Commit 782ae761 authored by Vladimir Bashkirtsev's avatar Vladimir Bashkirtsev

Initial commit

parents
all: named.conf local.zone named-service
tar xf bind-9.12.3.tar.gz
cd bind-9.12.3 && ./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var --mandir=/usr/share/man --enable-threads --with-libtool --disable-static
$(MAKE) -C bind-9.12.3
# cd bind-9.12.3 && bin/tests/system/ifconfig.sh up
# $(MAKE) -C bind-9.12.3 -k check
# cd bind-9.12.3 && bin/tests/system/ifconfig.sh down
$(MAKE) -C bind-9.12.3 install
install -v -m755 -d /usr/share/doc/bind-9.12.3/{arm,misc}
cd bind-9.12.3 && install -v -m644 doc/arm/*.html /usr/share/doc/bind-9.12.3/arm
cd bind-9.12.3 && install -v -m644 doc/misc/{dnssec,ipv6,migrat*,options,rfc-compliance,roadmap,sdb} /usr/share/doc/bind-9.12.3/misc
rm /etc/passwd
mv -v /data/etc/passwd /etc/passwd
rm /etc/group
mv -v /data/etc/group /etc/group
rm /etc/shadow
mv -v /data/etc/shadow /etc/shadow
rm /etc/gshadow
mv -v /data/etc/gshadow /etc/gshadow
groupadd -g 20 named
useradd -c "BIND Owner" -g named -s /bin/false -u 20 named
rm /etc/passwd-
rm /etc/group-
rm /etc/shadow-
rm /etc/gshadow-
mv -v /etc/passwd /data/etc/passwd
ln -sv /data/etc/passwd /etc/passwd
mv -v /etc/group /data/etc/group
ln -sv /data/etc/group /etc/group
mv -v /etc/shadow /data/etc/shadow
ln -sv /data/etc/shadow /etc/shadow
mv -v /etc/gshadow /data/etc/gshadow
ln -sv /data/etc/gshadow /etc/gshadow
install -d -m770 -o named -g named /srv/named
mkdir -p /srv/named
cd /srv/named && mkdir -p dev etc/namedb/{slave,pz} usr/lib/engines run/named
mknod /srv/named/dev/null c 1 3
mknod /srv/named/dev/urandom c 1 9
chmod 666 /srv/named/dev/{null,urandom}
cp /etc/localtime etc
touch /srv/named/managed-keys.bind
rndc-confgen -r /dev/urandom -b 512 > /etc/rndc.conf
sed '/conf/d;/^#/!d;s:^# ::' /etc/rndc.conf > /srv/named/etc/named.conf
@echo "$$NAMED_CONF" >> /srv/named/etc/named.conf
@echo "$$LOCAL_ZONE" > /srv/named/etc/namedb/pz/127.0.0
curl -s -k -O ftp://rs.internic.net/domain/named.root
install -vm644 named.root /srv/named/etc/namedb/root.hints
rm named.root
chown -R named:named /srv/named
@echo "d /run/named 0750 named named -" > /usr/lib/tmpfiles.d/named.conf
@echo "$$NAMED_SERVICE" > /lib/systemd/system/named.service
systemctl enable named.service
rm -rf bind-9.12.3
named.conf:
define NAMED_CONF
options {
directory "/etc/namedb";
pid-file "/run/named/named.pid";
statistics-file "/run/named/named.stats";
session-keyfile "/run/named/session.key";
};
zone "." {
type hint;
file "root.hints";
};
zone "0.0.127.in-addr.arpa" {
type master;
file "pz/127.0.0";
};
// Bind 9 now logs by default through syslog (except debug).
// These are the default logging rules.
logging {
category default { default_syslog; default_debug; };
category unmatched { null; };
channel default_syslog {
syslog daemon; // send to syslog's daemon
// facility
severity info; // only send priority info
// and higher
};
channel default_debug {
file "named.run" versions 3 size 5m; // write to named.run in
// the working directory
// Note: stderr is used instead
// of "named.run"
// if the server is started
// with the '-f' option.
severity dynamic; // log at the server's
// current debug level
};
channel default_stderr {
stderr; // writes to stderr
severity info; // only send priority info
// and higher
};
channel null {
null; // toss anything sent to
// this channel
};
};
endef
export NAMED_CONF
local.zone:
define LOCAL_ZONE
$$TTL 3D
@ IN SOA ns.local.domain. hostmaster.local.domain. (
1 ; Serial
8H ; Refresh
2H ; Retry
4W ; Expire
1D) ; Minimum TTL
NS ns.local.domain.
1 PTR localhost.
endef
export LOCAL_ZONE
named-service:
define NAMED_SERVICE
[Unit]
Description=Internet domain name server
After=network.target
[Service]
ExecStart=/usr/sbin/named -f -u named -t /srv/named -c /etc/named.conf
ExecReload=/usr/sbin/rndc reload
ExecStop=/usr/sbin/rndc stop
[Install]
WantedBy=multi-user.target
endef
export NAMED_SERVICE
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment