Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Get Rid of `chroot` named (DNSonly)

Discussion in 'Bind/DNS/Nameserver' started by Dmitry M., Nov 7, 2009.

  1. Dmitry M.

    Dmitry M. Active Member

    Joined:
    Dec 4, 2003
    Messages:
    40
    Likes Received:
    0
    Trophy Points:
    156
    Hi,

    Is there any way to get rid of new named chroot system?
    I mean I want to make all scripts (/etc/init.d/named, check-conf etc.) start named without key '-t /var/named/chroot'

    I run my own DNS cluster based on cpanel DNS only servers, my new DNS server (chroot setup) uses almost 2 times more RAM comparing to another 2 my DNS servers that uses older DNSonly setup (without chroot securing).

    New server is bind 9.3.6, old servers bind 9.3.2

    I do not use cpanel DNS synchronization because it doesn't work with 200k+ DNS zones, that is why chroot breaks my scripts also, but it isn't the real problem. The main problem is the memory.

    Please advise.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  2. xerophyte

    xerophyte Well-Known Member

    Joined:
    Mar 16, 2003
    Messages:
    216
    Likes Received:
    0
    Trophy Points:
    166
    Location:
    Canada
    rpm -qa | grep -i bind

    if you see chroot bind in there, just remove it

    hope that helps
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. Dmitry M.

    Dmitry M. Active Member

    Joined:
    Dec 4, 2003
    Messages:
    40
    Likes Received:
    0
    Trophy Points:
    156
    Its standard DNSonly setup, no manual updates

    # rpm -qa | grep -i bind
    bind-devel-9.3.6-4.P1.el5
    bind-libs-9.3.6-4.P1.el5
    ypbind-1.19-12.el5
    bind-utils-9.3.6-4.P1.el5
    bind-devel-9.3.6-4.P1.el5
    bind-9.3.6-4.P1.el5
    bind-libs-9.3.6-4.P1.el5
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. xerophyte

    xerophyte Well-Known Member

    Joined:
    Mar 16, 2003
    Messages:
    216
    Likes Received:
    0
    Trophy Points:
    166
    Location:
    Canada
    hmmm try commenting out

    cat /etc/sysconfig/named

    ROOTDIR=/var/named/chroot

    and /etc/init.d/named restart
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  5. Dmitry M.

    Dmitry M. Active Member

    Joined:
    Dec 4, 2003
    Messages:
    40
    Likes Received:
    0
    Trophy Points:
    156
    nice call!!!!

    ty a lot, it works like a charm.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice