回复: failed to start BIND 9.16.34 on Ubuntu 20.04

2022-11-12 Thread Ling Yun 
Delete "datasize 200m" option and restart bind9,  BIND 9.16.34 start and run ok!
BIND 9.11 is runing fine When "datasize" option is seted on Solaris 10  and  
Ubuntu 16.04.

Thanks!

发件人: Ondřej Surý 
发送时间: 2022年11月12日 19:20
收件人: Ling Yun 
抄送: bind-users@lists.isc.org 
主题: Re: failed to start BIND 9.16.34 on Ubuntu 20.04

> On 12. 11. 2022, at 10:39, Ling Yun  wrote:
>
> datasize 209715200;
>

``datasize``
   This sets the maximum amount of data memory the server may use. The default 
is
   ``default``. This is a hard limit on server memory usage; if the
   server attempts to allocate memory in excess of this limit, the
   allocation will fail, which may in turn leave the server unable to
   perform DNS service. Therefore, this option is rarely useful as a way
   to limit the amount of memory used by the server, but it can be
   used to raise an operating system data size limit that is too small
   by default. To limit the amount of memory used by the
   server, use the ``max-cache-size`` and ``recursive-clients`` options
   instead.

--
Ondřej Surý (He/Him)
ond...@isc.org

My working hours and your working hours may be different. Please do not feel 
obligated to reply outside your normal working hours.


-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: 回复: failed to start BIND 9.16.34 on Ubuntu 20.04

2022-11-11 Thread Benny Pedersen 

Ling Yun skrev den 2022-11-12 07:22:

# journalctl -u named



Nov 12 11:18:05 h2o named[110517]: out of memory [110517]


imho you have software that limit memory "selinux?"

https://james-morris.livejournal.com/33622.html same problem ?

https://flylib.com/books/en/2.684.1/limiting_the_memory_a_name_server_uses.html

free shows how much mem is used or avail ?

unsure please check "named-checkconf -px" if there is settings that make 
this errors



How to fix? thanks.


don't know
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

回复: failed to start BIND 9.16.34 on Ubuntu 20.04

2022-11-11 Thread Ling Yun 
# journalctl -u named

Nov 12 11:18:04 h2o systemd[1]: Started BIND Domain Name Server.
Nov 12 11:18:04 h2o named[110476]: starting BIND 9.16.34-Ubuntu (Extended 
Support Version) 
Nov 12 11:18:04 h2o named[110476]: running on Linux x86_64 5.4.0-131-generic 
#147-Ubuntu SMP Fri Oct 14 17:07:22 UTC 2022
Nov 12 11:18:04 h2o named[110476]: built with '--build=x86_64-linux-gnu' 
'--prefix=/usr' '--includedir=/usr/include' '--mandir=/usr/share/man' 
'--infodir=/usr/share/info' '--sysconfdir=/etc' '--localstatedir=/var' 
'--disable-silent-rules' '--libdir=/usr/lib/x86_64-linux-gnu' 
'--libexecdir=/usr/lib/x86_64-linux-gnu' '--disable-maintainer-mode' 
'--disable-dependency-tracking' '--libdir=/usr/lib/x86_64-linux-gnu' 
'--sysconfdir=/etc/bind' '--with-python=python3' '--localstatedir=/' 
'--enable-threads' '--enable-largefile' '--with-libtool' '--enable-shared' 
'--enable-static' '--with-gost=no' '--with-openssl=/usr' '--with-gssapi=/usr' 
'--with-libidn2' '--with-json-c' '--with-lmdb=/usr' '--with-gnu-ld' 
'--with-maxminddb' '--with-atf=no' '--enable-ipv6' '--enable-rrl' 
'--enable-filter-' '--disable-native-pkcs11' '--enable-dnstap' 
'build_alias=x86_64-linux-gnu' 'CFLAGS=-g -O2 
-fdebug-prefix-map=/build/bind9-Qvag7k/bind9-9.16.34=. -fstack-protector-strong 
-Wformat -Werror=format-security -fno-strict-aliasing 
-fno-delete-null-pointer-checks -DNO_VERSION_DATE -DDIG_SIGCHASE' 
'LDFLAGS=-Wl,-Bsymbolic-functions -Wl,-z,relro -Wl,-z,now' 
'CPPFLAGS=-Wdate-time -D_FORTIFY_SOURCE=2'
Nov 12 11:18:04 h2o named[110476]: running as: named -f -u bind
Nov 12 11:18:04 h2o named[110476]: compiled by GCC 9.4.0
Nov 12 11:18:04 h2o named[110476]: compiled with OpenSSL version: OpenSSL 
1.1.1f  31 Mar 2020
Nov 12 11:18:04 h2o named[110476]: linked to OpenSSL version: OpenSSL 1.1.1f  
31 Mar 2020
Nov 12 11:18:04 h2o named[110476]: compiled with libxml2 version: 2.9.10
Nov 12 11:18:04 h2o named[110476]: linked to libxml2 version: 20910
Nov 12 11:18:04 h2o named[110476]: compiled with json-c version: 0.13.1
Nov 12 11:18:04 h2o named[110476]: linked to json-c version: 0.13.1
Nov 12 11:18:04 h2o named[110476]: compiled with zlib version: 1.2.11
Nov 12 11:18:04 h2o named[110476]: linked to zlib version: 1.2.11
Nov 12 11:18:04 h2o named[110476]: 

Nov 12 11:18:04 h2o named[110476]: BIND 9 is maintained by Internet Systems 
Consortium,
Nov 12 11:18:04 h2o named[110476]: Inc. (ISC), a non-profit 501(c)(3) 
public-benefit
Nov 12 11:18:04 h2o named[110476]: corporation.  Support and training for BIND 
9 are
Nov 12 11:18:04 h2o named[110476]: available at https://www.isc.org/support
Nov 12 11:18:04 h2o named[110476]: 

Nov 12 11:18:04 h2o named[110476]: adjusted limit on open files from 524288 to 
1048576
Nov 12 11:18:04 h2o named[110476]: found 16 CPUs, using 16 worker threads
Nov 12 11:18:04 h2o named[110476]: using 16 UDP listeners per interface
Nov 12 11:18:04 h2o named[110476]: using up to 21000 sockets
Nov 12 11:18:04 h2o named[110476]: DNSSEC algorithms: RSASHA1 NSEC3RSASHA1 
RSASHA256 RSASHA512 ECDSAP256SHA256 ECDSAP384SHA384 ED25519 ED448
Nov 12 11:18:04 h2o named[110476]: DS algorithms: SHA-1 SHA-256 SHA-384
Nov 12 11:18:04 h2o named[110476]: HMAC algorithms: HMAC-MD5 HMAC-SHA1 
HMAC-SHA224 HMAC-SHA256 HMAC-SHA384 HMAC-SHA512
Nov 12 11:18:04 h2o named[110476]: TKEY mode 2 support (Diffie-Hellman): yes
Nov 12 11:18:04 h2o named[110476]: TKEY mode 3 support (GSS-API): yes
Nov 12 11:18:04 h2o named[110476]: loading configuration from 
'/etc/bind/named.conf'
Nov 12 11:18:04 h2o named[110476]: reading built-in trust anchors from file 
'/etc/bind/bind.keys'
Nov 12 11:18:04 h2o named[110476]: looking for GeoIP2 databases in 
'/usr/share/GeoIP'
Nov 12 11:18:04 h2o named[110476]: out of memory [110476]
Nov 12 11:18:04 h2o named[110476]: out of memory [110476]
Nov 12 11:18:04 h2o named[110476]: out of memory [110476]
Nov 12 11:18:05 h2o systemd[1]: named.service: Main process exited, 
code=killed, status=6/ABRT
Nov 12 11:18:05 h2o systemd[1]: named.service: Failed with result 'signal'.
Nov 12 11:18:05 h2o systemd[1]: named.service: Scheduled restart job, restart 
counter is at 3.
Nov 12 11:18:05 h2o systemd[1]: Stopped BIND Domain Name Server.
Nov 12 11:18:05 h2o systemd[1]: Started BIND Domain Name Server.
Nov 12 11:18:05 h2o named[110517]: starting BIND 9.16.34-Ubuntu (Extended 
Support Version) 
Nov 12 11:18:05 h2o named[110517]: running on Linux x86_64 5.4.0-131-generic 
#147-Ubuntu SMP Fri Oct 14 17:07:22 UTC 2022
Nov 12 11:18:05 h2o named[110517]: built with '--build=x86_64-linux-gnu' 
'--prefix=/usr' '--includedir=/usr/include' '--mandir=/usr/share/man' 
'--infodir=/usr/share/info' '--sysconfdir=/etc' '--localstatedir=/var' 
'--disable-silent-rules' '--libdir=/usr/lib/x86_64-linux-gnu' 
'--libexecdir=/usr/lib/x86_64-linux-gnu' '--disable-maintainer-mode' 
'--disable-dependency-tracking'