Differences

This shows you the differences between two versions of the page.

--- opennic:srvzone [2017-12-07T01:02:22Z] – fusl
+++ opennic:srvzone [2019-03-14T16:21:39Z] – [Getting the script] yangm97
@@ Line 17: / Line 17: @@
 Make sure the folder where you wish to store the files has been created. In the example srvzone.conf file, zones would be stored in /etc/bind/opennic/ so you want to create that folder and change the permissions to allow your bind user full access to read and write it.
+If you're using an apparmour-enabled distro, such as debian or ubuntu, the /etc/bind directory will not be writeable by default. This is because BIND work directory has been moved to /var/cache/bind. In order to persist zones in such systems you will need to do EITHER of the following:
+  * Add an apparmour exception to /etc/bind/opennic (Add /etc/bind/opennic/* rw, to /etc/apparmor.d/usr.sbin.named)
+  * Edit srvzone.conf to point zones to /var/cache/bind instead of /etc/bind
+Regardless of which one you may choose, remember to create the required directories with proper permissions, because BIND won't create the missing directories for you.
 :!: If you are a [[opennic:tier1|Tier 1]] operator, please briefly skip to the **Tier 1 Operators** section at the bottom of this page.
@@ Line 27: / Line 34: @@
 Once the script runs without errors, check the generated output file at the location you specified in tmp_dest (/tmp/named.conf.opennic). You should have a file beginning with the root zone, and containing all of the OpenNIC TLD zones, configured to slave each of these zones and listing the master servers for each zone.
 ===== Configuring BIND =====