<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Are there any plans to support mysql backend in the future? Currently working on a migration plan from 1.4 -> 2.1 (RHEL6 -> RHEL8 as well), we’ve always used compiled versions of OpenDNSSEC given the lack of builtin support for MySQL backend in rpm’s (EPEL etc.)<div class=""><br class=""></div><div class="">-Paul<br class=""><div class="">
<div style="font-family: Verdana; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><span style="font-family: monospace; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; widows: 1; background-color: rgb(255, 255, 255);" class=""><br class="Apple-interchange-newline">--</span><span style="font-family: monospace; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; widows: 1; background-color: rgb(255, 255, 255);" class=""> </span></div><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><span style="font-family: monospace; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; widows: 1; background-color: rgb(255, 255, 255);" class="">Paul Duffy</span><br style="font-family: monospace; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; widows: 1;" class=""><span style="font-family: monospace; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; widows: 1; background-color: rgb(255, 255, 255);" class="">Network Operations</span><br style="font-family: monospace; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; widows: 1;" class=""><span style="font-family: monospace; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; widows: 1; background-color: rgb(255, 255, 255);" class="">IE Domain Registry CLG</span><br style="font-family: monospace; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; widows: 1;" class=""><span style="font-family: monospace; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; widows: 1; background-color: rgb(255, 255, 255);" class="">Tel: +353 (1) 2365416</span><br style="font-family: monospace; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; widows: 1;" class=""><span style="font-family: monospace; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; widows: 1; background-color: rgb(255, 255, 255);" class="">Fax: +353 (1) 2300365</span><br style="font-family: monospace; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; widows: 1;" class=""><span style="font-family: monospace; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; widows: 1; background-color: rgb(255, 255, 255);" class="">Web: </span><span class="Object" id="OBJ_PREFIX_DWT98" style="color: rgb(0, 0, 139); cursor: pointer; font-family: monospace; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; widows: 1;"><span class="Object" id="OBJ_PREFIX_DWT99" style="cursor: pointer;"><a href="http://www.iedr.ie/" class="">www.iedr.ie</a></span></span></div><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><br class=""></div></div></div></div></div></div><div style="font-family: Verdana; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><br class=""></div></div></div><br class="Apple-interchange-newline" style="font-family: Verdana; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);"><span style="font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: monospace; widows: 1; background-color: rgb(255, 255, 255);" class="">------------------------------------------------------------------------------------</span><br style="font-family: Verdana; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);" class=""><div style="font-family: Verdana; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);" class=""><pre class="moz-signature" cols="72"><div style="font-family: Verdana; white-space: normal; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><span style="font-family: monospace; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; widows: 1; background-color: rgb(255, 255, 255);" class="">Registered Office: Fourth Floor, Block 2, Harbour Square,</span><br style="font-family: monospace; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; widows: 1;" class=""><span style="font-family: monospace; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; widows: 1; background-color: rgb(255, 255, 255);" class="">Dun Laoghaire, Co. Dublin. Registered in Ireland. No: 315315</span><br style="font-family: monospace; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; widows: 1;" class=""><span style="font-family: monospace; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; widows: 1; background-color: rgb(255, 255, 255);" class="">------------------------------------------------------------------------------------</span><br style="font-family: monospace; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; widows: 1;" class=""><span style="font-family: monospace; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; widows: 1; background-color: rgb(255, 255, 255);" class="">------------------------------------------------------------------------------------</span><br style="font-family: monospace; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; widows: 1;" class=""><span style="font-family: monospace; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; widows: 1; background-color: rgb(255, 255, 255);" class="">The enclosed document is CONFIDENTIAL to addressee and</span><br style="font-family: monospace; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; widows: 1;" class=""><span style="font-family: monospace; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; widows: 1; background-color: rgb(255, 255, 255);" class="">IE Domain Registry Ltd. The intended addressee is NOT</span><br style="font-family: monospace; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; widows: 1;" class=""><span style="font-family: monospace; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; widows: 1; background-color: rgb(255, 255, 255);" class="">AUTHORISED to copy, distribute, disclose or otherwise use</span><br style="font-family: monospace; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; widows: 1;" class=""><span style="font-family: monospace; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; widows: 1; background-color: rgb(255, 255, 255);" class="">the information disclosed. Please also note that this</span><br style="font-family: monospace; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; widows: 1;" class=""><span style="font-family: monospace; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; widows: 1; background-color: rgb(255, 255, 255);" class="">information should not be edited or redistributed in any way.</span><br style="font-family: monospace; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; widows: 1;" class=""><span style="font-family: monospace; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; widows: 1; background-color: rgb(255, 255, 255);" class="">------------------------------------------------------------------------------------</span></div><div class=""><span style="font-family: monospace; font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; widows: 1; background-color: rgb(255, 255, 255);" class=""><br class=""></span></div></pre></div><br class="Apple-interchange-newline" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Verdana; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><br class="Apple-interchange-newline">
</div>
<div><br class=""><blockquote type="cite" class=""><div class="">On 5 Jan 2020, at 19:24, Paul Wouters via Opendnssec-user <<a href="mailto:opendnssec-user@lists.opendnssec.org" class="">opendnssec-user@lists.opendnssec.org</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">[CAUTION: EXTERNAL EMAIL. This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.]<br class=""><br class="">Hi,<br class=""><br class="">I've created fedora31/rawhide RPMS as the first step in supporting<br class="">migration from 1.4 to 2.1. I did encounter a number of issues trying<br class="">to support this. Before I push this into rawhide, I would like to see<br class="">if anyone is able to test this for me. It is important that this testing<br class="">only be done on a COPY of your real 1.4 production system. Note that<br class="">this only supports sqlite, not mysql, as that is the method used for the<br class="">rpms shipped with fedora/RHEL that I need to support.<br class=""><br class="">RPMS, including SRPM if you want to recompile this for rhel/centos 7/8:<br class=""><br class=""><a href="https://nohats.ca/ftp/opendnssec/migration/" class="">https://nohats.ca/ftp/opendnssec/migration/</a><br class=""><br class=""><br class="">The issues encountered:<br class=""><br class="">1) ods-migrate segfaulting<br class=""><br class="">Not entirely sure when/how this occurs, probably with an xml file is not<br class="">as it expceted it to be?<br class=""><br class="">2) no easy way to detect a kasp database has been migrated<br class=""><br class="">To work around this, I modified sqlite_convert.sql and added:<br class=""><br class="">-- For rpm based systems to see if db was migrated already. store opendnssec major minor version<br class="">CREATE TABLE rpm_migration (<br class=""> major INTEGER,<br class=""> minor INTEGER<br class="">);<br class="">INSERT INTO rpm_migration VALUES(2, 1);<br class=""><br class="">Then the rpm %post phase can check for this to see if it still needs to<br class="">migrate the kasp database or not. It would be nice if upstream adopts<br class="">something similar to this approach.<br class=""><br class="">3) the migration scripts called other scripts without paths.<br class=""><br class="">I change the paths during build now, but its pretty hacky. Perhaps<br class="">attempt to not write various split sql files and merge it all into one.<br class="">(example: find_problematic_zones.sql, but also the SCHEMA= variables)<br class=""><br class="">4) find_problematic_zones issue ?<br class=""><br class="">I'm not sure why just migrating the database would lead to issues. It<br class="">should just copy whatever real state is there? For me, this caused<br class="">issues because I had a few zones waiting on ds-seen. Why can't they not<br class="">be in the new databse in the same waiting on ds-seen state? Aborting<br class="">the migration is the worst thing to do, as I cannot have the new rpm<br class="">installed and the database reverted to the old one.<br class=""><br class="">5) <Interval> barfing<br class=""><br class="">It would be REALLY useful to just ignore it and not blow up on this.<br class="">Again, this creates a big problem as I now have to hack up the<br class="">existing configuration files and automatic downgrading on failure<br class="">becomes basically impossible. Why not just ignore it :(<br class=""><br class="">6) confusing about location enforcer socket?<br class=""><br class="">I have some re-start issues due to changes socket locations it seems.<br class="">On a note, enforcer's socket is called enforcer.sock but ods-signer's<br class="">sock is not called signer.sock but engine.sock ? Not sure why :P<br class=""><br class="">7) ods-ksmutil is gone<br class=""><br class="">It took me a bit to figure out this is now done by ods-enforcer. A stub<br class="">man page or alias or something would have been nice.<br class=""><br class=""><br class="">I tested this migration on a copy of my production server. That server has the<br class="">additional problem that 1.4 software errors are causing it to generate<br class="">1 new key per enforcer interval, something that has been going on likely<br class="">for years, and throwing an error:<br class=""><br class="">Jan 5 12:50:16 ns0 ods-enforcerd: Not enough keys to satisfy zsk policy for zone: chaishinyu.com. keys_to_allocate(1) = keys_needed(1) - (keys_available(1) - keys_pending_retirement(1))<br class="">Jan 5 12:50:16 ns0 ods-enforcerd: Tried to allocate 1 keys, failed on allocating key number 1<br class="">Jan 5 12:50:16 ns0 ods-enforcerd: ods-enforcerd will create some more keys on its next run<br class=""><br class="">As a result, my install has thousands or millions of keys and just listing<br class="">these from softhsm on my laptop took more then 30 minutes, when I had<br class="">to kill it because I ran out of battery. I wish there was a method to<br class="">export only the "known" keys to opendnssec and start a fresh new softhsm<br class="">with just those. That could then also be used as part of the migration<br class="">in case other 1.4.x installs have suffered the same bitrot as mine.<br class=""><br class="">Paul<br class="">_______________________________________________<br class="">Opendnssec-user mailing list<br class="">Opendnssec-user@lists.opendnssec.org<br class="">https://lists.opendnssec.org/mailman/listinfo/opendnssec-user<br class=""></div></div></blockquote></div><br class=""></div></body></html>