Fedora 34
Sponsored Link

BIND : Configure Chroot Environment2021/05/05

 
If you'd like to configute Chroot Environment for named, Set like follows.
[1] After setting Chroot environment, configuration files are placed under [/var/named/chroot].
[named.conf] is placed under [/var/named/chroot/etc/named.conf],
zone files are placed [/var/named/chroot/var/named/***].
When modify settings, Change them under [/var/named/chroot] files.
[root@dlp ~]#
dnf -y install bind-chroot
[root@dlp ~]#
mkdir /var/named/chroot/usr/lib64/named

[root@dlp ~]#
/usr/libexec/setup-named-chroot.sh /var/named/chroot on
[root@dlp ~]#
systemctl disable --now named

[root@dlp ~]#
systemctl enable --now named-chroot

Created symlink /etc/systemd/system/multi-user.target.wants/named-chroot.service → /usr/lib/systemd/system/named-chroot.service.
[root@dlp ~]#
ll /var/named/chroot/etc

total 708
drwxr-x---. 3 root named     23 May  5 22:32 crypto-policies
-rw-r--r--. 2 root root     309 Jan 26 11:35 localtime
drwxr-x---. 2 root named      6 Mar  2 04:57 named
-rw-r-----. 1 root named   2390 May  5 22:26 named.conf
-rw-r-----. 1 root named   1029 Mar  2 04:57 named.rfc1912.zones
-rw-r--r--. 1 root named    686 Mar  2 04:57 named.root.key
drwxr-x---. 3 root named     25 May  5 22:32 pki
-rw-r--r--. 1 root root    6568 Jun 23  2020 protocols
-rw-r-----. 1 root named    100 May  5 21:05 rndc.key
-rw-r--r--. 1 root root  692252 Jun 23  2020 services

[root@dlp ~]#
ll /var/named/chroot/var/named

total 24
-rw-r--r--. 1 root  root   313 May  5 21:04 0.0.10.db
drwxr-x---. 7 root  named   61 May  5 22:32 chroot
drwxrwx---. 2 named named   23 May  5 21:05 data
drwxrwx---. 2 named named  108 May  5 22:31 dynamic
-rw-r-----. 1 root  named 2253 Mar  2 04:57 named.ca
-rw-r-----. 1 root  named  152 Mar  2 04:57 named.empty
-rw-r-----. 1 root  named  152 Mar  2 04:57 named.localhost
-rw-r-----. 1 root  named  168 Mar  2 04:57 named.loopback
drwxrwx---. 2 named named    6 Mar  2 04:56 slaves
-rw-r--r--. 1 root  root   404 May  5 22:30 srv.world.lan
Matched Content