<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>I have tried it on fresh RHEL 8.7.0, which should be similar to
what you get on Oracle Linux 8. Just already released RHEL.</p>
<p>$ dnf install bind9.16 -y</p>
<p># installs also recommended bind9.16-utils.</p>
<p>$ dnf swap bind9.16-utils bind-utils</p>
<p>Replaces successfully only utilities with older version</p>
<p>$ rpm -q bind9.16 bind-utils<br>
</p>
<p>bind9.16-9.16.23-0.9.el8.1.x86_64<br>
bind-utils-9.11.36-5.el8_7.2.x86_64</p>
<p>Result is the new named.service with older utilities. It should
not conflict this way, but have to use dnf swap. I have made sure
both bind-libs and bind9.16-libs can be installed at the same
time. This is a result of that. But installing new
bind9.16-dnssec-utils from CRB repository is still a preferred
method. I am quite confident Oracle does not modify my work done
on bind, they just rebuild SRPM.<br>
</p>
<div class="moz-cite-prefix">On 3/24/23 10:22, David Carvalho wrote:<br>
</div>
<blockquote type="cite"
cite="mid:004201d95e32$31f49ab0$95ddd010$@di.ubi.pt">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style>@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}code
{mso-style-priority:99;
font-family:"Courier New";}pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0cm;
font-size:10.0pt;
font-family:"Courier New";}span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;}span.EmailStyle22
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}div.WordSection1
{page:WordSection1;}</style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal">Thank you so much for your help.<o:p></o:p></p>
<p class="MsoNormal">Unfortunately it seems bind-utils 9.11 and
9.16 can not co-exist (at least in Oracle Linux 8). I had
problems with dependencies and didn’t force anything until
having more information.<o:p></o:p></p>
<p class="MsoNormal">Thanks once again!<o:p></o:p></p>
<p class="MsoNormal">Regards<o:p></o:p></p>
<p class="MsoNormal">David Carvalho<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1
1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span
style="mso-fareast-language:EN-GB" lang="EN-US">From:</span></b><span
style="mso-fareast-language:EN-GB" lang="EN-US">
bind-users <a class="moz-txt-link-rfc2396E" href="mailto:bind-users-bounces@lists.isc.org"><bind-users-bounces@lists.isc.org></a> <b>On
Behalf Of </b>Petr Menšík<br>
<b>Sent:</b> 24 March 2023 01:09<br>
<b>To:</b> <a class="moz-txt-link-abbreviated" href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a><br>
<b>Subject:</b> Re: dnssec-keygen not available in
Bind9.16-utils package?<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p>Oh, correction. Those were published, but in wrong
repository. If you enable CodeReady Builder (CRB) repository,
you should be able to install it even with current version.
Not sure what is official name on Oracle Linux, use "dnf
repolist --all" command to find the name. They are called
powertools on CentOS Stream 8.<o:p></o:p></p>
<p>On RHEL 8 enable it by command:<o:p></o:p></p>
<pre><code>subscription-manager repos --enable codeready-builder-for-rhel-8-x86_64-rpms</code><o:p></o:p></pre>
<div>
<p class="MsoNormal">On 3/24/23 01:43, Petr Menšík wrote:<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p>dnssec utilities are in bind9.16-dnssec-utils, which by
mistake stayed internal only package. We have built them,
but not published them. It would be moved into public
repository once RHEL 8.8.0 is released, tracked under bug
#2115322 [1]. It should be already available in CentOS
Stream 8.<o:p></o:p></p>
<p>I am sorry for the inconvenience, this issue were missed
during our testing. It should be possible to install
bind-utils from bind 9.11 together with bind9.16 server
until that is fixed. Unless you depend on more recent
features in bind9.16-utils, it might help in the mean time.<o:p></o:p></p>
<p>Regards,<br>
Petr<o:p></o:p></p>
<p>1. <a
href="https://bugzilla.redhat.com/show_bug.cgi?id=2115322"
moz-do-not-send="true" class="moz-txt-link-freetext">https://bugzilla.redhat.com/show_bug.cgi?id=2115322</a><o:p></o:p></p>
<div>
<p class="MsoNormal">On 3/20/23 13:31, David Carvalho via
bind-users wrote:<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal">Hello, good morning.<o:p></o:p></p>
<p class="MsoNormal">I’m trying to setup DNNSEC and I’ve
been using Bind9.16 packages available in Oracle Linux 8.
Somehow there are also “Bind” packages, which default to
9.11 version. Being a new installation I went for 9.16.
The problem now is that dnssec-keygen seems to be only
available in version 9.11, and if I try to install I get
problems with dependencies .<o:p></o:p></p>
<p class="MsoNormal">Does anyone have some experience with
this?<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">Kind regards<o:p></o:p></p>
<p class="MsoNormal">David<o:p></o:p></p>
</blockquote>
<pre>-- <o:p></o:p></pre>
<pre>Petr Menšík<o:p></o:p></pre>
<pre>Software Engineer, RHEL<o:p></o:p></pre>
<pre>Red Hat, <a href="https://www.redhat.com/" moz-do-not-send="true" class="moz-txt-link-freetext">https://www.redhat.com/</a><o:p></o:p></pre>
<pre>PGP: DFCF908DB7C87E8E529925BC4931CA5B6C9FC5CB<o:p></o:p></pre>
</blockquote>
<pre>-- <o:p></o:p></pre>
<pre>Petr Menšík<o:p></o:p></pre>
<pre>Software Engineer, RHEL<o:p></o:p></pre>
<pre>Red Hat, <a href="https://www.redhat.com/" moz-do-not-send="true" class="moz-txt-link-freetext">https://www.redhat.com/</a><o:p></o:p></pre>
<pre>PGP: DFCF908DB7C87E8E529925BC4931CA5B6C9FC5CB<o:p></o:p></pre>
</div>
</blockquote>
<pre class="moz-signature" cols="72">--
Petr Menšík
Software Engineer, RHEL
Red Hat, <a class="moz-txt-link-freetext" href="https://www.redhat.com/">https://www.redhat.com/</a>
PGP: DFCF908DB7C87E8E529925BC4931CA5B6C9FC5CB</pre>
</body>
</html>