BIND (named) broken in 25.1.4_1

[pupadmin]

Hi folks,

after the update to 25.1.4_1 (I think from 25.1.2) BIND is not starting anymore.

In system.log I only see:

Code Select Expand

<13>1 2025-03-28T19:08:58+01:00 SERVERNAME root 33135 - [meta sequenceId="1"] /usr/local/etc/rc.d/named: ERROR: named-checkconf for /usr/local/etc/namedb/named.conf failed

If I try to start binaries manually via shell, I get:

Code Select Expand

ld-elf.so.1: Shared object "libisc-9.20.7.so" not found, required by "named-checkconf"
ld-elf.so.1: Shared object "libisc-9.20.6.so" not found, required by "named"
ld-elf.so.1: Shared object "libdns-9.20.7.so" not found, required by "named-journalprint"

So there might something be mixed up in the package with the binaries and their libraries...
It would be great if this could be fixed as I prefer BIND vs. Unbound.

TIA & best regards,
Stefan

[franco]

Health audit, likely needs a reinstall of the bind920 package because files are missing...

[pupadmin]

Ok, strange: When I got the name resolution finally back running, OPNsense installed updates to bind and haproxy (single version step). Now everything is running again. No idea why these were missed in the full upgrade...

Anyway, I made a health check now afterwards and it complains about:

Code Select Expand

py37-markupsafe has a missing dependency: python37
py37-markupsafe has a missing dependency: py37-setuptools
py37-markupsafe is missing a required shared library: libpython3.7m.so.1.0

but I do not know if this is actually a problem. Everything seems to run fine again.

So, problem is resolved. Thank you very much for the quick reply and keep up the good work!

Cheers, Stefan

[Patrick M. Hausen]

Code Select Expand

pkg delete py37-markupsafe

[RamSense]

Hi Stefan, had this issue also this time again (running BIND, and I am not using unbound), with an earlier update I mentioned it also. Hoping it was a one time event ;-).
The "fix" was again the same, after the update (what looked like it all went well), you have to hit update again, and the missing files for bind are being installed/updated.
Glad you have resolved it also.

[doktornotor]

Have seen this on multiple boxes. There's something fishy about the dependencies and/or the way pkg resolves them on upgrades.

[doktornotor]

This is the latest one...

[74/74] Upgrading bind920 from 9.20.6 to 9.20.7...
[74/74] Extracting bind920-9.20.7: .......... done
pkg-static: Fail to rename /usr/local/bin/.pkgtemp.named-checkconf.L051g6LB8b9Y -> /usr/local/bin/named-checkconf:No such file or directory

After reboot:

eval: /usr/local/bin/named-checkconf: not found
/usr/local/etc/rc.d/named: ERROR: named-checkconf for /usr/local/etc/namedb/named.conf failed

Had to manually update the bind920 package after OPNsense upgrade finished.