[Pdns-users] bind backend and dnssec database

Bjoern Franke bjo at nord-west.org
Wed Jul 10 09:12:58 UTC 2019


> my company is planning the migration of our authoritative name servers 
> to powerdns 4.1.x  with a bind backend (managed with puppet).  this part
> is working as intended.
> The question is:
> can I put the |bind-dnssec-db.sqlite3| inside puppet after I secured the
> zone.  (can it be readonly from powerdns's viewpoint)
> or does powerdns need read-write acces to the |bind-dnssec-db.sqlite3|?
> (maybe for key roll over?)

we are running also powerdns in a puppetized way, but with MySQL as
hybrid-backend. As data is changed during key rollover, a read/write
access is needed. Why do you want to put the sqlite itself into puppet?
For the slaves?

Kind regards

More information about the Pdns-users mailing list