1#!/bin/sh
2#
3# $NetBSD: named,v 1.28 2023/12/25 08:35:07 kre Exp $
4#
5
6# PROVIDE: named
7# REQUIRE: NETWORKING mountcritremote syslogd
8# BEFORE:  DAEMON
9# KEYWORD: chrootdir
10
11$_rc_subr_loaded . /etc/rc.subr
12
13name="named"
14rcvar=$name
15command="/usr/sbin/${name}"
16pidfile="/var/run/${name}/${name}.pid"
17start_precmd="named_precmd"
18extra_commands="reload"
19required_dirs="$named_chrootdir"	# if it is set, it must exist
20
21named_migrate()
22(
23	local src="$1"
24	local dst="$2$1"
25	echo "Migrating $src to $dst"
26	diff=false
27	cd "$src"
28	mkdir -p "$dst"
29	for f in $(find . -type f)
30	do
31		f="${f##./}"
32		case "$f" in
33		*/*)
34			ds="$(dirname "$f")"
35			dd="$dst/$ds"
36			mkdir -p "$dd"
37			chmod "$(stat -f "%p" "$ds" |
38			    sed -e 's/.*\([0-7][0-7][0-7][0-7]\)$/\1/g')" "$dd"
39			chown "$(stat -f %u:%g "$ds")" "$dd"
40			;;
41		*)
42			;;
43		esac
44		if [ -r "$dst/$f" ]
45		then
46			if ! cmp "$f" "$dst/$f"; then
47				diff=true
48			fi
49		else
50			cp -p "$f" "$dst/$f"
51		fi
52	done
53	if $diff; then
54		echo "Cannot complete migration because files are different"
55		echo "Run 'diff -r $src $dst' resolve the differences"
56	else
57		rm -fr "$src"
58		ln -s "$dst" "$src"
59	fi
60)
61
62copy_if_newer()
63{
64	local chrootdir="$1"
65	local dir="$2"
66	local file="$3"
67	if ! [ -x "${chrootdir}${dir}/${file}" ] ||
68	     [ "${chrootdir}${dir}/${file}" -ot "${dir}/${file}" ]; then
69		rm -f "${chrootdir}${dir}/${file}"
70		cp -p "${dir}/${file}" "${chrootdir}${dir}/${file}"
71	fi
72}
73
74named_precmd()
75{
76	if ! [ -e "/etc/rndc.key" ]; then
77		echo "Generating rndc.key"
78		/usr/sbin/rndc-confgen -a
79	fi
80
81	if [ -z "$named_chrootdir" ]; then
82		if ! [ -d "/etc/namedb/keys" ]; then
83			mkdir -m 775 "/etc/namedb/keys"
84			chown named:named "/etc/namedb/keys"
85		fi
86		return 0;
87	fi
88
89	# If running in a chroot cage, ensure that the appropriate files
90	# exist inside the cage, as well as helper symlinks into the cage
91	# from outside.
92	#
93	# As this is called after the is_running and required_dir checks
94	# are made in run_rc_command(), we can safely assume ${named_chrootdir}
95	# exists and named isn't running at this point (unless forcestart
96	# is used).
97	#
98	case "$($command -v)" in
99	BIND*)	# 9 no group, named-xfer, or ndc
100		named_plugindir="/usr/libexec/named"
101		if ! [ -d "${named_chrootdir}${named_plugindir}" ]; then
102		    mkdir -p -m 755 "${named_chrootdir}${named_plugindir}"
103		    chown root:wheel "${named_chrootdir}${named_plugindir}"
104		fi
105		for p in filter-aaaa.so; do
106			copy_if_newer "${named_chrootdir}" \
107			    "${named_plugindir}" "$p"
108		done
109		;;
110	named*)	# 4 and 8
111		rc_flags="-g named $rc_flags"
112		copy_if_newer "${named_chrootdir}" "/usr/libexec" "named-xfer"
113		ln -fs "${named_chrootdir}/var/run/ndc" /var/run/ndc
114		;;
115	esac
116
117	for i in null random urandom; do
118		if ! [ -c "${named_chrootdir}/dev/$i" ]; then
119			rm -f "${named_chrootdir}/dev/$i"
120			( cd /dev &&
121			    /bin/pax -rw -pe "$i" "${named_chrootdir}/dev" )
122		fi
123	done
124
125	if ! [ -h /etc/namedb ]; then
126		named_migrate /etc/namedb "${named_chrootdir}"
127	fi
128
129	for i in named.conf rndc.key; do
130		if [ -r "/etc/$i" ] && ! [ -h "/etc/$i" ] &&
131		 ! [ -r "${named_chrootdir}/etc/$i" ]
132		then
133			mv "/etc/$i" "${named_chrootdir}/etc/$i"
134			ln -s "${named_chrootdir}/etc/$i" "/etc/$i"
135		fi
136	done
137
138	if ! [ -r ${named_chrootdir}/etc/named.conf ]  &&
139	     [ -r ${named_chrootdir}/etc/namedb/named.conf ]
140	then
141		ln -s namedb/named.conf "${named_chrootdir}/etc"
142	fi
143
144	if [ -f /etc/localtime ]; then
145		cmp -s /etc/localtime "${named_chrootdir}/etc/localtime" ||
146		    cp -p /etc/localtime "${named_chrootdir}/etc/localtime"
147	fi
148
149	local piddir="$(dirname "${pidfile}")"
150	mkdir -p "${named_chrootdir}${piddir}" "${piddir}"
151	chmod 755 "${named_chrootdir}${piddir}" "${piddir}"
152	chown named:named "${named_chrootdir}${piddir}" "${piddir}"
153	ln -fs "${named_chrootdir}${pidfile}" "${pidfile}"
154
155	#	Change run_rc_commands()'s internal copy of $named_flags
156	#
157	rc_flags="-u named -t ${named_chrootdir} $rc_flags"
158}
159
160load_rc_config $name
161run_rc_command "$1"
162