dnssec-keygen not available in Bind9.16-utils package?

[Petr Menšík]

I have tried it on fresh RHEL 8.7.0, which should be similar to what you 
get on Oracle Linux 8. Just already released RHEL.

$ dnf install bind9.16 -y

# installs also recommended bind9.16-utils.

$ dnf swap bind9.16-utils bind-utils

Replaces successfully only utilities with older version

$ rpm -q bind9.16 bind-utils

bind9.16-9.16.23-0.9.el8.1.x86_64
bind-utils-9.11.36-5.el8_7.2.x86_64

Result is the new named.service with older utilities. It should not 
conflict this way, but have to use dnf swap. I have made sure both 
bind-libs and bind9.16-libs can be installed at the same time. This is a 
result of that. But installing new bind9.16-dnssec-utils from CRB 
repository is still a preferred method. I am quite confident Oracle does 
not modify my work done on bind, they just rebuild SRPM.

On 3/24/23 10:22, David Carvalho wrote:
>
> Thank you so much for your help.
>
> Unfortunately it seems bind-utils 9.11 and 9.16 can not co-exist (at 
> least in Oracle Linux 8). I had problems with dependencies and didn’t 
> force anything until having more information.
>
> Thanks once again!
>
> Regards
>
> David Carvalho
>
> *From:*bind-users <bind-users-bounces at lists.isc.org> *On Behalf Of 
> *Petr Menšík
> *Sent:* 24 March 2023 01:09
> *To:* bind-users at lists.isc.org
> *Subject:* Re: dnssec-keygen not available in Bind9.16-utils package?
>
> Oh, correction. Those were published, but in wrong repository. If you 
> enable CodeReady Builder (CRB) repository, you should be able to 
> install it even with current version. Not sure what is official name 
> on Oracle Linux, use "dnf repolist --all" command to find the name. 
> They are called powertools on CentOS Stream 8.
>
> On RHEL 8 enable it by command:
>
> |subscription-manager repos --enable 
> codeready-builder-for-rhel-8-x86_64-rpms|
>
> On 3/24/23 01:43, Petr Menšík wrote:
>
>     dnssec utilities are in bind9.16-dnssec-utils, which by mistake
>     stayed internal only package. We have built them, but not
>     published them. It would be moved into public repository once RHEL
>     8.8.0 is released, tracked under bug #2115322 [1]. It should be
>     already available in CentOS Stream 8.
>
>     I am sorry for the inconvenience, this issue were missed during
>     our testing. It should be possible to install bind-utils from bind
>     9.11 together with bind9.16 server until that is fixed. Unless you
>     depend on more recent features in bind9.16-utils, it might help in
>     the mean time.
>
>     Regards,
>     Petr
>
>     1. https://bugzilla.redhat.com/show_bug.cgi?id=2115322
>
>     On 3/20/23 13:31, David Carvalho via bind-users wrote:
>
>         Hello, good morning.
>
>         I’m trying to setup DNNSEC and I’ve been using Bind9.16
>         packages available in Oracle Linux 8. Somehow there are also
>         “Bind” packages, which default to 9.11 version. Being a new
>         installation I went for 9.16. The problem now is that
>         dnssec-keygen seems to be only available in version 9.11, and
>         if I try to install I get problems with dependencies .
>
>         Does anyone have some experience with this?
>
>         Kind regards
>
>         David
>
>     -- 
>
>     Petr Menšík
>
>     Software Engineer, RHEL
>
>     Red Hat,https://www.redhat.com/
>
>     PGP: DFCF908DB7C87E8E529925BC4931CA5B6C9FC5CB
>
> -- 
> Petr Menšík
> Software Engineer, RHEL
> Red Hat,https://www.redhat.com/
> PGP: DFCF908DB7C87E8E529925BC4931CA5B6C9FC5CB

-- 
Petr Menšík
Software Engineer, RHEL
Red Hat,https://www.redhat.com/
PGP: DFCF908DB7C87E8E529925BC4931CA5B6C9FC5CB
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20230324/36e1dcc9/attachment-0001.htm>