Thanks for the ideas!

On Sun, Nov 17, 2024 at 5:15 AM Matus UHLAR - fantomas
<uh...@fantomas.sk> wrote:
>
> >On 16/11/2024 04:47, Charles Eckman via bind-users wrote:
> >>I'm also down for other workarounds, if you have suggestions!
>
> On 16.11.24 10:40, Nick Tait via bind-users wrote:
> >As a simple workaround, you can create the zone file in /var/lib, and
> >then create a hard-link (using "ln") to the same file in /etc/bind.
> >That way you can configure BIND to use the /var/lib version (and it
> >has permissions to create the signed version of the zone in the same
> >directory), and you can manually edit the zone file in /etc/bind
> >(along with all your non-DNSSEC zones).

I'll need to think about which I'd be more surprised by -- files in
/var/lib/, or a hard link :)

>
> note that hard links are impossible if /var is on separate partitions.

Which suggests the less-likely-to-surprise-me thing: symlinking
/var/lib/bind/myzone.db to /etc/bind/myzone.db. Seems to work fine --
the journal and signed files stay in /var/lib/bind, where they're
writeable.

>
> I am curious, if the original zone file in /etc/bind can be signed into
> /var/lib using inline signing, as if the /etc/bind version was fetched from
> remote server.
>
> --
> Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
> Warning: I wish NOT to receive e-mail advertising to this address.
> Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
> "One World. One Web. One Program." - Microsoft promotional advertisement
> "Ein Volk, ein Reich, ein Fuhrer!" - Adolf Hitler
> --
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
> this list
>
> ISC funds the development of this software with paid support subscriptions. 
> Contact us at https://www.isc.org/contact/ for more information.
>
>
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to