello,
!
! I use bind (stock from alma 9.3) as a nameserver for a webhosting server
! with webmin/virtualmin.
!
! If I install BIND via copr (RHEL9 and derivatives only offer 9.16 instead of
! 9.18 - I want to experiment with DoT for opportunistic TLS between
! nameservers, upcoming standard  
! RFC 9539 - Unilateral Opportunistic Deployment of Encrypted
! Recursive-to-Authoritative DNS (ietf.org) )
!
! what are the necessary steps to make isc-bind read the existing config
! files? named.conf in /etc and zones in /var/named?

Don`t know Your OS details, but when I upgraded 9.16 to 9.18 on
FreeBSD, my entire site fell apart and nothing did work anymore.

I found the problem - after I managed to access the respective
system (my ssh utilizes DANE/SSHFP) - that I had to newly write my
config files because all the filesystem pathnames have changed
between 9.16 and 9.18.

So beware.

--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Switching from rhel base 9.16 to 9.18 copr

2024-05-05 Thread Peter
On Sun, May 05, 2024 at 06:15:13PM +0200, Luca vom Bruch via bind-users wrote:
! Hello,
! 
! I use bind (stock from alma 9.3) as a nameserver for a webhosting server
! with webmin/virtualmin.
! 
! If I install BIND via copr (RHEL9 and derivatives only offer 9.16 instead of
! 9.18 - I want to experiment with DoT for opportunistic TLS between
! nameservers, upcoming standard  
! RFC 9539 - Unilateral Opportunistic Deployment of Encrypted
! Recursive-to-Authoritative DNS (ietf.org) )
! 
! what are the necessary steps to make isc-bind read the existing config
! files? named.conf in /etc and zones in /var/named?

Don`t know Your OS details, but when I upgraded 9.16 to 9.18 on
FreeBSD, my entire site fell apart and nothing did work anymore.

I found the problem - after I managed to access the respective
system (my ssh utilizes DANE/SSHFP) - that I had to newly write my
config files because all the filesystem pathnames have changed
between 9.16 and 9.18.

So beware.
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Switching from rhel base 9.16 to 9.18 copr

2024-05-05 Thread Luca vom Bruch via bind-users
Hello,

I use bind (stock from alma 9.3) as a nameserver for a webhosting server
with webmin/virtualmin.

If I install BIND via copr (RHEL9 and derivatives only offer 9.16 instead of
9.18 - I want to experiment with DoT for opportunistic TLS between
nameservers, upcoming standard  
RFC 9539 - Unilateral Opportunistic Deployment of Encrypted
Recursive-to-Authoritative DNS (ietf.org) )

what are the necessary steps to make isc-bind read the existing config
files? named.conf in /etc and zones in /var/named?

will the daemon only listen to /etc/opt/isc/scls/isc-bind/named.conf? should
I edit the systemctl .service file to adjust the config path? 

Thanks,

Luca

 

-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users