`rndc freeze` command always fails, perhaps due to `in-view`
rndc freeze always fails:
rndc: 'freeze' failed: already frozen
BIND version used
BIND 9.17.16 (Development Release) <id:b33f621> running on Linux x86_64 5.12.15-arch1-1-zen2 #1 SMP PREEMPT Sun, 11 Jul 2021 10:50:03 +0000 built by make with '--prefix=/usr' '--sysconfdir=/etc' '--sbindir=/usr/bin' '--localstatedir=/var' '--disable-static' '--enable-fixed-rrset' '--enable-full-report' '--with-python=/usr/bin/python' '--with-maxminddb' '--with-openssl' '--with-libidn2' '--with-json-c' '--with-libxml2' '--with-lmdb' '--with-libtool' 'CFLAGS=-march=native -O2 -pipe -fno-plt -fexceptions -Wp,-D_FORTIFY_SOURCE=2,-D_GLIBCXX_ASSERTIONS -Wformat -Werror=format-security -fstack-clash-protection -fcf-protection -DDIG_SIGCHASE -fcommon' 'LDFLAGS=-Wl,-O1,--sort-common,--as-needed,-z,relro,-z,now' compiled by GCC 11.1.0 compiled with OpenSSL version: OpenSSL 1.1.1k 25 Mar 2021 linked to OpenSSL version: OpenSSL 1.1.1k 25 Mar 2021 compiled with libuv version: 1.41.0 linked to libuv version: 1.42.0 compiled with libnghttp2 version: 1.43.0 linked to libnghttp2 version: 1.44.0 compiled with libxml2 version: 2.9.10 linked to libxml2 version: 20910 compiled with json-c version: 0.15 linked to json-c version: 0.15 compiled with zlib version: 1.2.11 linked to zlib version: 1.2.11 linked to maxminddb version: 1.6.0 threads support is enabled default paths: named configuration: /etc/named.conf rndc configuration: /etc/rndc.conf DNSSEC root key: /etc/bind.keys nsupdate session key: /var/run/named/session.key named PID file: /var/run/named/named.pid named lock file: /var/run/named/named.lock geoip-directory: /usr/share/GeoIP
Steps to reproduce
Set up a server with a few zones and views. (In particular, the
in-view feature is used a lot. Could it be causing wrong zone freeze retries?) Then call
What is the current bug behavior?
rndc freeze always fails. (But then
thaw always succeeds.)
What is the expected correct behavior?
rndc freeze should succeed, definitely at least after a successful
Relevant configuration files
There are lots of them. Not sure which ones are relevant. Please feel free to ask for details.
The server has a number of views,
dnssec-policy, zones shared among views with
in-view as well as zones that differ between views (signed with
dnssec-policy in only one view while other views reuse the same DNSSEC keys (but not the same zone file/data) via
auto-dnssec maintain; inline-signing yes;).
Relevant logs and/or screenshots
rndc freeze, the logs look like repetitive attempts to freeze the same zones (all of which are defined in the
loopback view mentioned in the log and reused in numerous views using
Thawing seems to work fine. Uneventful.
Aug 02 10:48:10 named: received control channel command 'thaw' Aug 02 10:48:10 named: thawing all zones: success