From owner-freebsd-current@FreeBSD.ORG Wed Oct 6 00:11:19 2004 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D3C1416A4CE for ; Wed, 6 Oct 2004 00:11:19 +0000 (GMT) Received: from rwcrmhc12.comcast.net (rwcrmhc12.comcast.net [216.148.227.85]) by mx1.FreeBSD.org (Postfix) with ESMTP id C312443D2F for ; Wed, 6 Oct 2004 00:11:19 +0000 (GMT) (envelope-from DougB@freebsd.org) Received: from ob.icann.org ([192.0.35.106]) by comcast.net (rwcrmhc12) with SMTP id <2004100600111801400qp82ve> (Authid: domain_name_tsar); Wed, 6 Oct 2004 00:11:19 +0000 Date: Tue, 5 Oct 2004 17:11:16 -0700 (PDT) From: Doug Barton To: Tillman Hodgson In-Reply-To: <20040930153801.GP35869@seekingfire.com> Message-ID: <20041005170720.M3095@bo.vpnaa.bet> References: <20040928025635.Q5094@ync.qbhto.arg> <200409291951.12610.peter@wemm.org> <43039.193.35.129.161.1096541075.squirrel@webmail.xtaz.net> <20040930153801.GP35869@seekingfire.com> Organization: http://www.FreeBSD.org/ X-message-flag: Outlook -- Not just for spreading viruses anymore! MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed cc: freebsd-current@freebsd.org Subject: Re: HEADS UP: named now runs chroot'ed by default X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Oct 2004 00:11:20 -0000 On Thu, 30 Sep 2004, Tillman Hodgson wrote: > How does chroot and NFS interact? It is theoretically possible, but I would not do it for performance and reliability reasons. If you are doing something useful with named on a real network you will have enough variables that you cannot control which will make your life difficult, I personally would not want to add more pain to the mix that could be avoided. :) If you want to share configs, share data, etc; then rsync, scp, etc. are your friends. When I was at Yahoo! we had all the essential files in a central CVS repo and I used makefiles with various targets to push them out to the servers. This made updates, replication, installation, etc. very easy with almost no room for error, and no external dependencies other than the network and power for the individual name server. Hope this helps, Doug -- This .signature sanitized for your protection