Configure Chroot Environment
If you’d like to configure Chroot Environment for named, Set like follows.
After setting Chroot environment, configuration files are placed under [/var/named/chroot].
[named.conf] is placed under [/var/named/chroot/etc/named.conf], zone files are placed [/var/named/chroot/var/named/***].
When modify settings, Change them under [/var/named/chroot] files.
[root@dlp ~]# yum -y install bind-chroot
[root@dlp ~]# /usr/libexec/setup-named-chroot.sh /var/named/chroot on
[root@dlp ~]# systemctl disable --now named
[root@dlp ~]# systemctl enable --now named-chroot
Created symlink /etc/systemd/system/multi-user.target.wants/named-chroot.service → /usr/lib/systemd/system/named-chroot.service.
[root@dlp ~]# ll /var/named/chroot/etc
total 708
drwxr-x---. 3 root named 23 Feb 24 11:30 crypto-policies
-rw-r--r--. 2 root root 318 Oct 27 06:44 localtime
drwxr-x---. 2 root named 6 Feb 18 08:08 named
-rw-r-----. 1 root named 2373 Feb 24 11:24 named.conf
-rw-r-----. 1 root named 1029 Feb 18 08:08 named.rfc1912.zones
-rw-r--r--. 1 root named 1070 Feb 18 08:08 named.root.key
drwxr-x---. 3 root named 25 Feb 24 11:30 pki
-rw-r--r--. 1 root root 6568 Sep 10 2018 protocols
-rw-r-----. 1 root named 100 Feb 24 11:16 rndc.key
-rw-r--r--. 1 root root 692252 May 15 2020 services
[root@dlp ~]# ll /var/named/chroot/var/named
total 24
-rw-r--r--. 1 root root 313 Feb 24 11:14 0.0.10.db
drwxr-x---. 7 root named 61 Feb 24 11:30 chroot
drwxrwx---. 2 named named 23 Feb 24 11:16 data
drwxrwx---. 2 named named 108 Feb 24 11:30 dynamic
-rw-r-----. 1 root named 2253 Feb 18 08:08 named.ca
-rw-r-----. 1 root named 152 Feb 18 08:08 named.empty
-rw-r-----. 1 root named 152 Feb 18 08:08 named.localhost
-rw-r-----. 1 root named 168 Feb 18 08:08 named.loopback
drwxrwx---. 2 named named 6 Feb 18 08:07 slaves
-rw-r--r--. 1 root root 404 Feb 24 11:26 srv.world.lan
摘自 BIND : Configure Chroot Environment · Server World,版权归原作者所有,此处仅作个人学习整理。