[prev in list] [next in list] [prev in thread] [next in thread]
List: djbdns
Subject: Re: dnscache in Solaris Zone
From: "Daniel Rechsteiner" <drechsteiner () goeast ! ch>
Date: 2007-11-23 15:51:09
Message-ID: aa15d6fa3b989c4d88fe601f3b9eb588 () mail ! goeast ! ch
[Download RAW message or body]
Thanks for the hints.
I assume those devices need to be inside the chroot jail, but as it is working here I \
also assume that this was only necessary on older Solaris versions. The note below \
says "dnscache and tinydns would stop immediately under Solaris" and this is not the \
case here. I also checked some other chroot'ed software I have on Solaris 10 boxes. \
They also need some devices (like /dev/random) but not tcp or udp.
I had some problems stopping the services using svscan, but this could also be \
unrelated. Anyway, dnscache has been happily working for 24 hours under quite heavy \
load now, so I assume it will do that also in the future.
Daniel
> > dnscache-conf dnscache dnslog /etc/dnscache 192.168.1.1 I get
> > dnscache-conf: fatal: unable to create device
> > /etc/dnscache/root/dev/tcp: permission denied
> >
> > In Solaris Zones mknod is not allowed.
>
> If you look in dnscache-conf.c, there are also some lines referencing
> /dev/tcp added to /etc/netconfig in the root. This is clearly some
> required Solaris magic (I have no idea what the lines
> actually do); you
> might also try asking on a general Solaris list.
>
> > Apart from that all the necessary files in /etc/dnscache are created
> > and dnscache is working. Also svc is working. Now I wonder
> what those
> > devices are normally used for. Anyone got a hint? Do I have
> to expect
> > problems without those devices?
>
> Probably. From CHANGES:
>
> 20000106
> port: Solaris needs /dev/udp, not just /dev/tcp. impact:
> dnscache and tinydns would stop immediately under
> Solaris. fix: create /dev/udp in configure; and have
> tinydns create socket before chroot. tnx Louis Theran.
>
> -Peff
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic