-
Notifications
You must be signed in to change notification settings - Fork 13
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Older versions of BIND require commenting out qname-minimization configuration. BIND builds linked to jemalloc or Clang ASAN will fail to start on systems with libfaketime versions > 0.9.6: - jemalloc wolfcw/libfaketime#130 - Clang ASAN wolfcw/libfaketime#365
- Loading branch information
Showing
4 changed files
with
134 additions
and
1 deletion.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,15 @@ | ||
programs: | ||
- name: named | ||
binary: named | ||
additional: | ||
- -g | ||
- -d | ||
- "99" | ||
- -c | ||
- named.conf | ||
templates: | ||
- template/named.j2 | ||
- template/hints_zone.j2 | ||
configs: | ||
- named.conf | ||
- hints.zone |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,12 @@ | ||
#!/bin/bash | ||
set -o errexit -o nounset | ||
named -V | grep --quiet -- '--without-jemalloc' || echo 'WARNING: Make sure BIND is compiled without jemalloc library; for 9.17+ use ./configure --without-jemalloc' | ||
MINOR="$(named -v | cut -d . -f 2)" | ||
if [[ "$MINOR" -le "13" ]] | ||
then | ||
echo 'WARNING: For BIND <= 9.13.2 manually remove qname-minimization option from named.conf template referenced in configs/named.yaml (usually template/named.j2)' | ||
fi | ||
|
||
exit 1 | ||
RUNDIR="$(dirname "$0")" | ||
cd "$RUNDIR" && ./run.sh --config configs/named.yaml "$@" |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,106 @@ | ||
options { | ||
querylog yes; | ||
|
||
{% if ':' in SELF_ADDR %} | ||
listen-on-v6 { {{SELF_ADDR}}; }; | ||
query-source-v6 address {{SELF_ADDR}}; | ||
{% else %} | ||
listen-on { {{SELF_ADDR}}; }; | ||
query-source address {{SELF_ADDR}}; | ||
{% endif %} | ||
|
||
edns-udp-size 4096; | ||
max-cache-size 2097152; | ||
|
||
{% if QMIN == "false" %} | ||
qname-minimization off; | ||
{% else %} | ||
qname-minimization strict; | ||
{% endif %} | ||
|
||
// Disable RFC8145 signaling, scenario doesn't provide expected ansers | ||
trust-anchor-telemetry no; | ||
|
||
{% if not TRUST_ANCHOR_FILES %} | ||
dnssec-validation no; | ||
{% else %} | ||
unsupported as of yet | ||
-- make sure that value specified at compile-time does not break tests | ||
{% for TAF in TRUST_ANCHOR_FILES %} | ||
trust_anchors.add_file('{{TAF}}') | ||
{% endfor %} | ||
{% endif %} | ||
|
||
{% if NEGATIVE_TRUST_ANCHORS %} | ||
unsupported as of yet | ||
validate-except { | ||
{% for DI in NEGATIVE_TRUST_ANCHORS %} | ||
{{DI}} | ||
{% endfor %} | ||
}; | ||
{% endif %} | ||
|
||
}; | ||
|
||
|
||
{% if FORWARD_ADDR %} | ||
zone "." { | ||
type forward; | ||
forward only; | ||
forwarders { {{FORWARD_ADDR}}; }; | ||
}; | ||
{% endif %} | ||
|
||
zone "." { | ||
type hint; | ||
file "hints.zone"; | ||
}; | ||
|
||
|
||
{% if DO_NOT_QUERY_LOCALHOST == "false" %} | ||
{% endif %} | ||
|
||
{% if HARDEN_GLUE == "true" %} | ||
{% endif %} | ||
|
||
|
||
{% if DO_IP6 == "true" %} | ||
{% else %} | ||
server ::/0 { | ||
bogus true; | ||
}; | ||
{% endif %} | ||
|
||
{% if DO_IP4 == "true" %} | ||
{% else %} | ||
server 0.0.0.0/0 { | ||
bogus true; | ||
}; | ||
{% endif %} | ||
|
||
{% if FEATURES.min_ttl is defined %} | ||
min-cache-ttl {FEATURES.min_ttl}}; | ||
min-ncache-ttl {FEATURES.min_ttl}}; | ||
{% endif %} | ||
|
||
{% if FEATURES.max_ttl is defined %} | ||
max-cache-ttl {{FEATURES.max_ttl}}; | ||
{% endif %} | ||
|
||
{% if FEATURES.dns64_prefix is defined %} | ||
// dns64.config('{{FEATURES.dns64_prefix}}') | ||
{% endif %} | ||
|
||
{% if FEATURES.static_hint_name is defined %} | ||
static hint unsupported | ||
{% endif %} | ||
|
||
logging { | ||
category resolver { | ||
stderr; | ||
}; | ||
channel stderr { | ||
stderr; | ||
severity debug 10; | ||
}; | ||
}; |