Kõrgkäigeldav pädev nimeserveri lahendus - NSD - Redigeerimiste ajalugu

Imre: /* Konteiner-põhine lahendus */

2025-12-05T23:53:27Z

Konteiner-põhine lahendus

←Vanem redaktsioon		Redaktsioon: 6. detsember 2025, kell 02:53
93. rida:		93. rida:

	<pre>		<pre>
		+	# cat Dockerfile
	# Base OS		# Base OS
	FROM ubuntu:24.04		FROM ubuntu:24.04

Imre: /* Konteiner-põhine lahendus */

2025-10-23T21:15:49Z

Konteiner-põhine lahendus

←Vanem redaktsioon		Redaktsioon: 24. oktoober 2025, kell 00:15
226. rida:		226. rida:
	</pre>		</pre>

		+	logi
		+
		+	<pre>
		+	root@xxz:/opt/nsd/dc# docker compose -f docker-compose-nsd-gpt.yml logs
		+	nsd \| [2025-10-23 15:21:34.753] nsd[7]: error: Cannot open /var/log/nsd.log for appending (Permission denied), logging to stderr
		+	nsd \| [2025-10-23 15:21:34.753] nsd[7]: warning: chown /var/log/nsd.log failed: No such file or directory
		+	nsd \| [2025-10-23 15:21:34.753] nsd[7]: notice: nsd starting (NSD 4.8.0)
		+	nsd \| [2025-10-23 15:21:34.755] nsd[7]: warning: fallback to UDP4, no IPv6: not supported
		+	nsd \| [2025-10-23 15:21:34.757] nsd[7]: warning: fallback to TCP4, no IPv6: not supported
		+	nsd \| [2025-10-23 15:21:34.765] nsd[7]: warning: fallback to TCP4, no IPv6: not supported
		+	nsd \| [2025-10-23 15:21:34.765] nsd[7]: error: cannot open pidfile /var/run/nsd.pid: Permission denied
		+	nsd \| [2025-10-23 15:21:34.765] nsd[7]: error: cannot overwrite the pidfile /var/run/nsd.pid: Permission denied
		+	nsd \| [2025-10-23 15:21:34.765] nsd[7]: warning: unable to initgroups nsd: Operation not permitted
		+	nsd \| [2025-10-23 15:21:34.799] nsd[8]: info: zone example.test read with success
		+	nsd \| [2025-10-23 15:21:34.815] nsd[8]: notice: nsd started (NSD 4.8.0), pid 7
		+	</pre>

	===Kasulikud lisamatejalid===		===Kasulikud lisamatejalid===

Imre: /* Kasulikud lisamatejalid */

2025-10-23T12:16:32Z

Kasulikud lisamatejalid

@@ 216. rida: / 216. rida: @@
 nsd            9  0.0  0.4  61336  4840 ?        S    13:18   0:00      \_ nsd -d -c /etc/nsd/nsd.conf
 </pre>
 ===Kasulikud lisamatejalid===

Imre: /* Kasulikud lisamatejalid */

2025-10-23T11:59:33Z

Kasulikud lisamatejalid

←Vanem redaktsioon		Redaktsioon: 23. oktoober 2025, kell 14:59
202. rida:		202. rida:

	and adjust port: 8053 in nsd.conf.		and adjust port: 8053 in nsd.conf.
		+	</pre>
		+
		+	prosessid
		+
		+	<pre>
		+	nsd@0a3d7a8174ea:/$ ps auxf
		+	USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
		+	nsd 10 0.1 0.3 4588 3840 pts/0 Ss 13:19 0:00 bash
		+	nsd 21 0.0 0.4 7888 3968 pts/0 R+ 13:19 0:00 \_ ps auxf
		+	nsd 1 0.0 0.1 2692 1408 ? Ss 13:18 0:00 /usr/bin/tini -- nsd -d -c /etc/nsd/nsd.conf
		+	nsd 7 0.0 1.1 33224 11648 ? S 13:18 0:00 nsd -d -c /etc/nsd/nsd.conf
		+	nsd 8 0.0 3.5 45484 35164 ? S 13:18 0:00 \_ nsd -d -c /etc/nsd/nsd.conf
		+	nsd 9 0.0 0.4 61336 4840 ? S 13:18 0:00 \_ nsd -d -c /etc/nsd/nsd.conf
	</pre>		</pre>

Imre: /* Konteiner-põhine lahendus */

2025-10-23T09:14:26Z

Konteiner-põhine lahendus

@@ 164. rida: / 164. rida: @@
     IN NS ns1.example.test.
 ns1 IN A 127.0.0.1
 </pre>

Imre: /* Kasulikud lisamatejalid */

2025-10-23T09:13:04Z

Kasulikud lisamatejalid

←Vanem redaktsioon		Redaktsioon: 23. oktoober 2025, kell 12:13
75. rida:		75. rida:
	link-local: []		link-local: []

		+	</pre>
		+
		+	===Konteiner-põhine lahendus===
		+
		+	ChatGPT abiga saavutatud tulemus. Filesysten layout
		+
		+	<pre>
		+	nsd/
		+	├── docker-compose.yml
		+	├── Dockerfile
		+	├── nsd.conf
		+	└── zones/
		+	└── example.test.zone
		+	</pre>
		+
		+	Dockerfile
		+
		+	<pre>
		+	# Base OS
		+	FROM ubuntu:24.04
		+
		+	# Install nsd + tini
		+	RUN apt-get update && \
		+	apt-get install -y nsd tini && \
		+	rm -rf /var/lib/apt/lists/*
		+
		+	# Copy configuration and zones
		+	COPY nsd.conf /etc/nsd/nsd.conf
		+	COPY zones /etc/nsd/zones
		+
		+	# Expose DNS ports
		+	EXPOSE 53/tcp 53/udp
		+
		+	# Use tini as init for clean signal handling
		+	ENTRYPOINT ["/usr/bin/tini", "--"]
		+
		+	# Run NSD in the foreground
		+	CMD ["nsd", "-d", "-c", "/etc/nsd/nsd.conf"]
		+	</pre>
		+
		+	docker-compose.yml
		+
		+	<pre>
		+	services:
		+	nsd:
		+	build: .
		+	container_name: nsd
		+	restart: unless-stopped
		+	ports:
		+	- "53:53/tcp"
		+	- "53:53/udp"
		+	volumes:
		+	- ./nsd.conf:/etc/nsd/nsd.conf:ro
		+	- ./zones:/etc/nsd/zones:ro
		+	cap_add:
		+	- NET_BIND_SERVICE # allow binding to port 53 if non-root
		+	user: "nsd" # run as nsd user inside container
		+	init: true # enable tini (redundant but safe)
		+	</pre>
		+
		+	nsd.conf
		+
		+	<pre>
		+	server:
		+	username: nsd
		+	database: "/var/db/nsd/nsd.db"
		+	logfile: "/var/log/nsd.log"
		+	pidfile: "/var/run/nsd.pid"
		+	port: 53
		+	verbosity: 2
		+	zonesdir: "/etc/nsd/zones"
		+
		+	zone:
		+	name: "example.test"
		+	zonefile: "example.test.zone"
		+	</pre>
		+
		+	zones/example.test.zone
		+
		+	<pre>
		+	$ORIGIN example.test.
		+	@ 3600 IN SOA ns1.example.test. admin.example.test. (
		+	1 ; serial
		+	3600 ; refresh
		+	600 ; retry
		+	604800 ; expire
		+	3600 ) ; minimum
		+	IN NS ns1.example.test.
		+	ns1 IN A 127.0.0.1
	</pre>		</pre>

Imre: /* Misc */

2025-08-17T12:38:13Z

Misc

←Vanem redaktsioon		Redaktsioon: 17. august 2025, kell 15:38
52. rida:		52. rida:
	- 2001:cc8::247/64		- 2001:cc8::247/64
	nameservers:		nameservers:
−	search: [ ~~eenet~~.ee ]	+	search: [ auul.pri.ee ]
	addresses: [ 10.90.16.245, 10.90.0.12 ]		addresses: [ 10.90.16.245, 10.90.0.12 ]

Imre: /* Misc */

2025-08-17T12:38:01Z

Misc

@@ 36. rida: / 36. rida: @@
 # sysctl -w net.ipv4.conf.ens18.arp_ignore=1
 # sysctl -w net.ipv4.conf.ens18.arp_announce=2
 </pre>

Imre – 17. august 2025, kell 12:36

2025-08-17T12:36:21Z

←Vanem redaktsioon		Redaktsioon: 17. august 2025, kell 15:36
30. rida:		30. rida:

	TODO		TODO
		+
		+	===Misc===
		+
		+	<pre>
		+	# sysctl -w net.ipv4.conf.ens18.arp_ignore=1
		+	# sysctl -w net.ipv4.conf.ens18.arp_announce=2
		+	</pre>

	===Kasulikud lisamatejalid===		===Kasulikud lisamatejalid===

Imre – 16. august 2025, kell 11:59

2025-08-16T11:59:58Z

←Vanem redaktsioon		Redaktsioon: 16. august 2025, kell 14:59
22. rida:		22. rida:

	===ans-node-02 seadistus===		===ans-node-02 seadistus===
		+
		+	TODO
		+
		+	===Lahenduse opereerimine===
		+
		+	====Tsoonide sisu kontrollimine====

	TODO		TODO