Thanks for the ideas! On Sun, Nov 17, 2024 at 5:15 AM Matus UHLAR - fantomas <uh...@fantomas.sk> wrote: > > >On 16/11/2024 04:47, Charles Eckman via bind-users wrote: > >>I'm also down for other workarounds, if you have suggestions! > > On 16.11.24 10:40, Nick Tait via bind-users wrote: > >As a simple workaround, you can create the zone file in /var/lib, and > >then create a hard-link (using "ln") to the same file in /etc/bind. > >That way you can configure BIND to use the /var/lib version (and it > >has permissions to create the signed version of the zone in the same > >directory), and you can manually edit the zone file in /etc/bind > >(along with all your non-DNSSEC zones).
I'll need to think about which I'd be more surprised by -- files in /var/lib/, or a hard link :) > > note that hard links are impossible if /var is on separate partitions. Which suggests the less-likely-to-surprise-me thing: symlinking /var/lib/bind/myzone.db to /etc/bind/myzone.db. Seems to work fine -- the journal and signed files stay in /var/lib/bind, where they're writeable. > > I am curious, if the original zone file in /etc/bind can be signed into > /var/lib using inline signing, as if the /etc/bind version was fetched from > remote server. > > -- > Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ > Warning: I wish NOT to receive e-mail advertising to this address. > Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. > "One World. One Web. One Program." - Microsoft promotional advertisement > "Ein Volk, ein Reich, ein Fuhrer!" - Adolf Hitler > -- > Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from > this list > > ISC funds the development of this software with paid support subscriptions. > Contact us at https://www.isc.org/contact/ for more information. > > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information. bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users