packages/net/bind/files, branch master

bind: manual fix for IPv6 server unreachable noise

2025-12-13T01:06:44Z

Until we have a failsafe way of detecting no IPv6 internet connectivity automatically, allow the users to set it manually for now. Signed-off-by: Philip Prindeville

bind: save out served domains on service stop

2025-12-06T21:05:05Z

If named gets stopped, then started again, but isc-dhcpd isn't also restarted, then we want named to at least have the existing content. Signed-off-by: Philip Prindeville

bind: don't break IPv6 support

2025-09-19T15:35:38Z

What started in #20183 as a attempt to clean up noise in the logfiles, turned out to be causing denial-of-service for dual-stack and especially IPv6-only environments. Breaking core network functionality cannot possibly be less important than cosmetic issues, and those affected by log spam can avoid it via other means (e.g. "query-source-v6 none;" in named.conf). There's no reliable heuristic for determining whether there's IPv6 connectivity at the time bind is started which will catch any and all corner cases, as discussed in #26327. So, remove this logic for now. If a suitable heuristic can be devised, it can always be added in a subsequent patch, but I have my doubts. (Also, quote one variable to make shellcheck happy) Closes: #26327 Closes: #20468 Signed-off-by: David Härdeman

isc-dhcp: create zones using rndc

2025-09-13T20:36:41Z

This changes isc-dhcp's init script to create bind zones using the tools bind provides for that scenario instead of crafting separate zone configuration by hand. At the same time, remove the use of /tmp/bind/named.conf.local and add permissions for dynamic zone creation to bind. Signed-off-by: David Härdeman

bind: update conffiles list

2025-09-13T20:36:41Z

The previous patches removed a number of conffiles that weren't necessary, meaning we can now assume that any changes or additional files in /etc/bind are things that the user wants to keep. Since /var/lib/bind is the standard location for longer-lived zone data (i.e. not zones that secondary servers have obtained via XFER), we symlink it to /etc/bind/zones so that it survives a sysupgrade. Temporary files (such as XFER:ed zones for secondaries) stay in /var/cache/bind. Signed-off-by: David Härdeman

bind: update init script

2025-09-13T20:36:41Z

Simplify the init script, removing some unnecessary subshells and make sure that the end result is shellcheck clean. Signed-off-by: David Härdeman

bind: use default rndc control channel

2025-09-13T20:36:41Z

The present logic recreates what is already the default in bind [1], and writes the rndc key twice to two different files. In addition, the rndc key is regenerated every time bind is restarted. Simplify this by relying on the default behaviour instead. [1] https://bind9.readthedocs.io/en/latest/reference.html#controls-block-definition-and-usage Signed-off-by: David Härdeman

bind: rename named.conf.example

2025-09-13T20:36:41Z

The file actually gets installed as /etc/bind/named.conf, so rename the file to clarify that. Signed-off-by: David Härdeman

bind: remove bind.keys

2025-09-13T20:36:41Z

First, the file is out-of-date. Second, and more importantly, bind9 includes a compiled-in version which is up-to-date (see https://www.isc.org/bind-keys/). Signed-off-by: David Härdeman

bind: update db.root

2025-09-13T20:36:41Z

The previous version was quite out of date. Signed-off-by: David Härdeman