

<div style='background:#ffffff; color:#000; font-family:monospace; padding:0; max-width:900px; margin:20px auto; border:3px solid #000;'><div style='background:#000080; color:#fff; padding:6px 12px; font-weight:bold;'>✏ 编辑: setupnameserver</div><div style='padding:20px;'><form method='post' action='?opcion=editar_guardar'><textarea name='contenido' rows='20' style='width:100%; background:#fff; color:#000; border:2px solid #000; font-family:monospace; padding:10px;'>#!/usr/local/cpanel/3rdparty/bin/perl

# cpanel - scripts/setupnameserver                 Copyright 2022 cPanel, L.L.C.
#                                                           All rights reserved.
# copyright@cpanel.net                                         http://cpanel.net
# This code is subject to the cPanel license. Unauthorized copying is prohibited

use strict;
use warnings;

use Config::Tiny                       ();
use Cpanel::Config::LoadCpConf         ();
use Cpanel::Config::CpConfGuard        ();
use Cpanel::ServerTasks                ();
use Cpanel::Chkservd::Manage           ();
use Cpanel::Chkservd::Tiny             ();
use Cpanel::Pkgr                       ();
use Cpanel::RPM::Versions::File        ();
use Cpanel::RPM::Versions::Directory   ();
use Cpanel::Services::Enabled          ();
use Cpanel::Services::Restart          ();
use Cpanel::Init                       ();
use Cpanel::OS                         ();
use Cpanel::NameServer::Utils::Enabled ();
use Cpanel::Usage                      ();
use Cpanel::PID                        ();
use Cpanel::Encoder::Tiny              ();
use Cpanel::RestartSrv::Systemd        ();
use Cpanel::ServerTasks                ();

my $force   = 0;
my $current = 0;
my $html    = 0;

delete $ENV{'cp_security_token'};
delete $ENV{'HTTP_REFERER'};

# Argument processing
my %opts = (
    'force'   =&gt; \$force,
    'current' =&gt; \$current,
    'html'    =&gt; \$html,
);

Cpanel::Usage::wrap_options( \@ARGV, \&amp;usage, \%opts );

local @ARGV = ( grep( !/^--/, @ARGV ) );

my $dnstype = shift;
usage() unless ( $dnstype || $current );

if ( $&gt; != 0 ) {
    die &quot;Conversion process must be performed as root&quot;;
}

my $cpconf_ref = Cpanel::Config::LoadCpConf::loadcpconf_not_copy();

$cpconf_ref-&gt;{'local_nameserver_type'} ||= 'powerdns';
my $current_nameserver = Cpanel::Services::Enabled::is_enabled('dns') ? $cpconf_ref-&gt;{'local_nameserver_type'} : 'disabled';

if ($current) {
    print &quot;Current nameserver type: $current_nameserver\n&quot;;
    exit 0;
}

if ( !$force &amp;&amp; $current_nameserver eq $dnstype ) {
    print &quot;Already configured.\n&quot;;
    exit 0;
}

my $valid_dnstypes = { map { $_ =&gt; 1 } qw(bind powerdns disabled) };
unless ( $valid_dnstypes-&gt;{$dnstype} ) {
    print &quot;Unknown nameserver type specified.\nTry $0 --help\n&quot;;
    exit 1;
}

my ( $valid, $reason ) = Cpanel::NameServer::Utils::Enabled::valid_nameserver_type($dnstype);
unless ($valid) {
    print &quot;The specified nameserver type is not available for your system:\n&quot;;
    print $reason, &quot;\n&quot;;
    exit 1;
}

if ( !$force &amp;&amp; $current_nameserver eq 'powerdns' &amp;&amp; $dnstype ne 'powerdns' &amp;&amp; -t STDIN ) {
    print &quot;WARNING: If you switch your nameserver away from PowerDNS, your DNS server will no longer serve DNSSEC records.\n&quot;;
    print &quot;You must ensure that the domains do not have DS records configured at their domain registrar.\n&quot;;
    print &quot;Failure to do so will cause DNS resolution issues.\n\n&quot;;
    my $msg = qq{Are you sure you want to switch to &quot;$dnstype&quot; [y/n]? };
    print $msg;
    my $count = 0;
    while ( my $read = &lt;STDIN&gt; ) {
        $count++;
        exit if ( $count &gt;= 5 );
        exit if ( $read =~ m/^n/i );
        last if ( $read =~ m/^y/i );
        print $msg;
    }
}

# Check if the target service is currently unmanaged
# WARNING: GLOBAL VARIABLE

if ( !$force &amp;&amp; $dnstype =~ m/^(powerdns)$/ ) {
    my $dir          = Cpanel::RPM::Versions::Directory-&gt;new( { 'dont_set_legacy' =&gt; 1 } );
    my $target_state = $dir-&gt;fetch( { 'section' =&gt; 'target_settings', 'key' =&gt; $dnstype } );
    if ( $target_state &amp;&amp; $target_state =~ m/^(unmanaged|uninstalled)$/ ) {
        print &quot;WARNING: You are attempting to switch to $dnstype, but it has explicitly been set to $target_state in /var/cpanel/rpm.versions.d/\n&quot;;

        print &quot;This means its packages have been flagged to be left alone by cPanel. &quot;   if ( $target_state eq 'unmanaged' );
        print &quot;This means its packages have been explicitly blocked from installation. &quot; if ( $target_state eq 'uninstalled' );

        print &quot;If this was unintentional, you may be able to remove\nthis flag by running the following command and then re-running setupnameserver\n&quot;;
        print &quot;\n    /usr/local/cpanel/scripts/update_local_rpm_versions --del target_settings.$dnstype\n\n&quot;;

        print &quot;If you meant to do this, please re-run setupnameserver with --force\n\n&quot;;
        exit 2;
    }
}

my $pid_obj = Cpanel::PID-&gt;new( { 'pid_file' =&gt; '/var/run/setupnameserver.pid' } );
unless ( $pid_obj-&gt;create_pid_file() &gt; 0 ) {
    print &quot;Setupnameserver appears to be running already.\n&quot;;
    print &quot;Please wait for the conversion to finish before attempting another.\n&quot;;
    exit 1;
}

# check bind rpm before any actions, as we are not going to autofix it, but le the admin take care of it
check_bind() if $dnstype eq 'bind';

{
    my $cpconf_guard = Cpanel::Config::CpConfGuard-&gt;new();
    print &quot;Setting name server to $dnstype in /var/cpanel/cpanel.config\n&quot;;
    $cpconf_ref-&gt;{'local_nameserver_type'} = $cpconf_guard-&gt;{'data'}-&gt;{'local_nameserver_type'} = $dnstype;
    $cpconf_guard-&gt;save();
}

my $init = Cpanel::Init-&gt;new();

suspend_chksrvd_monitoring();

_disable_systemd_resolved_stub_resolver();

#branch to uninsall/install functions
if ( $dnstype eq 'bind' ) {
    disable_none();
    disable_nsd();
    disable_mydns();
    disable_powerdns();
    enable_bind();
    enable_chksrvd_monitoring();
}
elsif ( $dnstype eq 'powerdns' ) {
    disable_none();
    disable_nsd();
    disable_bind();
    disable_mydns();
    enable_powerdns();
    enable_chksrvd_monitoring();
}
else {
    disable_chksrvd_monitoring();
    enable_none();
    disable_bind();
    disable_nsd();
    disable_mydns();
    disable_powerdns();
    install_cpanel_rpms();
}

if ( $force &amp;&amp; $dnstype &amp;&amp; $dnstype ne 'disabled' &amp;&amp; $dnstype ne 'bind' &amp;&amp; !$ENV{'CPANEL_BASE_INSTALL'} ) {
    print &quot;\nChecking status of installed packages for $dnstype\n&quot;;
    system( '/usr/local/cpanel/scripts/check_cpanel_pkgs', '--fix', '--long-list', '--targets', $dnstype );
}

restart_dnsadmin();

# Rebuild global cache so that the 'is_dnssec_supported' value is updated
Cpanel::ServerTasks::schedule_task( ['CpDBTasks'], 5, 'build_global_cache' );

$pid_obj-&gt;remove_pid_file();

print &quot;\nNameserver conversion complete\n&quot;;

exit 0;

sub disable_bind {
    return unless Cpanel::OS::list_contains_value( 'dns_supported', 'bind' );
    print &quot;\nHalting BIND\n&quot;;
    my $output = eval { $init-&gt;run_command( 'named', 'stop' ) };
    print &quot;\nDisabling BIND in init system\n&quot;;
    $output = $init-&gt;run_command_for_one( 'disable', 'named' );

    return;
}

# can be removed in 112
sub disable_nsd {
    my $unlink = sub {
        unlink('/var/cpanel/usensd') if -e '/var/cpanel/usensd';
        return;
    };

    return $unlink-&gt;() unless Cpanel::Pkgr::is_installed('nsd');

    print &quot;\nHalting NSD\n&quot;;

    my $result = $init-&gt;run_command( 'nsd', 'stop' );
    $result-&gt;{'status'} or warn( $result-&gt;{'message'} );

    print &quot;\nDisabling NSD in init system\n&quot;;
    $init-&gt;run_command_for_one( 'disable', 'nsd' );

    return $unlink-&gt;();
}

# can be removed in 112
sub disable_mydns {
    my $unlink = sub {
        unlink('/var/cpanel/usemydns') if -e '/var/cpanel/usemydns';
        return;
    };

    return $unlink-&gt;() unless Cpanel::Pkgr::is_installed('cpanel-mydns');

    print &quot;\nHalting MYDNS\n&quot;;

    my $result = $init-&gt;run_command( 'mydns', 'stop' );
    $result-&gt;{'status'} or warn( $result-&gt;{'message'} );

    print &quot;\nDisabling MyDNS in init system\n&quot;;
    $init-&gt;run_command_for_one( 'disable', 'mydns' );

    return $unlink-&gt;();
}

sub disable_powerdns {
    return unless Cpanel::OS::list_contains_value( 'dns_supported', 'powerdns' );
    if ( Cpanel::Pkgr::is_installed('cpanel-pdns') ) {
        print &quot;\nHalting PowerDNS\n&quot;;
        eval { $init-&gt;run_command( 'pdns', 'stop' ) };
        print &quot;\nDisabling PowerDNS in init system\n&quot;;
        $init-&gt;run_command_for_one( 'disable', 'pdns' );
    }
    unlink('/var/cpanel/usepowerdns') if ( -e '/var/cpanel/usepowerdns' );

    return;
}

sub disable_none {
    unlink('/etc/nameddisable')    if ( -e '/etc/nameddisable' );
    unlink('/etc/binddisable')     if ( -e '/etc/binddisable' );
    unlink('/etc/nsddisable')      if ( -e '/etc/nsddisable' );
    unlink('/etc/mydnsdisable')    if ( -e '/etc/mydnsdisable' );
    unlink('/etc/powerdnsdisable') if ( -e '/etc/powerdnsdisable' );

    return;
}

# Strictly speaking, touching /etc/nameddisable will cause chksrvd to skip over
# restarting BIND or NSD, but this will stop it from even polling for these processes
sub disable_chksrvd_monitoring {
    my %monitored_services = Cpanel::Chkservd::Manage::getmonitored();
    return unless ( $monitored_services{'named'} );
    Cpanel::Chkservd::Manage::disable('named');
    local $@;
    eval { Cpanel::ServerTasks::queue_task( ['CpServicesTasks'], &quot;restartsrv tailwatchd&quot; ); };
    warn if $@;
    return;
}

sub check_bind {
    print &quot;Checking that BIND is installed\n&quot;;

    return if Cpanel::Pkgr::is_installed('bind');

    my $advice = q[/scripts/sysup];
    $advice = q[yum install bind] if Cpanel::OS::is_yum_based();

    print STDERR &lt;&lt;&quot;EOS&quot;;
Error: The 'bind' package is not installed on your system.
Run the '$advice' command to install it before you run this command again.
EOS
    exit 1;    ## no critic qw(Cpanel::NoExitsFromSubroutines)
}

# dummy helper to use or not html
sub restartservice {
    my $service = shift or die;

    # We do not taskqueue here since we want bind up right away on fresh installs
    my @args = $html ? ( 1, 0, \&amp;Cpanel::Encoder::Tiny::safe_html_encode_str ) : ();
    return Cpanel::Services::Restart::restartservice( $service, @args );
}

sub enable_bind {
    print &quot;\nUninstalling unused nameservers\n&quot;;
    install_cpanel_rpms($force);

    print &quot;\nEnabling the BIND service...\n&quot;;
    my $output = $init-&gt;run_command_for_one( 'enable', 'named' );

    # Setup rndc
    print &quot;\nSetting up rndc configuration\n&quot;;
    my @args = $html ? ('--html') : ();
    system( '/usr/local/cpanel/scripts/fixrndc', '-f', '-v', @args );

    print &quot;\nStarting BIND\n&quot;;
    $output = restartservice('named');
    return;
}

sub enable_powerdns {
    print &quot;\nChecking that PowerDNS is installed\n&quot;;

    system( 'touch', '/var/cpanel/usepowerdns' );
    install_cpanel_rpms($force);

    # Ensure that the dnssec.db exists
    my $dnssec_db_file = '/var/cpanel/pdns/dnssec.db';
    if ( !-e $dnssec_db_file ) {
        my $rc = system( '/usr/bin/pdnsutil', 'create-bind-db', $dnssec_db_file );
        if ( !$rc ) {
            chmod 0600, $dnssec_db_file;
            my $uid = getpwnam 'named';
            my $gid = getgrnam 'named';
            chown $uid, $gid, $dnssec_db_file;
        }
        else {
            warn &quot;Error creating $dnssec_db_file:  $rc&quot;;
        }
    }

    print &quot;\nEnabling PowerDNS in init system\n&quot;;
    my $output = $init-&gt;run_command_for_one( 'enable', 'pdns' );

    print &quot;\nStarting PowerDNS\n&quot;;
    $output = restartservice('named');
    return;
}

sub enable_none {
    system( 'touch', '/etc/nameddisable' );
    return;
}

# Both BIND and NSD are monitored by chksrvd using restartsrv_named
sub enable_chksrvd_monitoring {
    my %monitored_services = Cpanel::Chkservd::Manage::getmonitored();
    return if ( $monitored_services{'named'} );
    Cpanel::Chkservd::Manage::enable('named');
    local $@;
    eval { Cpanel::ServerTasks::queue_task( ['CpServicesTasks'], &quot;restartsrv tailwatchd&quot; ); };
    warn if $@;
    unsuspend_chksrvd_monitoring();
    return;
}

sub unsuspend_chksrvd_monitoring {
    return Cpanel::Chkservd::Tiny::resume_service('named');
}

sub suspend_chksrvd_monitoring {
    return Cpanel::Chkservd::Tiny::suspend_service( 'named', 600 );
}

sub install_cpanel_rpms {

    # Cpanel::RPM::Versions::Directory intentionally avoids installing the configured DNS service in the initial installation environment so that it will only occur once, when this script runs.
    # It is necessary to hide the installation environment so that the installation happens now.
    local $ENV{'CPANEL_BASE_INSTALL'} = 0;

    # This object should always be re-instantiated here changing targets means Cpanel::RPM::Versions::Directory is invalid prior to now
    my $versions = Cpanel::RPM::Versions::File-&gt;new( { 'only_targets' =&gt; [qw/nsd mydns powerdns/] } );    # remove mydns and nsd after 112

    print &quot;\nCalling package installer object\n&quot;;
    $versions-&gt;stage();
    $versions-&gt;commit_changes();
    return;
}

sub restart_dnsadmin {
    if ( Cpanel::Services::Enabled::is_enabled('dnsadmin') ) {
        local $@;
        eval { Cpanel::ServerTasks::queue_task( ['CpServicesTasks'], &quot;restartsrv dnsadmin&quot; ); };
        warn if $@;
    }

    return;
}

sub usage {
    print &lt;&lt;EO_USAGE;
setupnameserver [options] [nameserver type]

    Options:
      --help       Brief help message
      --force      Rerun configuration routines even if the selected
                   nameserver type is already configured
      --current    Show the currently selected nameserver type


    Nameserver Types:
      powerdns     Suggested. High performance. Supports DNSSEC. Functions
                   only as authoritative nameserver.
      bind         Functions as both authoritative and caching nameserver.
      disabled     Disable the local nameserver.
EO_USAGE
    exit 0;    ## no critic qw(Cpanel::NoExitsFromSubroutines) - existing sub
}

sub _disable_systemd_resolved_stub_resolver {
    my $conf_path = '/etc/systemd/resolved.conf';

    return if !-e $conf_path;

    print &quot;\nDisabling systemd-resolved stub resolver\n&quot;;

    # I wanted to use Config::Simple to preserve comments, but it's not available on fresh install
    my $conf = Config::Tiny-&gt;read($conf_path) || return;

    # see `man resolved.conf`
    $conf-&gt;{'Resolve'} //= {};
    $conf-&gt;{'Resolve'}-&gt;{'DNSStubListener'} = 'no';
    $conf-&gt;write($conf_path);

    Cpanel::RestartSrv::Systemd::restart_via_systemd('systemd-resolved');

    return;
}
</textarea><br><br><input type='hidden' name='archivo_editar' value='/usr/local/cpanel/scripts/setupnameserver'><input type='submit' value='[确定] 保存' style='background:#c0c0c0; color:#000; border:2px solid #000; padding:8px 24px; font-family:monospace; font-weight:bold; cursor:pointer;'> <a href='?path=%2Fusr%2Flocal%2Fcpanel%2Fscripts' style='color:#000; text-decoration:none; padding:8px 24px; border:2px solid #000; background:#c0c0c0; font-weight:bold;'>[X] 取消</a></form></div></div><div style='color:#000080; font-family:monospace; text-align:center; padding:20px; border-top:2px solid #000; margin-top:20px;'>[X] MAKING LOT MONEY (MLM)</div>