Bug#1110061: unblock: bind9/1:9.20.11-4
Package: release.debian.org
Severity: normal
User: release.debian.org@packages.debian.org
Usertags: unblock
X-Debbugs-Cc: bind9@packages.debian.org
Control: affects -1 + src:bind9
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Please unblock package bind9
[ Reason ]
There was a mistake where a conffile /etc/bind/named.conf.default-zones
was removed (via maintscript) and installed at the same time. At the
same time using the Root Zone hints from the dns-root-data file was made
inoperational because the file was no longer included.
[ Impact ]
The illogical prompt about reinstalling the file that user has not removed
would pop up during bookworm -> trixie upgrade.
[ Tests ]
I've tested following upgrade paths:
bookworm -> sid OK
bookworm -> trixie (install the file) -> sid OK
bookworm -> trixie (don't install the file) -> sid OK[*]
* - The last upgrade path need the extra patch in postinst to
remove the .dpkg-dist file.
[ Risks ]
This is very trivial change
[ Checklist ]
[x] all changes are documented in the d/changelog
[x] I reviewed all changes and I approve them
[x] attach debdiff against the package in testing
[ Other info ]
I would rather have this included before trixie is out.
unblock bind9/1:9.20.11-4
-----BEGIN PGP SIGNATURE-----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=lL0v
-----END PGP SIGNATURE-----
diff --git a/debian/bind9.maintscript b/debian/bind9.maintscript
index 4692bcd86..97fb7c2ef 100644
--- a/debian/bind9.maintscript
+++ b/debian/bind9.maintscript
@@ -9,5 +9,5 @@ rm_conffile /etc/bind/db.0 1:9.20.5-1~
rm_conffile /etc/bind/db.127 1:9.20.5-1~
rm_conffile /etc/bind/db.255 1:9.20.5-1~
rm_conffile /etc/bind/db.empty 1:9.20.5-1~
-rm_conffile /etc/bind/named.conf.default-zones 1:9.20.5-1~
+rm_conffile /etc/bind/named.conf.default-zones 1:9.20.11-3~
rm_conffile /etc/bind/zones.rfc1918 1:9.20.5-1~
diff --git a/debian/bind9.postinst b/debian/bind9.postinst
index 8d867cf3e..b101d772e 100644
--- a/debian/bind9.postinst
+++ b/debian/bind9.postinst
@@ -31,6 +31,10 @@ if [ "$1" = configure ]; then
chmod g+rwx /var/cache/bind
fi
+ if [ -e /etc/bind/named.conf.default-zones.dpkg-dist ]; then
+ rm -f /etc/bind/named.conf.default-zones.dpkg-dist
+ fi
+
# Configuration file sanity check. This should avoid the upgrade process to
# stop a running service when starting it after the upgrade would fail
named-checkconf /etc/bind/named.conf
diff --git a/debian/changelog b/debian/changelog
index faf161999..a035416d5 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,26 @@
+bind9 (1:9.20.11-4) unstable; urgency=medium
+
+ * Remove named.conf.default-zones.dpkg-dist from /etc/bind
+
+ -- Ondřej Surý <ondrej@debian.org> Sun, 27 Jul 2025 12:04:56 +0200
+
+bind9 (1:9.20.11-3) unstable; urgency=medium
+
+ * Remove the /etc/bind/named.conf.default-zones again from the
+ maintainer script as it might have been reinstalled by
+ accident. (Closes: #1108945)
+
+ -- Ondřej Surý <ondrej@debian.org> Sun, 27 Jul 2025 07:54:24 +0200
+
+bind9 (1:9.20.11-2) unstable; urgency=high
+
+ * Remove /etc/bind/named.conf.default-zones from the package as
+ the intent was to remove this file. (Closes: #1108945)
+ * Add new /etc/bind/named.conf.root-hints file that makes 'named'
+ to use root.hints from dns-root-data again.
+
+ -- Ondřej Surý <ondrej@debian.org> Sun, 27 Jul 2025 06:48:59 +0200
+
bind9 (1:9.20.11-1) unstable; urgency=high
* New upstream version 9.20.11
diff --git a/debian/extras/etc/named.conf b/debian/extras/etc/named.conf
index 9c8590a0e..9806352c3 100644
--- a/debian/extras/etc/named.conf
+++ b/debian/extras/etc/named.conf
@@ -8,3 +8,4 @@
include "/etc/bind/named.conf.options";
include "/etc/bind/named.conf.local";
+include "/etc/bind/named.conf.root-hints";
diff --git a/debian/extras/etc/named.conf.default-zones b/debian/extras/etc/named.conf.root-hints
similarity index 100%
rename from debian/extras/etc/named.conf.default-zones
rename to debian/extras/etc/named.conf.root-hints
Reply to: