zoneconf
9 years agozoneconf.in: Set up a temporary directory when signing. master
Mark Wooding [Thu, 26 Mar 2015 02:09:27 +0000 (02:09 +0000)]
zoneconf.in: Set up a temporary directory when signing.

Apparently it's needed sometimes.

9 years agozoneconf.in: Split out the temporary-directory machinery.
Mark Wooding [Thu, 26 Mar 2015 02:09:27 +0000 (02:09 +0000)]
zoneconf.in: Split out the temporary-directory machinery.

Also, don't mention its name more than once.

9 years agozoneconf.in: Expect zones to carry their own DS records.
Mark Wooding [Thu, 26 Mar 2015 01:06:16 +0000 (01:06 +0000)]
zoneconf.in: Expect zones to carry their own DS records.

11 years agozoneconf.in: Isolate our local variables from the configuration file.
Mark Wooding [Thu, 24 Jan 2013 09:56:48 +0000 (09:56 +0000)]
zoneconf.in: Isolate our local variables from the configuration file.

I had a signature failure after changing the configuration file caused
by variables set in the config file interfering with those in the
command procedure.  There are good reasons why `confspc-eval' uses
`uplevel'; but this situation is bad, so it wants fixing properly.

Introduce a new procedure `isolate' which exists largely so its
variables can be clobbered with impunity.

11 years agozoneconf.in (local-addresses-p): Set fake addresses in env var.
Mark Wooding [Wed, 23 Jan 2013 20:56:59 +0000 (20:56 +0000)]
zoneconf.in (local-addresses-p): Set fake addresses in env var.

It's useful to be able to test configurations away from the production
environment, but the `local-addresses-p' check causes the results to be
different.  To allow this kind of testing, set the environment variable
`ZONECONF_LOCAL_ADDRESSES' to a `:'-separated list of IP addresses, in
dotted-quad format: then these addresses and no others will be
considered local.

11 years agozoneconf.in: Support the `also-notify' variable.
Mark Wooding [Wed, 2 May 2012 18:23:03 +0000 (19:23 +0100)]
zoneconf.in: Support the `also-notify' variable.

This is currently a hopeless mess.

12 years agozoneconf.in: Allow control over query access.
Mark Wooding [Sat, 31 Mar 2012 20:04:36 +0000 (21:04 +0100)]
zoneconf.in: Allow control over query access.

Not generally useful except for special effects.  I have a special
effect.

12 years agozoneconf.in: More master-map hacking: !ADDR means ADDR!ADDR.
Mark Wooding [Wed, 14 Mar 2012 11:16:39 +0000 (11:16 +0000)]
zoneconf.in: More master-map hacking: !ADDR means ADDR!ADDR.

i.e., use ADDR as the master address, but never consider it local.

12 years agozoneconf: Awful kludge in `primary': masters never considered local.
Mark Wooding [Tue, 13 Mar 2012 16:17:28 +0000 (16:17 +0000)]
zoneconf: Awful kludge in `primary': masters never considered local.

A master address containing `!' is never considered to be local:
the address to the left is used by remote hosts; the address to the
right is used by local ones.

12 years agozoneconf.in: Fix the resign interval.
Mark Wooding [Thu, 1 Mar 2012 15:51:26 +0000 (15:51 +0000)]
zoneconf.in: Fix the resign interval.

The default is not to resign records if there's more than a quarter of
their lives left to live.  But that's about 12 hours, and there's no
guarantee they'll be resigned in less than 24 hours.  Require an extra
hour for slack.

12 years agozoneconf.in: Tidy up some message output.
Mark Wooding [Sat, 11 Feb 2012 14:47:38 +0000 (14:47 +0000)]
zoneconf.in: Tidy up some message output.

12 years agozoneconf.in: Don't sign zones if they're not meant to be signed.
Mark Wooding [Sat, 11 Feb 2012 14:47:01 +0000 (14:47 +0000)]
zoneconf.in: Don't sign zones if they're not meant to be signed.

12 years agozoneconf.in: Auto-DNSsec support for dynamic zones.
Mark Wooding [Sat, 11 Feb 2012 14:46:13 +0000 (14:46 +0000)]
zoneconf.in: Auto-DNSsec support for dynamic zones.

12 years agozoneconf.in: Executable, to match other scripts.
Mark Wooding [Sat, 11 Feb 2012 14:42:40 +0000 (14:42 +0000)]
zoneconf.in: Executable, to match other scripts.

12 years agozoneconf-install-*: Find `zoneconf' in the correct place.
Mark Wooding [Sat, 11 Feb 2012 14:39:46 +0000 (14:39 +0000)]
zoneconf-install-*: Find `zoneconf' in the correct place.

This means we have to substitute in them, so the Makefile hacking is
more significant than the actual code change.

12 years agoMajor overhaul. 1.0.0
Mark Wooding [Wed, 7 Dec 2011 01:46:02 +0000 (01:46 +0000)]
Major overhaul.

Turn this mess into a proper installable package.  Fixes various bugs
along the way.

12 years agobin/zoneconf: Reload zones after signing them.
Mark Wooding [Sun, 4 Dec 2011 22:00:27 +0000 (22:00 +0000)]
bin/zoneconf: Reload zones after signing them.

There are some other changes, too.

  * Move the program-running, output printing logic into `build-program'
    (rename it `run') because it's in too many places.

  * Avoid resigning a zone if we've done it already.

12 years agobin/zoneconf: Support for signed zones.
Mark Wooding [Sat, 3 Dec 2011 19:28:42 +0000 (19:28 +0000)]
bin/zoneconf: Support for signed zones.

Specify whether zones want signing, and in which views.  Something of
a major overhaul.

12 years agobin/zoneconf: Abstract out command substitution machinery.
Mark Wooding [Sat, 3 Dec 2011 19:26:48 +0000 (19:26 +0000)]
bin/zoneconf: Abstract out command substitution machinery.

12 years agobin/zoneconf: Write a reminder about how the various views work.
Mark Wooding [Sat, 3 Dec 2011 19:24:10 +0000 (19:24 +0000)]
bin/zoneconf: Write a reminder about how the various views work.

I keep forgetting.

12 years agobin/zoneconf: Fix preserving-config.
Mark Wooding [Sat, 3 Dec 2011 19:23:27 +0000 (19:23 +0000)]
bin/zoneconf: Fix preserving-config.

It didn't actually preserve anything: wrong upvar level.

12 years agobin/zoneconf: Fix merge-lists.
Mark Wooding [Sat, 3 Dec 2011 19:22:00 +0000 (19:22 +0000)]
bin/zoneconf: Fix merge-lists.

  * Don't remove a candidate which is first in multiple lists.

  * Actually use the pruned list.

12 years agobin/zoneconf: Close the output config files at the right time.
Mark Wooding [Mon, 29 Aug 2011 16:18:58 +0000 (17:18 +0100)]
bin/zoneconf: Close the output config files at the right time.

Otherwise they're still empty when we kick the nameserver.

12 years ago.userv/rc: Use the correct program for the `install' service.
Mark Wooding [Mon, 29 Aug 2011 13:26:52 +0000 (14:26 +0100)]
.userv/rc: Use the correct program for the `install' service.

12 years agozoneconf: Program for managing multi-viewed DNS configurations.
Mark Wooding [Fri, 5 Aug 2011 22:54:19 +0000 (23:54 +0100)]
zoneconf: Program for managing multi-viewed DNS configurations.

I'm sure I had another Git repository of this somewhere, but I'm blowed
if I can find it anywhere.  Oh, well: I don't think there was much
interesting history in it anyway.