Setup of Devuan name server sub system.
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Vladi Belperchinov-Shabanski 1976323008 maint 2 years ago
.gitignore initial capture 4 years ago
README.adoc Add instruction how to check for conflicts 2 years ago preliminary 3 years ago
devuan-slave.conf Implement DNS round-robin zone on Devuan infra 2 years ago Auto update LE challenge 2 years ago add for trying out control-zone 3 years ago Bump-up serial to refresh ns2 2 years ago Split the long txt into multiple parts 2 years ago maint 2 years ago
ip6arpa added usage comments 2 years ago
nsd.conf Implement DNS round-robin zone on Devuan infra 2 years ago convert the zone in a template suitable for auto generation 2 years ago Bump-up serial for test 2 years ago add an automatic RR generator 2 years ago


Nameservice Configurations

This directory contains configurations for the Devuan nameserver sub system. See also name service documentation.

Deployment of Configuration Changes

Changes to nameserver configurations should be done to this repository. Don’t forget to update the serial. Then: go to ns1:/etc/nsd/GIT, check out, run ./ from /etc/nsd/GIT to verify that no changes in the runtime configuration will be overwritten and after merging the changes and commiting them back in git, copy up *.conf to .., and restart nsd.

This process is not automated yet, since configuration changes involve at least two levels of validation:

  1. it needs to be syntactically correct for the program(s) (nsd), and

  2. it needs to reflect the agreed upon intentions of "Devuan" as organisation.

The syntax checking can be done on the zone file(s), as it’s ordinary bind9 syntax. E.g. nsd-checkzone (of the nsd package) or named-checkzone (of the bind9utils package) may be used to confirm syntactic correctness.

The intentional correctness is of course rather a matter of the "sign-off" procedure is in use. Presently Devuan Caretakers have access to root@ns1 and can exercise the hands-on.