dnssec-keygen not available in Bind9.16-utils package?

Fri Mar 24 11:10:13 UTC 2023

Brilliant!

Thank you so much!

Regards

David 

From: Petr Menšík <pemensik at redhat.com> 
Sent: 24 March 2023 11:05
To: David Carvalho <david at di.ubi.pt>; bind-users at lists.isc.org
Subject: Re: dnssec-keygen not available in Bind9.16-utils package?

I have tried it on fresh RHEL 8.7.0, which should be similar to what you get on Oracle Linux 8. Just already released RHEL.

$ dnf install bind9.16 -y

# installs also recommended bind9.16-utils.

$ dnf swap bind9.16-utils bind-utils

Replaces successfully only utilities with older version

$ rpm -q bind9.16 bind-utils

bind9.16-9.16.23-0.9.el8.1.x86_64
bind-utils-9.11.36-5.el8_7.2.x86_64

Result is the new named.service with older utilities. It should not conflict this way, but have to use dnf swap. I have made sure both bind-libs and bind9.16-libs can be installed at the same time. This is a result of that. But installing new bind9.16-dnssec-utils from CRB repository is still a preferred method. I am quite confident Oracle does not modify my work done on bind, they just rebuild SRPM.

On 3/24/23 10:22, David Carvalho wrote:

Thank you so much for your help.

Unfortunately it seems bind-utils 9.11 and 9.16 can not co-exist (at least in Oracle Linux 8). I had problems with dependencies and didn’t force anything until having more information.

Thanks once again!

Regards

David Carvalho

From: bind-users  <mailto:bind-users-bounces at lists.isc.org> <bind-users-bounces at lists.isc.org> On Behalf Of Petr Menšík
Sent: 24 March 2023 01:09
To: bind-users at lists.isc.org <mailto:bind-users at lists.isc.org> 
Subject: Re: dnssec-keygen not available in Bind9.16-utils package?

Oh, correction. Those were published, but in wrong repository. If you enable CodeReady Builder (CRB) repository, you should be able to install it even with current version. Not sure what is official name on Oracle Linux, use "dnf repolist --all" command to find the name. They are called powertools on CentOS Stream 8.

On RHEL 8 enable it by command:

subscription-manager repos --enable codeready-builder-for-rhel-8-x86_64-rpms

On 3/24/23 01:43, Petr Menšík wrote:

dnssec utilities are in bind9.16-dnssec-utils, which by mistake stayed internal only package. We have built them, but not published them. It would be moved into public repository once RHEL 8.8.0 is released, tracked under bug #2115322 [1]. It should be already available in CentOS Stream 8.

I am sorry for the inconvenience, this issue were missed during our testing. It should be possible to install bind-utils from bind 9.11 together with bind9.16 server until that is fixed. Unless you depend on more recent features in bind9.16-utils, it might help in the mean time.

Regards,
Petr

1. https://bugzilla.redhat.com/show_bug.cgi?id=2115322

On 3/20/23 13:31, David Carvalho via bind-users wrote:

Hello, good morning.

I’m trying to setup DNNSEC and I’ve been using Bind9.16 packages available in Oracle Linux 8. Somehow there are also “Bind” packages, which default to 9.11 version. Being a new installation I went for 9.16. The problem now is that dnssec-keygen seems to be only available in version 9.11, and if I try to install I get problems with dependencies .

Does anyone have some experience with this?

Kind regards

David

-- 
Petr Menšík
Software Engineer, RHEL
Red Hat, https://www.redhat.com/
PGP: DFCF908DB7C87E8E529925BC4931CA5B6C9FC5CB

-- 
Petr Menšík
Software Engineer, RHEL
Red Hat, https://www.redhat.com/
PGP: DFCF908DB7C87E8E529925BC4931CA5B6C9FC5CB

-- 
Petr Menšík
Software Engineer, RHEL
Red Hat, https://www.redhat.com/
PGP: DFCF908DB7C87E8E529925BC4931CA5B6C9FC5CB
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20230324/23a02120/attachment.htm>