5 Čen
2017
5 Čen
'17
23:12
Hello Knot DNS users,
CZ.NIC has just released the 2.5.0 version of Knot DNS with the
following features:
- New LMDB-based KASP database, which no longer uses JSON files and
provides
better performance and robustness. With this change, the keymgr syntax
has been
redesigned and new pykeymgr utility was introduced for migration from
the previous version.
- Automatic DNSSEC signing newly supports KSK rollover and optional
shared KSK keys.
During the key submission, CDS and CDNSKEY records are generated. A
periodical checking
for new DS at the masters or a maximum time interval can be configured
for automatic
finalization of the rollover or by manual calling the
zone-ksk-submitted knotc command.
- Completely new query module API with dynamic loading functionality.
So, for example, the dnstap module can be a separate package in a
repository.
- Zone events freeze and thaw knotc operations, which allow reliable
manual zone
modification along with possible automatic modifications.
- Zone journal can be used to store full zone contents beside the
subsequent zone
differences if the zone file synchronization is disabled. This
configuration is especially
interesting on slave servers. Manual zone flush is still possible with
an optional
destination directory parameter.
Full changelog:
https://gitlab.labs.nic.cz/labs/knot/raw/v2.5.0/NEWS
Source code:
https://secure.nic.cz/files/knot-dns/knot-2.5.0.tar.xz
https://secure.nic.cz/files/knot-dns/knot-2.5.0.tar.xz.asc
Documentation:
https://www.knot-dns.cz/docs/2.5/html/
In addition to that, Knot DNS 2.4.4 patch release has been released,
including some
event timing and journal fixes.
Full changelog:
https://gitlab.labs.nic.cz/labs/knot/raw/v2.4.4/NEWS
Source code:
https://secure.nic.cz/files/knot-dns/knot-2.4.4.tar.xz
https://secure.nic.cz/files/knot-dns/knot-2.4.4.tar.xz.asc
Regards,
Daniel
7 Čen
7 Čen
11:08
Le lundi 05 juin 2017 à 23:12 +0200, daniel.salzman(a)nic.cz a écrit :
Hello Knot DNS users,
CZ.NIC has just released the 2.5.0 version of Knot DNS with the
following features:
[...]
Hello,
Thanks for your work on knot.
I upgraded my server today, and run in this error while deploying new
knot version :
Setting up knot (2.5.0-1+0~20170606134012.23+jessie~1.gbpa3bc12) ...
dpkg: error: unknown option --compare-version
Type dpkg --help for help about installing and deinstalling packages [*];
Use 'apt' or 'aptitude' for user-friendly package management;
Type dpkg -Dhelp for a list of dpkg debug flag values;
Type dpkg --force-help for a list of forcing options;
Type dpkg-deb --help for help about manipulating *.deb files;
Options marked [*] produce a lot of output - pipe it through 'less' or
'more' !
I guess there was a migration script that didn't run, as server didn't
restart afterward (because of mod-synth_record renaming)
I also guess I'll have to migrate my dnssec configuration ? Is there a
migration guide ?
--
Bastien Durel
14:16
Bastien,
this should already be fixed in updated package, and the migration should be automatic for
new installs.
I would recommend installing:
2.5.0-2+....
it should be available in the repository in the couple of minutes:
https://howl.labs.nic.cz/jenkins/view/Knot/job/knot_knot-binaries/25/ (when all dots turn
to solid blue, it's finished).
Cheers,
Ondrej
--
Ondřej Surý -- Technical Fellow
--------------------------------------------
CZ.NIC, z.s.p.o. -- Laboratoře CZ.NIC
Milesovska 5, 130 00 Praha 3, Czech Republic
mailto:ondrej.sury@nic.cz https://nic.cz/
--------------------------------------------
----- Original Message -----
From: "Bastien Durel"
<bastien(a)durel.org>
To: "knot-dns-users" <knot-dns-users(a)lists.nic.cz>
Sent: Wednesday, 7 June, 2017 11:08:21
Subject: Re: [knot-dns-users] Knot DNS 2.5.0 and 2.4.4 releases
Le lundi 05 juin 2017 à 23:12 +0200,
daniel.salzman(a)nic.cz a écrit :
Hello Knot DNS users,
CZ.NIC has just released the 2.5.0 version of Knot DNS with the
following features:
[...]
Hello,
Thanks for your work on knot.
I upgraded my server today, and run in this error while deploying new
knot version :
Setting up knot (2.5.0-1+0~20170606134012.23+jessie~1.gbpa3bc12) ...
dpkg: error: unknown option --compare-version
Type dpkg --help for help about installing and deinstalling packages [*];
Use 'apt' or 'aptitude' for user-friendly package management;
Type dpkg -Dhelp for a list of dpkg debug flag values;
Type dpkg --force-help for a list of forcing options;
Type dpkg-deb --help for help about manipulating *.deb files;
Options marked [*] produce a lot of output - pipe it through 'less' or
'more' !
I guess there was a migration script that didn't run, as server didn't
restart afterward (because of mod-synth_record renaming)
I also guess I'll have to migrate my dnssec configuration ? Is there a
migration guide ?
--
Bastien Durel
_______________________________________________
knot-dns-users mailing list
knot-dns-users(a)lists.nic.cz
https://lists.nic.cz/cgi-bin/mailman/listinfo/knot-dns-users
14:25
An updated build was issued here:
https://howl.labs.nic.cz/jenkins/view/Knot/job/knot_knot-binaries/26/
--
Ondřej Surý -- Technical Fellow
--------------------------------------------
CZ.NIC, z.s.p.o. -- Laboratoře CZ.NIC
Milesovska 5, 130 00 Praha 3, Czech Republic
mailto:ondrej.sury@nic.cz https://nic.cz/
--------------------------------------------
----- Original Message -----
From: "Ondřej Surý"
<ondrej.sury(a)nic.cz>
To: "Bastien Durel" <bastien(a)durel.org>
Cc: "knot-dns-users" <knot-dns-users(a)lists.nic.cz>
Sent: Wednesday, 7 June, 2017 14:16:00
Subject: Re: [knot-dns-users] Knot DNS 2.5.0 and 2.4.4 releases
Bastien,
this should already be fixed in updated package, and the migration should be
automatic for new installs.
I would recommend installing:
2.5.0-2+....
it should be available in the repository in the couple of minutes:
https://howl.labs.nic.cz/jenkins/view/Knot/job/knot_knot-binaries/25/ (when all
dots turn to solid blue, it's finished).
Cheers,
Ondrej
--
Ondřej Surý -- Technical Fellow
--------------------------------------------
CZ.NIC, z.s.p.o. -- Laboratoře CZ.NIC
Milesovska 5, 130 00 Praha 3, Czech Republic
mailto:ondrej.sury@nic.cz https://nic.cz/
--------------------------------------------
----- Original Message -----
From: "Bastien Durel"
<bastien(a)durel.org>
To: "knot-dns-users" <knot-dns-users(a)lists.nic.cz>
Sent: Wednesday, 7 June, 2017 11:08:21
Subject: Re: [knot-dns-users] Knot DNS 2.5.0 and 2.4.4 releases
> Le lundi 05 juin 2017 à 23:12 +0200, daniel.salzman(a)nic.cz a écrit :
>> Hello Knot DNS users,
>>
>> CZ.NIC has just released the 2.5.0 version of Knot DNS with the
>> following features:
>>
>>
> [...]
>
> Hello,
>
> Thanks for your work on knot.
>
> I upgraded my server today, and run in this error while deploying new
> knot version :
>
> Setting up knot (2.5.0-1+0~20170606134012.23+jessie~1.gbpa3bc12) ...
> dpkg: error: unknown option --compare-version
>
> Type dpkg --help for help about installing and deinstalling packages [*];
> Use 'apt' or 'aptitude' for user-friendly package management;
> Type dpkg -Dhelp for a list of dpkg debug flag values;
> Type dpkg --force-help for a list of forcing options;
> Type dpkg-deb --help for help about manipulating *.deb files;
>
> Options marked [*] produce a lot of output - pipe it through 'less' or
'more' !
>
> I guess there was a migration script that didn't run, as server didn't
> restart afterward (because of mod-synth_record renaming)
>
> I also guess I'll have to migrate my dnssec configuration ? Is there a
> migration guide ?
>
> --
> Bastien Durel
> _______________________________________________
> knot-dns-users mailing list
> knot-dns-users(a)lists.nic.cz
> https://lists.nic.cz/cgi-bin/mailman/listinfo/knot-dns-users
14:48
Hi again.
I reverted to 2.4.3 after realising the 2.5 replaced the KSK by a new,
unpublished one, breaking the zone.
Re-installing the 2.4.3 witout changeing any configuration (except for
mod-synthrecord renaming) put the right KSK in use.
--
Bastien
15:20
Hi Bastien,
this should definitely not happen. Could you please share more details either here or
privately to knot-dns(a)labs.nic.cz?
Cheers,
Ondrej
--
Ondřej Surý -- Technical Fellow
--------------------------------------------
CZ.NIC, z.s.p.o. -- Laboratoře CZ.NIC
Milesovska 5, 130 00 Praha 3, Czech Republic
mailto:ondrej.sury@nic.cz https://nic.cz/
--------------------------------------------
----- Original Message -----
From: "Bastien Durel"
<bastien(a)durel.org>
To: "knot-dns-users" <knot-dns-users(a)lists.nic.cz>
Sent: Wednesday, 7 June, 2017 14:48:43
Subject: Re: [knot-dns-users] Knot DNS 2.5.0 and 2.4.4 releases
Hi again.
I reverted to 2.4.3 after realising the 2.5 replaced the KSK by a new,
unpublished one, breaking the zone.
Re-installing the 2.4.3 witout changeing any configuration (except for
mod-synthrecord renaming) put the right KSK in use.
--
Bastien
_______________________________________________
knot-dns-users mailing list
knot-dns-users(a)lists.nic.cz
https://lists.nic.cz/cgi-bin/mailman/listinfo/knot-dns-users
15:24
JFTR This might be related to the fact that 2.5.0-1 package contained error that skipped
calling pykeymgr.
Could you try removing *.mdb from your kasp-db directory and installing 2.5.0-2 (or
2.5.1-1 later today).
Cheers,
Ondrej
--
Ondřej Surý -- Technical Fellow
--------------------------------------------
CZ.NIC, z.s.p.o. -- Laboratoře CZ.NIC
Milesovska 5, 130 00 Praha 3, Czech Republic
mailto:ondrej.sury@nic.cz https://nic.cz/
--------------------------------------------
----- Original Message -----
From: "Ondřej Surý"
<ondrej.sury(a)nic.cz>
To: "Bastien Durel" <bastien(a)durel.org>
Cc: "knot-dns-users" <knot-dns-users(a)lists.nic.cz>
Sent: Wednesday, 7 June, 2017 15:20:27
Subject: Re: [knot-dns-users] Knot DNS 2.5.0 and 2.4.4 releases
Hi Bastien,
this should definitely not happen. Could you please share more details either
here or privately to knot-dns(a)labs.nic.cz?
Cheers,
Ondrej
--
Ondřej Surý -- Technical Fellow
--------------------------------------------
CZ.NIC, z.s.p.o. -- Laboratoře CZ.NIC
Milesovska 5, 130 00 Praha 3, Czech Republic
mailto:ondrej.sury@nic.cz https://nic.cz/
--------------------------------------------
----- Original Message -----
From: "Bastien Durel"
<bastien(a)durel.org>
To: "knot-dns-users" <knot-dns-users(a)lists.nic.cz>
Sent: Wednesday, 7 June, 2017 14:48:43
Subject: Re: [knot-dns-users] Knot DNS 2.5.0 and 2.4.4 releases
> Hi again.
>
> I reverted to 2.4.3 after realising the 2.5 replaced the KSK by a new,
> unpublished one, breaking the zone.
> Re-installing the 2.4.3 witout changeing any configuration (except for
> mod-synthrecord renaming) put the right KSK in use.
>
> --
> Bastien
> _______________________________________________
> knot-dns-users mailing list
> knot-dns-users(a)lists.nic.cz
> https://lists.nic.cz/cgi-bin/mailman/listinfo/knot-dns-users
2538
days inactive
2540
days old
6 comments
3 participants
participants (3)
-
Bastien Durel -
daniel.salzman＠nic.cz -
Ondřej Surý