1c147e4def
- Updated the required variables to be sorted so that they are better visible one on each line - Removed variable defaults from each service scripts and added them to tools/genenv file which holds all default values Change-Id: Ia7b1b08ba3f963b46b81434ce84f476d56890a93 Closes-Bug: #1476494 Closes-Bug: #1467652
63 lines
1.6 KiB
Bash
Executable File
63 lines
1.6 KiB
Bash
Executable File
#!/bin/bash
|
|
set -e
|
|
|
|
. /opt/kolla/kolla-common.sh
|
|
|
|
check_required_vars DESIGNATE_ALLOW_RECURSION \
|
|
DESIGNATE_BIND9_RNDC_KEY \
|
|
DESIGNATE_MASTERNS \
|
|
DESIGNATE_SLAVENS
|
|
|
|
NAMEDCFG=/etc/named.conf
|
|
|
|
# /var/named is coming from a VOLUME definition but at first boot it needs to
|
|
# be populated from the original container since else it would be missing some
|
|
# Bind9 core files. These files have been saved during the build phase.
|
|
|
|
if [ ! -f /var/named/named.ca ]; then
|
|
cp -pr /opt/kolla/var-named/* /var/named/
|
|
fi
|
|
|
|
# When rndc adds a new domain, bind adds the call in an nzf file in this
|
|
# directory.
|
|
chmod 770 /var/named
|
|
chown root:named /var/named
|
|
|
|
# Default Bind9 behavior is to enable recursion, disable if wanted.
|
|
if [ "${DESIGNATE_ALLOW_RECURSION}" == "false" ]; then
|
|
sed -i -r "s/(recursion) yes/\1 no/" $NAMEDCFG
|
|
fi
|
|
|
|
sed -i -r "/listen-on port 53/d" $NAMEDCFG
|
|
sed -i -r "/listen-on-v6/d" $NAMEDCFG
|
|
sed -i -r "s,/\* Path to ISC DLV key \*/,allow-new-zones yes;," $NAMEDCFG
|
|
sed -i -r "/allow-query .+;/d" $NAMEDCFG
|
|
|
|
if ! grep -q rndc-key /etc/named.conf; then
|
|
cat >> /etc/named.conf <<EOF
|
|
include "/etc/rndc.key";
|
|
controls {
|
|
inet ${DESIGNATE_SLAVENS} allow { ${DESIGNATE_MASTERNS}; } keys { "rndc-key"; };
|
|
};
|
|
EOF
|
|
fi
|
|
|
|
cat > /etc/rndc.key <<EOF
|
|
key "rndc-key" {
|
|
algorithm hmac-md5;
|
|
secret "${DESIGNATE_BIND9_RNDC_KEY}";
|
|
};
|
|
EOF
|
|
cat > /etc/rndc.conf <<EOF
|
|
options {
|
|
default-key "rndc-key";
|
|
default-server 127.0.0.1;
|
|
default-port 953;
|
|
};
|
|
EOF
|
|
cat /etc/rndc.key >> /etc/rndc.conf
|
|
chown named /etc/rndc.key
|
|
|
|
# Launch and keep in the foreground.
|
|
exec /usr/sbin/named -u named -g
|