[Pdns-users] bind backend and dnssec database

[Bjoern Franke]

Hi,

> 
> my company is planning the migration of our authoritative name servers 
> to powerdns 4.1.x  with a bind backend (managed with puppet).  this part
> is working as intended.
[...]
> The question is:
> 
> can I put the |bind-dnssec-db.sqlite3| inside puppet after I secured the
> zone.  (can it be readonly from powerdns's viewpoint)
> or does powerdns need read-write acces to the |bind-dnssec-db.sqlite3|?
> (maybe for key roll over?)
>

we are running also powerdns in a puppetized way, but with MySQL as
hybrid-backend. As data is changed during key rollover, a read/write
access is needed. Why do you want to put the sqlite itself into puppet?
For the slaves?

Kind regards
Bjoern