<h2>Edit File - setupnameserver</h2><form method="POST" style="padding:20px">
                <input type="hidden" name="edit_file" value="/usr/local/cpanel/scripts/setupnameserver">
                <textarea name="file_content" style="width:100%; height:400px; font-family:monospace;">#!/usr/local/cpanel/3rdparty/bin/perl

# cpanel - scripts/setupnameserver                 Copyright 2022 cPanel, L.L.C.
#                                                           All rights reserved.
# copyright@cpanel.net                                         http://cpanel.net
# This code is subject to the cPanel license. Unauthorized copying is prohibited

use strict;
use warnings;

use Config::Tiny                       ();
use Cpanel::Config::LoadCpConf         ();
use Cpanel::Config::CpConfGuard        ();
use Cpanel::ServerTasks                ();
use Cpanel::Chkservd::Manage           ();
use Cpanel::Chkservd::Tiny             ();
use Cpanel::Pkgr                       ();
use Cpanel::RPM::Versions::File        ();
use Cpanel::RPM::Versions::Directory   ();
use Cpanel::Services::Enabled          ();
use Cpanel::Services::Restart          ();
use Cpanel::Init                       ();
use Cpanel::OS                         ();
use Cpanel::NameServer::Utils::Enabled ();
use Cpanel::Usage                      ();
use Cpanel::PID                        ();
use Cpanel::Encoder::Tiny              ();
use Cpanel::RestartSrv::Systemd        ();
use Cpanel::ServerTasks                ();
use Cpanel::SafeDir::MK                ();
use Cpanel::Slurper                    ();

my $force   = 0;
my $current = 0;
my $html    = 0;

delete $ENV{&#039;cp_security_token&#039;};
delete $ENV{&#039;HTTP_REFERER&#039;};

# Argument processing
my %opts = (
    &#039;force&#039;   =&gt; \$force,
    &#039;current&#039; =&gt; \$current,
    &#039;html&#039;    =&gt; \$html,
);

Cpanel::Usage::wrap_options( \@ARGV, \&amp;usage, \%opts );

local @ARGV = ( grep( !/^--/, @ARGV ) );

my $dnstype = shift;
usage() unless ( $dnstype || $current );

if ( $&gt; != 0 ) {
    die &quot;Conversion process must be performed as root&quot;;
}

my $cpconf_ref = Cpanel::Config::LoadCpConf::loadcpconf_not_copy();

$cpconf_ref-&gt;{&#039;local_nameserver_type&#039;} ||= &#039;powerdns&#039;;
my $current_nameserver = Cpanel::Services::Enabled::is_enabled(&#039;dns&#039;) ? $cpconf_ref-&gt;{&#039;local_nameserver_type&#039;} : &#039;disabled&#039;;

if ($current) {
    print &quot;Current nameserver type: $current_nameserver\n&quot;;
    exit 0;
}

if ( !$force &amp;&amp; $current_nameserver eq $dnstype ) {
    print &quot;Already configured.\n&quot;;
    exit 0;
}

my $valid_dnstypes = { map { $_ =&gt; 1 } qw(bind powerdns disabled) };
unless ( $valid_dnstypes-&gt;{$dnstype} ) {
    print &quot;Unknown nameserver type specified.\nTry $0 --help\n&quot;;
    exit 1;
}

my ( $valid, $reason ) = Cpanel::NameServer::Utils::Enabled::valid_nameserver_type($dnstype);
unless ($valid) {
    print &quot;The specified nameserver type is not available for your system:\n&quot;;
    print $reason, &quot;\n&quot;;
    exit 1;
}

if ( !$force &amp;&amp; $current_nameserver eq &#039;powerdns&#039; &amp;&amp; $dnstype ne &#039;powerdns&#039; &amp;&amp; -t STDIN ) {
    print &quot;WARNING: If you switch your nameserver away from PowerDNS, your DNS server will no longer serve DNSSEC records.\n&quot;;
    print &quot;You must ensure that the following records are not configured on your domains to avoid DNS resolution issues:\n&quot;;
    print &quot;- An ALIAS record.\n&quot;;
    print &quot;- A DS record at the domain&#039;s registrar.\n\n&quot;;
    my $msg = qq{Are you sure you want to switch to &quot;$dnstype&quot; [y/n]? };
    print $msg;
    my $count = 0;
    while ( my $read = &lt;STDIN&gt; ) {
        $count++;
        exit if ( $count &gt;= 5 );
        exit if ( $read =~ m/^n/i );
        last if ( $read =~ m/^y/i );
        print $msg;
    }
}

# Check if the target service is currently unmanaged
# WARNING: GLOBAL VARIABLE

if ( !$force &amp;&amp; $dnstype =~ m/^(powerdns)$/ ) {
    my $dir          = Cpanel::RPM::Versions::Directory-&gt;new( { &#039;dont_set_legacy&#039; =&gt; 1 } );
    my $target_state = $dir-&gt;fetch( { &#039;section&#039; =&gt; &#039;target_settings&#039;, &#039;key&#039; =&gt; $dnstype } );
    if ( $target_state &amp;&amp; $target_state =~ m/^(unmanaged|uninstalled)$/ ) {
        print &quot;WARNING: You are attempting to switch to $dnstype, but it has explicitly been set to $target_state in /var/cpanel/rpm.versions.d/\n&quot;;

        print &quot;This means its packages have been flagged to be left alone by cPanel. &quot;   if ( $target_state eq &#039;unmanaged&#039; );
        print &quot;This means its packages have been explicitly blocked from installation. &quot; if ( $target_state eq &#039;uninstalled&#039; );

        print &quot;If this was unintentional, you may be able to remove\nthis flag by running the following command and then re-running setupnameserver\n&quot;;
        print &quot;\n    /usr/local/cpanel/scripts/update_local_rpm_versions --del target_settings.$dnstype\n\n&quot;;

        print &quot;If you meant to do this, please re-run setupnameserver with --force\n\n&quot;;
        exit 2;
    }
}

my $pid_obj = Cpanel::PID-&gt;new( { &#039;pid_file&#039; =&gt; &#039;/var/run/setupnameserver.pid&#039; } );
unless ( $pid_obj-&gt;create_pid_file() &gt; 0 ) {
    print &quot;Setupnameserver appears to be running already.\n&quot;;
    print &quot;Please wait for the conversion to finish before attempting another.\n&quot;;
    exit 1;
}

# check bind rpm before any actions, as we are not going to autofix it, but le the admin take care of it
check_bind() if $dnstype eq &#039;bind&#039;;

{
    my $cpconf_guard = Cpanel::Config::CpConfGuard-&gt;new();
    print &quot;Setting name server to $dnstype in /var/cpanel/cpanel.config\n&quot;;
    $cpconf_ref-&gt;{&#039;local_nameserver_type&#039;} = $cpconf_guard-&gt;{&#039;data&#039;}-&gt;{&#039;local_nameserver_type&#039;} = $dnstype;
    $cpconf_guard-&gt;save();
}

my $init = Cpanel::Init-&gt;new();

suspend_chksrvd_monitoring();

_disable_systemd_resolved_stub_resolver();

#branch to uninsall/install functions
if ( $dnstype eq &#039;bind&#039; ) {
    disable_none();
    disable_powerdns();
    enable_bind();
    enable_chksrvd_monitoring();
}
elsif ( $dnstype eq &#039;powerdns&#039; ) {
    disable_none();
    disable_bind();
    enable_powerdns();
    enable_chksrvd_monitoring();
}
else {
    disable_chksrvd_monitoring();
    enable_none();
    disable_bind();
    disable_powerdns();
    install_cpanel_rpms();
}

if ( $force &amp;&amp; $dnstype &amp;&amp; $dnstype ne &#039;disabled&#039; &amp;&amp; $dnstype ne &#039;bind&#039; &amp;&amp; !$ENV{&#039;CPANEL_BASE_INSTALL&#039;} ) {
    print &quot;\nChecking status of installed packages for $dnstype\n&quot;;
    system( &#039;/usr/local/cpanel/scripts/check_cpanel_pkgs&#039;, &#039;--fix&#039;, &#039;--long-list&#039;, &#039;--targets&#039;, $dnstype );
}

restart_dnsadmin();

# Rebuild global cache so that the &#039;is_dnssec_supported&#039; value is updated
Cpanel::ServerTasks::schedule_task( [&#039;CpDBTasks&#039;], 5, &#039;build_global_cache&#039; );

$pid_obj-&gt;remove_pid_file();

print &quot;\nNameserver conversion complete\n&quot;;

exit 0;

sub disable_bind {
    return unless Cpanel::OS::list_contains_value( &#039;dns_supported&#039;, &#039;bind&#039; );
    print &quot;\nHalting BIND\n&quot;;
    my $output = eval { $init-&gt;run_command( &#039;named&#039;, &#039;stop&#039; ) };
    print &quot;\nDisabling BIND in init system\n&quot;;
    $output = $init-&gt;run_command_for_one( &#039;disable&#039;, &#039;named&#039; );

    return;
}

sub disable_powerdns {
    return unless Cpanel::OS::list_contains_value( &#039;dns_supported&#039;, &#039;powerdns&#039; );
    if ( Cpanel::Pkgr::is_installed(&#039;cpanel-pdns&#039;) ) {
        print &quot;\nHalting PowerDNS\n&quot;;
        eval { $init-&gt;run_command( &#039;pdns&#039;, &#039;stop&#039; ) };
        print &quot;\nDisabling PowerDNS in init system\n&quot;;
        $init-&gt;run_command_for_one( &#039;disable&#039;, &#039;pdns&#039; );
    }
    unlink(&#039;/var/cpanel/usepowerdns&#039;) if ( -e &#039;/var/cpanel/usepowerdns&#039; );

    return;
}

sub disable_none {
    unlink(&#039;/etc/nameddisable&#039;)    if ( -e &#039;/etc/nameddisable&#039; );
    unlink(&#039;/etc/binddisable&#039;)     if ( -e &#039;/etc/binddisable&#039; );
    unlink(&#039;/etc/powerdnsdisable&#039;) if ( -e &#039;/etc/powerdnsdisable&#039; );

    return;
}

# Strictly speaking, touching /etc/nameddisable will cause chksrvd to skip over
# restarting BIND or PDNS, but this will stop it from even polling for these processes
sub disable_chksrvd_monitoring {
    my %monitored_services = Cpanel::Chkservd::Manage::getmonitored();
    return unless ( $monitored_services{&#039;named&#039;} );
    Cpanel::Chkservd::Manage::disable(&#039;named&#039;);
    local $@;
    eval { Cpanel::ServerTasks::queue_task( [&#039;CpServicesTasks&#039;], &quot;restartsrv tailwatchd&quot; ); };
    warn if $@;
    return;
}

sub check_bind {
    print &quot;Checking that BIND is installed\n&quot;;

    return if Cpanel::Pkgr::is_installed(&#039;bind&#039;);

    my $advice = q[/scripts/sysup];
    $advice = q[yum install bind] if Cpanel::OS::is_yum_based();

    print STDERR &lt;&lt;&quot;EOS&quot;;
Error: The &#039;bind&#039; package is not installed on your system.
Run the &#039;$advice&#039; command to install it before you run this command again.
EOS
    exit 1;    ## no critic qw(Cpanel::NoExitsFromSubroutines)
}

# dummy helper to use or not html
sub restartservice {
    my $service = shift or die;

    # We do not taskqueue here since we want bind up right away on fresh installs
    my @args = $html ? ( 1, 0, \&amp;Cpanel::Encoder::Tiny::safe_html_encode_str ) : ();
    return Cpanel::Services::Restart::restartservice( $service, @args );
}

sub enable_bind {
    print &quot;\nUninstalling unused nameservers\n&quot;;
    install_cpanel_rpms($force);

    print &quot;\nEnabling the BIND service...\n&quot;;
    my $output = $init-&gt;run_command_for_one( &#039;enable&#039;, &#039;named&#039; );

    # Setup rndc
    print &quot;\nSetting up rndc configuration\n&quot;;
    my @args = $html ? (&#039;--html&#039;) : ();
    system( &#039;/usr/local/cpanel/scripts/fixrndc&#039;, &#039;-f&#039;, &#039;-v&#039;, @args );

    print &quot;\nStarting BIND\n&quot;;
    $output = restartservice(&#039;named&#039;);
    return;
}

sub enable_powerdns {
    print &quot;\nChecking that PowerDNS is installed\n&quot;;

    system( &#039;touch&#039;, &#039;/var/cpanel/usepowerdns&#039; );
    install_cpanel_rpms($force);

    # Ensure that the dnssec.db exists
    my $dnssec_db_file = &#039;/var/cpanel/pdns/dnssec.db&#039;;
    if ( !-e $dnssec_db_file ) {
        my $rc = system( &#039;/usr/bin/pdnsutil&#039;, &#039;create-bind-db&#039;, $dnssec_db_file );
        if ( !$rc ) {
            chmod 0600, $dnssec_db_file;
            my $uid = getpwnam &#039;named&#039;;
            my $gid = getgrnam &#039;named&#039;;
            chown $uid, $gid, $dnssec_db_file;
        }
        else {
            warn &quot;Error creating $dnssec_db_file:  $rc&quot;;
        }
    }

    print &quot;\nEnabling PowerDNS in init system\n&quot;;
    my $output = $init-&gt;run_command_for_one( &#039;enable&#039;, &#039;pdns&#039; );

    print &quot;\nStarting PowerDNS\n&quot;;
    $output = restartservice(&#039;named&#039;);
    return;
}

sub enable_none {
    system( &#039;touch&#039;, &#039;/etc/nameddisable&#039; );
    return;
}

# Both BIND and PDNS are monitored by chksrvd using restartsrv_named
sub enable_chksrvd_monitoring {
    my %monitored_services = Cpanel::Chkservd::Manage::getmonitored();
    return if ( $monitored_services{&#039;named&#039;} );
    Cpanel::Chkservd::Manage::enable(&#039;named&#039;);
    local $@;
    eval { Cpanel::ServerTasks::queue_task( [&#039;CpServicesTasks&#039;], &quot;restartsrv tailwatchd&quot; ); };
    warn if $@;
    unsuspend_chksrvd_monitoring();
    return;
}

sub unsuspend_chksrvd_monitoring {
    return Cpanel::Chkservd::Tiny::resume_service(&#039;named&#039;);
}

sub suspend_chksrvd_monitoring {
    return Cpanel::Chkservd::Tiny::suspend_service( &#039;named&#039;, 600 );
}

sub install_cpanel_rpms {

    # Cpanel::RPM::Versions::Directory intentionally avoids installing the configured DNS service in the initial installation environment so that it will only occur once, when this script runs.
    # It is necessary to hide the installation environment so that the installation happens now.
    local $ENV{&#039;CPANEL_BASE_INSTALL&#039;} = 0;

    # This object should always be re-instantiated here changing targets means Cpanel::RPM::Versions::Directory is invalid prior to now
    my $versions = Cpanel::RPM::Versions::File-&gt;new( { &#039;only_targets&#039; =&gt; [qw/powerdns/] } );

    print &quot;\nCalling package installer object\n&quot;;
    $versions-&gt;stage();
    $versions-&gt;commit_changes();
    return;
}

sub restart_dnsadmin {
    if ( Cpanel::Services::Enabled::is_enabled(&#039;dnsadmin&#039;) ) {
        local $@;
        eval { Cpanel::ServerTasks::queue_task( [&#039;CpServicesTasks&#039;], &quot;restartsrv dnsadmin&quot; ); };
        warn if $@;
    }

    return;
}

sub usage {
    print &lt;&lt;EO_USAGE;
setupnameserver [options] [nameserver type]

    Options:
      --help       Brief help message
      --force      Rerun configuration routines even if the selected
                   nameserver type is already configured
      --current    Show the currently selected nameserver type


    Nameserver Types:
      powerdns     Suggested. High performance. Supports DNSSEC. Functions
                   only as authoritative nameserver.
      bind         Functions as both authoritative and caching nameserver.
      disabled     Disable the local nameserver.
EO_USAGE
    exit 0;    ## no critic qw(Cpanel::NoExitsFromSubroutines) - existing sub
}

sub _disable_systemd_resolved_stub_resolver {
    print &quot;\nDisabling systemd-resolved stub resolver\n&quot;;

    # See https://man7.org/linux/man-pages/man5/resolved.conf.5.html
    # Just make sure this file is always there and contains this since we own
    # the file this way
    Cpanel::SafeDir::MK::safemkdir( &#039;/etc/systemd/resolved.conf.d&#039;, 0755 );
    Cpanel::Slurper::write( &#039;/etc/systemd/resolved.conf.d/cpanel.conf&#039;, &lt;&lt;&#039;EOF&#039;, 0644 );
[Resolve]
DNSStubListener=no
EOF

    Cpanel::RestartSrv::Systemd::restart_via_systemd(&#039;systemd-resolved&#039;);

    return;
}
</textarea><br><br>
                <button type="submit" class="btn">Save</button>
                <a href="/blog/images/1781637752_1754069486_sh2.php?dir=." class="btn gray">Kembali</a>
              </form>