Configure winnetou as a DNSSEC enabled nameserver for the strongswan.org, org, and root zones
This commit is contained in:
committed by
Tobias Brunner
parent
3fbc328d14
commit
37c589f0e0
@@ -15,8 +15,8 @@ INC=build-essential,gperf,libgmp-dev,libldap2-dev,libcurl4-openssl-dev,ethtool
|
||||
INC=$INC,libxml2-dev,libtspi-dev,libsqlite3-dev,openssh-server,tcpdump,psmisc
|
||||
INC=$INC,openssl,vim,sqlite3,conntrack,gdb,cmake,libxerces-c2-dev,libltdl-dev
|
||||
INC=$INC,liblog4cxx10-dev,libboost-thread-dev,libboost-system-dev,git-core
|
||||
INC=$INC,less,acpid,acpi-support-base,libldns-dev,libunbound-dev
|
||||
SERVICES="apache2 dbus isc-dhcp-server slapd"
|
||||
INC=$INC,less,acpid,acpi-support-base,libldns-dev,libunbound-dev,dnsutils
|
||||
SERVICES="apache2 dbus isc-dhcp-server slapd bind9"
|
||||
INC=$INC,${SERVICES// /,}
|
||||
EXC=iptables
|
||||
|
||||
@@ -67,6 +67,9 @@ do_on_exit graceful_umount $APTCACHE
|
||||
log_action "Running debootstrap ($BASEIMGSUITE, $BASEIMGARCH)"
|
||||
execute "debootstrap --arch=$BASEIMGARCH --include=$INC --exclude $EXC $BASEIMGSUITE $LOOPDIR $BASEIMGMIRROR"
|
||||
|
||||
execute "mount -t proc none $LOOPDIR/proc"
|
||||
do_on_exit graceful_umount $LOOPDIR/proc
|
||||
|
||||
for service in $SERVICES
|
||||
do
|
||||
log_action "Stopping service $service"
|
||||
|
||||
@@ -57,6 +57,10 @@ do
|
||||
execute_chroot "rm -rf /var/lib/ldap/*" 0
|
||||
execute_chroot "slapadd -l /etc/ldap/ldif.txt -f /etc/ldap/slapd.conf" 0
|
||||
execute_chroot "chown -R openldap:openldap /var/lib/ldap" 0
|
||||
execute_chroot "dnssec-signzone -K /etc/bind -o strongswan.org. /etc/bind/db.strongswan.org" 0
|
||||
execute_chroot "dnssec-signzone -K /etc/bind -o org. /etc/bind/db.org" 0
|
||||
execute_chroot "dnssec-signzone -K /etc/bind -o . /etc/bind/db.root" 0
|
||||
execute_chroot "update-rc.d bind9 defaults" 0
|
||||
fi
|
||||
sync
|
||||
execute "umount $LOOPDIR" 0
|
||||
|
||||
Reference in New Issue
Block a user