Fully automated DNSSEC with BIND 9.16

[David Carvalho]

Hello and thank you for the reply.
I can confirm my current dns servers have already EPEL repo enabled and jemalloc package is available.
I'll setup my test machine accordingly to be able to install BIND 9.18. Will it also provide named-chroot (is it really necessary?)
Thanks!
David


-----Original Message-----
From: Anand Buddhdev <anandb at ripe.net> 
Sent: 13 April 2023 16:48
To: David Carvalho <david at di.ubi.pt>
Cc: 'Bind Users Mailing List' <bind-users at lists.isc.org>
Subject: Re: Fully automated DNSSEC with BIND 9.16

On 13/04/2023 17:17, David Carvalho via bind-users wrote:

Hi David,

> Hello and thanks for the reply.
> I enabled this repo in Oracle Linux 8 with: dnf copr enable isc/bind
> 
> Then  I tried to install (dnf install isc-bind) but I got:
> Error:
>   Problem: package isc-bind-1:2-3.el8.x86_64 requires isc-bind-bind, but none of the providers can be installed
>    - package isc-bind-bind-9.18.13-1.1.el8.x86_64 requires libbind9-9.18.13.so()(64bit), but none of the providers can be installed
>    - package isc-bind-bind-9.18.13-1.1.el8.x86_64 requires libdns-9.18.13.so()(64bit), but none of the providers can be installed
>    - package isc-bind-bind-9.18.13-1.1.el8.x86_64 requires libisc-9.18.13.so()(64bit), but none of the providers can be installed
>    - package isc-bind-bind-9.18.13-1.1.el8.x86_64 requires libisccc-9.18.13.so()(64bit), but none of the providers can be installed
>    - package isc-bind-bind-9.18.13-1.1.el8.x86_64 requires libisccfg-9.18.13.so()(64bit), but none of the providers can be installed
>    - package isc-bind-bind-9.18.13-1.1.el8.x86_64 requires libns-9.18.13.so()(64bit), but none of the providers can be installed
>    - package isc-bind-bind-9.18.13-1.1.el8.x86_64 requires isc-bind-bind-libs = 9.18.13, but none of the providers can be installed
>    - conflicting requests
>    - nothing provides libjemalloc.so.2()(64bit) needed by 
> isc-bind-bind-libs-9.18.13-1.1.el8.x86_64
> (try to add '--skip-broken' to skip uninstallable packages or 
> '--nobest' to use not only best candidate packages)

BIND 9.18 and newer require jemalloc, but this package isn't part of Redhat base. You also need to enable the EPEL repository for this.

With Oracle Linux, there are 2 different EPELs available. Oracle's own rebuild of EPEL packages, and the Fedora EPEL. My personal preference is the Fedora EPEL repo, which you can install with:

dnf -y install
https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm

Then you should be able to install the ISC BIND packages.

Regards,
Anand