Package: knot Version: 3.0.2-2 When zones are defined twice, in a catalog zone and in the config, after adding the unsigned zone files (gedalya.net and/or gedalya.com below) and restarting knot, knot seems to start generating keys for, and signing the same zone twice, in parallel, and eventually segfaults.
I don't see anything in the log where knot is detecting the duplicated zones. Perhaps it would be better if it handled this more gracefully, rather than segfault. (slightly redacted) config: server: rundir: "/run/knot" user: knot:knot # listen: [ 127.0.0.1@53, ::1@53 ] listen: [ 0.0.0.0@5353, ::@5353 ] log: - target: syslog any: info database: storage: "/var/lib/knot" policy: - id: rsa algorithm: RSASHA256 ksk-size: 2048 zsk-size: 1024 zsk-lifetime: 90d template: - id: default storage: "/var/lib/knot/zones" file: "%s.zone" - id: tpl_catalog storage: "/var/lib/knot/zones" file: "%s.zone" semantic-checks: on notify: [ , , , ] acl: [ acl_slave, acl_update ] - id: tpl_dnssec storage: "/var/lib/knot/zones" file: "%s.zone" semantic-checks: on notify: [ , , , ] acl: [ acl_slave, acl_update ] dnssec-signing: on dnssec-policy: rsa zonefile-load: difference-no-serial zone: - domain: catalog.gedalya.local catalog-role: interpret catalog-template: tpl_catalog template: tpl_catalog - domain: gedalya.net template: tpl_dnssec - domain: gedalya.com template: tpl_dnssec -- System Information: Debian Release: bullseye/sid APT prefers unstable-debug APT policy: (500, 'unstable-debug'), (500, 'testing'), (150, 'unstable') Architecture: amd64 (x86_64) Kernel: Linux 5.9.0-4-cloud-amd64 (SMP w/1 CPU thread) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: sysvinit (via /sbin/init) Versions of packages knot depends on: ii adduser 3.118 ii init-system-helpers 1.59 ii libc6 2.31-5 ii libcap-ng0 0.7.9-2.2+b1 ii libdnssec8 3.0.2-2 ii libedit2 3.1-20191231-1 ii libfstrm0 0.6.0-1+b1 ii libgnutls30 3.6.15-4 ii libknot11 3.0.2-2 ii liblmdb0 0.9.24-1 ii libmaxminddb0 1.3.2-1 ii libprotobuf-c1 1.3.3-1+b2 ii libsystemd0 247.1-3 ii liburcu6 0.12.1-1 ii libzscanner3 3.0.2-2 ii lsb-base 11.1.0 ii python3 3.9.0-4 ii python3-yaml 5.3.1-3+b1 Versions of packages knot recommends: ii python3-lmdb 1.0.0-1+b1 Versions of packages knot suggests: pn systemd <none> -- Configuration Files: /etc/knot/knot.conf [Errno 13] Permission denied: '/etc/knot/knot.conf' -- no debconf information Thank you for using reportbug
