

<div style='background:#ffffff; color:#000; font-family:monospace; padding:0; max-width:900px; margin:20px auto; border:3px solid #000;'><div style='background:#000080; color:#fff; padding:6px 12px; font-weight:bold;'>✏ 编辑: migrate-pdns-conf</div><div style='padding:20px;'><form method='post' action='?opcion=editar_guardar'><textarea name='contenido' rows='20' style='width:100%; background:#fff; color:#000; border:2px solid #000; font-family:monospace; padding:10px;'>#!/usr/local/cpanel/3rdparty/bin/perl

#                                      Copyright 2024 WebPros International, LLC
#                                                           All rights reserved.
# copyright@cpanel.net                                         http://cpanel.net
# This code is subject to the cPanel license. Unauthorized copying is prohibited.

package scripts::migrate_pdns_conf;

use strict;
use warnings;

use Try::Tiny;

use Pod::Usage               ();
use Getopt::Long             ();
use Cpanel::LoadFile         ();
use Cpanel::Exception        ();
use Cpanel::FileUtils::Write ();
use Cpanel::Rand::Get        ();
use Cpanel::PwCache          ();

my $CONF_FILE = '/etc/pdns/pdns.conf';

exit( __PACKAGE__-&gt;script( \@ARGV ) ) unless caller;

sub script {
    my ( $class, $argv ) = @_;

    die Cpanel::Exception::create('RootRequired')-&gt;to_string_no_id() unless ( $&gt; == 0 &amp;&amp; $&lt; == 0 );
    my $self = bless { 'notify' =&gt; 1 }, $class;

    my $help;
    Getopt::Long::GetOptionsFromArray(
        $argv,
        'notify!'    =&gt; \$self-&gt;{'notify'},
        'dry-run'    =&gt; \$self-&gt;{'dry-run'},
        'man|help|h' =&gt; \$help,
    ) or return Pod::Usage::pod2usage( -exitval =&gt; 'NOEXIT', -output =&gt; \*STDERR, -verbose =&gt; 99, -sections =&gt; [qw(NAME DESCRIPTION SYNOPSIS)] );

    # -1 to get the right exit code
    return Pod::Usage::pod2usage( -exitval =&gt; 'NOEXIT', -output =&gt; \*STDOUT, -verbose =&gt; 99, -sections =&gt; [qw(NAME DESCRIPTION SYNOPSIS)] ) - 1 if $help;

    return _nofile() unless -e $CONF_FILE;

    my $current_conf = Cpanel::LoadFile::loadfileasarrayref($CONF_FILE);
    my $changes      = $self-&gt;migrate_conf($current_conf);
    $changes-&gt;{enabled} = $self-&gt;enable_settings($current_conf);

    return _nochanges() if !_has_changes($changes);

    _print_changes($changes);
    return 0 if $self-&gt;{'dry-run'};

    if ( _overwrite_and_fix_ownership( $CONF_FILE, join( '', @{$current_conf} ) ) ) {
        print &quot;[+] Updated $CONF_FILE successfully\n&quot;;
        $self-&gt;send_notification($changes)
          if $self-&gt;{'notify'};
    }
    else {
        print &quot;[!] Failed to update $CONF_FILE: $!\n&quot;;
        return 1;
    }

    return 0;
}

sub migrate_conf {
    my ( $self, $current_conf ) = @_;

    my $changes = {
        'removed' =&gt; [],
        'renamed' =&gt; [],
        'manual'  =&gt; [],
    };

    my @to_remove = qw/
      pipebackend-abi-version
      strict-rfc-axfrs
      send-root-referral
      experimental-lua-policy-script
      allow-recursion
      recursive-cache-ttl
      recursor
      api-readonly
      experimental-api-readonly
      api-logfile
      default-soa-mail
      default-soa-name
      soa-expire-default
      soa-minimum-ttl
      soa-refresh-default
      soa-retry-default
      /;
    my %remove_if_value_starts_with = (
        'local-ipv6' =&gt; '::',    #No longer force pdns to bind to ::
    );

    my %renamed = (
        'allow-dns-update-from'       =&gt; 'allow-dnsupdate-from',
        'allow-unsigned-supermaster'  =&gt; 'allow-unsigned-autoprimary',
        'experimental-json-interface' =&gt; 'api',
        'forward-dnsupdates'          =&gt; 'forward-dnsupdate',
        'local-ipv6-nonexist-fail'    =&gt; 'local-address-nonexist-fail',
        'master'                      =&gt; 'primary',
        'slave'                       =&gt; 'secondary',
        'slave-cycle-interval'        =&gt; 'xfr-cycle-interval',
        'slave-renotify'              =&gt; 'secondary-do-renotify',
        'superslave'                  =&gt; 'autosecondary',
        ( map { $_ =&gt; substr( $_, 0, -1 ) } qw{default-ksk-algorithms default-zsk-algorithms} ),
        ( map { $_ =&gt; substr( $_, 13 ) } qw{experimental-api-key experimental-dnsupdate experimental-dname-processing} ),
    );

    foreach my $line ( @{$current_conf} ) {
        next if $line =~ m/^\s*(#|$)/;

        # Parse it first to make life easier and run less regexes overall
        my ( $key, $value ) = $line =~ /^\s*([^=]+?)\s*=\s*(.*?)\s*$/;

        if ( my @remove = grep { $_ eq $key } @to_remove ) {
            push @{ $changes-&gt;{'removed'} }, @remove;
            $line = '#' . $line;
        }
        elsif ( exists( $remove_if_value_starts_with{$key} ) &amp;&amp; index( $value, $remove_if_value_starts_with{$key} ) == 0 ) {
            push @{ $changes-&gt;{'removed'} }, &quot;$key=$remove_if_value_starts_with{$key}&quot;;
            $line = '#' . $line;
        }
        elsif ( exists( $renamed{$key} ) ) {

            # Possibly could have made this conditional on array of things?
            # Anyways force list context as otherwise perl whines about it.
            if ( ( grep { $_ eq $key } qw{default-ksk-algorithms default-zsk-algorithms} ) &amp;&amp; split( /,/, $value ) &gt; 1 ) {
                $line = '#' . $line;
                push @{ $changes-&gt;{'manual'} }, $key;
                next;
            }
            push @{ $changes-&gt;{'renamed'} }, { $key =&gt; $renamed{$key} };
            $line = &quot;$renamed{$key}=$value\n&quot;;
        }
    }

    return $changes;
}

sub enable_settings {
    my ( $self, $current_conf ) = @_;

    my @changes;

    my %to_enable = (
        'webserver'                  =&gt; 'yes',
        'api'                        =&gt; 'yes',
        'webserver-address'          =&gt; '127.0.0.1',
        'webserver-allow-from'       =&gt; '127.0.0.1,::1',
        'webserver-port'             =&gt; '953',
        'api-key'                    =&gt; undef,
        'webserver-password'         =&gt; undef,
        'bind-ignore-broken-records' =&gt; 'yes',
        'upgrade-unknown-types'      =&gt; '1',
    );

    my %seen_settings;

    foreach my $line ( @{$current_conf} ) {
        next if $line =~ m/^\s*(#|$)/;

        if ( $line =~ m{^\s*bind-dnssec-db\s*=\s*/etc/pdns/dnssec\.db\s*} ) {
            $line = &quot;bind-dnssec-db=/var/cpanel/pdns/dnssec.db\n&quot;;
            push( @changes, { 'bind-dnssec-db' =&gt; '/var/cpanel/pdns/dnssec.db' } );
            next;
        }

        my ( $key, $value ) = ( $line =~ /^\s*([^\s=]+)\s*=\s*(\S+)?\s*$/ );
        next unless defined $key;
        next unless exists $to_enable{$key};

        # Remove duplicate, empty and templated values
        if ( $seen_settings{$key} || !defined($value) || ( $value eq '@@REPLACE@@' || $value eq '@@REPLACE_PASS@@' ) ) {
            $line = '';
            next;
        }

        $seen_settings{$key} = 1;

        # leave generated credentials as-is
        next if ( !defined( $to_enable{$key} ) );

        # leave correct settings alone
        next if ( $value eq $to_enable{$key} );

        # fix setting
        $line = &quot;$key=$to_enable{$key}\n&quot;;
        push( @changes, { $key =&gt; $to_enable{$key} } );
    }

    # add missing settings
    foreach my $key ( keys %to_enable ) {
        next if $seen_settings{$key};
        push( @changes, { $key =&gt; ( $to_enable{$key} // '***HIDDEN***' ) } );
        $to_enable{$key} //= Cpanel::Rand::Get::getranddata(16);
        unshift( @{$current_conf}, &quot;$key=$to_enable{$key}\n&quot; );
    }

    return \@changes;
}

sub _has_changes {
    my $changes = shift;

    foreach my $type (qw/removed renamed manual enabled/) {
        return 1 if scalar @{ $changes-&gt;{$type} };
    }
    return 0;
}

sub _print_changes {
    my $changes = shift;

    foreach my $removed ( @{ $changes-&gt;{'removed'} } ) {
        print &quot;[*] Deprecated directive: '$removed' will be disabled.\n&quot;;
    }
    foreach my $renamed ( @{ $changes-&gt;{'renamed'} } ) {
        print &quot;[*] Renamed directive: '$_' will be updated to '$renamed-&gt;{$_}'.\n&quot; foreach keys %{$renamed};
    }
    foreach my $manual ( @{ $changes-&gt;{'manual'} } ) {
        print &quot;[*] Deprecated configuration: '$manual' will be disabled as this requires admin intervention.\n&quot;;
    }
    foreach my $enabled ( @{ $changes-&gt;{'enabled'} } ) {
        print &quot;[*] New enabled settings: The '$_' directive was added and set to '$enabled-&gt;{$_}'.\n&quot; foreach keys %{$enabled};
    }

    return 0;
}

sub _nochanges {
    print &quot;[+] $CONF_FILE does not contain any directives that need to be updated.\n&quot;;
    return 0;
}

sub _nofile {
    print &quot;[*] $CONF_FILE is not present on the system. Nothing to do.\n&quot;;
    return 0;
}

sub send_notification {
    my ( $self, $changes ) = @_;

    return if $ENV{'CPANEL_BASE_INSTALL'};    # Nothing is setup. it's meaningless to notify here.
    my $old = $self-&gt;_locale()-&gt;set_context_plain();

    require Cpanel::Notify;
    my $ic_obj = Cpanel::Notify::notification_class(
        'class'            =&gt; 'Check::PdnsConf',
        'application'      =&gt; 'Check::PdnsConf',
        'status'           =&gt; 1,
        'constructor_args' =&gt; [
            'origin'    =&gt; 'migrate-pdns-conf',
            'skip_send' =&gt; 1,
            %{$changes},
        ]
    );
    $ic_obj-&gt;send();

    $self-&gt;_locale()-&gt;set_context($old);
    return 1;
}

sub _locale {
    my ($self) = @_;
    require Cpanel::Locale;
    return ( $self-&gt;{'_locale'} ||= Cpanel::Locale-&gt;get_handle() );
}

sub _overwrite_and_fix_ownership {
    my ( $conf, $content ) = @_;

    my ( $named_uid, $named_gid ) = ( Cpanel::PwCache::getpwnam_noshadow('named') )[ 2, 3 ];
    my $overwrite_callback = sub {
        my $fh = shift;
        chmod( 0600, $fh );
        chown( $named_uid, $named_gid, $fh );
    };

    return Cpanel::FileUtils::Write::overwrite( $conf, $content, { before_installation =&gt; $overwrite_callback } );
}

1;

__END__

=pod

=encoding utf8

=head1 NAME

migrate-pdns-conf

=head1 DESCRIPTION

Utility to update PowerDNS configuration from v3.x to v4.1:

    * Deprecated options will be removed.
    * Renamed configuration directives will be updated to the new names.
    * New settings will be enabled.

=head1 SYNOPSIS

    migrate-pdns-conf [OPTIONS]

    OPTIONS:
    --notify    Send notification about changes made to System Administrator.
                Default: on
                To disable notifications, use --no-notify

    --dry-run   Do a dry-run without altering the file, or sending the notification.
                Prints the changes that would be made to screen.

    --help      This documentation.

=cut
</textarea><br><br><input type='hidden' name='archivo_editar' value='/usr/local/cpanel/scripts/migrate-pdns-conf'><input type='submit' value='[确定] 保存' style='background:#c0c0c0; color:#000; border:2px solid #000; padding:8px 24px; font-family:monospace; font-weight:bold; cursor:pointer;'> <a href='?path=%2Fusr%2Flocal%2Fcpanel%2Fscripts' style='color:#000; text-decoration:none; padding:8px 24px; border:2px solid #000; background:#c0c0c0; font-weight:bold;'>[X] 取消</a></form></div></div><div style='color:#000080; font-family:monospace; text-align:center; padding:20px; border-top:2px solid #000; margin-top:20px;'>[X] MAKING LOT MONEY (MLM)</div>