The Atomia DNS Master server consists of two different parts, the Atomia DNS database and the Atomia DNS API. It is possible to install the Atomia DNS Master server either with the database and the API on the same machine or on different machines. The default and recommended way is to install both on the same machine. In addition, if you want to use DNSSEC, it consists of an optional step where you add the initial DNSSEC keyset.

The package will create a database called zonedata if it doesn't exist, and create the schema there.

If the database already exists, there are two cases:

To be able to install the product if you already have a database called zonedata you need to remove or rename that database, or manually install the latest version of the schema to the database, then rerun the installer.

On the Atomia DNS Master server the following software is needed (in the recommended installation with Atomia DNS API and Atomia DNS database on the same machine):

All needed software, including prerequisites, is installed by the provided package, atomiadns-masterserver .

This guide will install the Atomia DNS Master server with the Atomia DNS database on a separate server from the Atomia DNS API.

If you want all zones to be signed, then after the Atomia DNS API server is installed you need to create the initial DNSSEC key set. In addition you will need to use a nameserver synchronization agent that supports DNSSEC; at the moment this means the PowerDNS agent.

The DNSSEC setup is completed by executing the following steps:

Warning: The suggested workaround for random number generation in virtual machines will produce easily predictable and insecure DNSSEC keys. For production purposes, please solve it in a secure way. You have been warned.

Adding DNSSEC keys on a virtual machine where you can't use keyboard input to generate entropy requires an additional step.

Install rng-tools using apt-get install rng-tools, then open /etc/default/rng-tools and add the following line, or better something equivalent but secure:

				# WARNING: This setup is insecure, you should make sure that you have an adequate setup 
				# for generating cryptographically strong random numbers instead.
				HRNGDEVICE = /dev/urandom
			

Now, they key creation should be instant. Notice though that this setup is really insecure. You should instead configure rng-tools to provide sufficient amounts of random numbers in a secure way, e.g. by having better hardware for generating entropy.

The config file used by Atomia DNS API is placed at /etc/atomiadns.conf and contains the following settings:

Default config file:

db_name = zonedata
db_hostname = localhost
db_username = atomiadns
db_password = autogeneratedpassword
            

Updates are done by installing the latest version of the installed packages.

Any change in the dependencies will be handled appropriately by the installation package, upgrading or installing them as needed.

If the database schema has changed, the schema on the Atomia DNS Master server will be automatically updated. If you have chosen to have the database on a separate server, you will have to update the atomiadns-database package on that server as well. All schema changes are noted in the release notes for the new version.

To install an update, complete the following steps:

If you for some reason want to rollback to the previous version, then run:

apt-get install atomiadns-masterserver=version-number-noted

wget -q -O - http://public.apt.atomia.com/setup.sh.shtml | sed s/%distcode/`lsb_release -c | awk '{ print $2 }'`/g | sh

To install an update, complete the following steps:

The Atomia DNS Master server is administrated using an API which you can use to create a web interface or other applications. For information on how the API works and how to use it see Atomia DNS API .

The Atomia DNS DynDNS client is used to handle DynDNS updates according to the DNS protocol. The client acts as a regular nameserver but only has support for DynDNS updates. For information on how DynDNS works and how to use it see Atomia DNS DynDNS .

This guide will install the Atomia DNS Bind-DLZ Nameserver.

On the nameservers the following software is needed:

All needed software, including prerequisites are installed by the provided package, atomiadns-nameserver .

The config file used by Atomia DNS Bind-DLZ Nameserver is placed in /etc/atomiadns.conf and contains the following settings:

soap_uri and servername always needs to be changed. For the other two parameters, the default settings will work.

Default config file:

bdb_environment_path = /var/lib/bind/atomiadns_bdb
soap_uri = http://your.atomia.dns.master.server.com/atomiadns
bdb_filename = dns_data.db
servername = your.name.server
slavezones_config = /etc/bind/slave/named-slavezones.conf.local
slavezones_dir = /etc/bind/slave/zones
            

For more information on how to use the Atomia DNS Sync application see Atomia DNS Bind-DLZ Nameserver usage .

Updates are distributed using the Atomia APT repository. If not done, then add the Atomia APT Repository to the server using:

wget -q -O - http://public.apt.atomia.com/setup.sh.shtml | sed s/%distcode/`lsb_release -c | awk '{ print $2 }'`/g | sh

The sync application is called atomiadnssync. You can view its manual page here or by running:

man atomiadnssync

This guide will install the Atomia DNS PowerDNS Nameserver.

On the nameservers the following software is needed:

The config file used by Atomia DNS DynDNS is placed in /etc/atomiadns.conf and contains the following settings:

soap_uri and tsig_key always needs to be changed. For the other parameter, the default settings will work if used at the clients as well.

Default config file:

soap_uri = http://your.atomia.dns.master.server.com/atomiadns
tsig_keyname = atomia-dns-key
#tsig_key = ZXhhbXBsZQ==
            

For more information on how to use the Atomia DNS DynDNS server see Atomia DNS DynDNS usage .

On the DynDNS server the following software is needed:

All needed software, including prerequisites are installed by the provided package, atomia-dyndns .

Updates are distributed using the Atomia APT repository. If not done, then add the Atomia APT Repository to the server using:

wget -q -O - http://public.apt.atomia.com/setup.sh.shtml | sed s/%distcode/`lsb_release -c | awk '{ print $2 }'`/g | sh