[ILUG] Fedora 2, Named and chroot

[Colm MacCarthaigh]

On Tue, May 25, 2004 at 10:11:34AM +0100, Hamilton, David (HPS) wrote:
> 1. which of the named.conf files needs to be correct, or should they be
> identical?

The one in the chroot, but to save worrying symlink them :) (Make
sure the one outside the chroot is the symlink though)

> 2. Should the directory in the named.conf file be relative to the root
> or the chroot?

Relative to the chroot, but remember that when it's running the chroot
== / , so if the directory is physically at /chroot/bind/etc/namedb/
and the chroot is /chroot/bind/ then /etc/namedb is what should be in
the config file.

> 3. Is there anything else I should look out for.

You'll need to make a /dev/random inode within the chroot and make sure
there's a copy of /etc/localtime within it aswell. Use group writable
permissions for anywhere bind needs to write (location of pid file,
slave zones), make sure it's using as highuid/gid and putting the chroot
on a partition that's mounted noexec,nosuid never does any harm either.
Don't place any executables or libraries in the chroot, you don't need
them.

If you want to use rndc, you'll need to make sure the rndc.key files or
config blocks are syncronised between the versions within the chroot and
the version in the real /etc. 

-- 
Colm MacCárthaigh                        Public Key: colm+pgp at stdlib.net