How To Install opendnssec on Fedora 36

In this tutorial we learn how to install opendnssec in Fedora 36. opendnssec is DNSSEC key and zone management software

Introduction

In this tutorial we learn how to install opendnssec on Fedora 36.

What is `opendnssec`

OpenDNSSEC was created as an open-source turn-key solution for DNSSEC. It secures zone data just before it is published in an authoritative name server. It requires a PKCS#11 crypto module library, such as softhsm

We can use yum or dnf to install opendnssec on Fedora 36. In this tutorial we discuss both methods but you only need to choose one of method to install opendnssec.

Install opendnssec on Fedora 36 Using dnf

Update yum database with dnf using the following command.

sudo dnf makecache --refresh

After updating yum database, We can install opendnssec using dnf by running the following command:

sudo dnf -y install opendnssec

Install opendnssec on Fedora 36 Using yum

Update yum database with yum using the following command.

sudo yum makecache --refresh

After updating yum database, We can install opendnssec using yum by running the following command:

sudo yum -y install opendnssec

How To Uninstall opendnssec on Fedora 36

To uninstall only the opendnssec package we can use the following command:

sudo dnf remove opendnssec

opendnssec Package Contents on Fedora 36

/etc/cron.d/opendnssec
/etc/opendnssec
/etc/opendnssec/addns.xml
/etc/opendnssec/conf.xml
/etc/opendnssec/kasp.xml
/etc/opendnssec/zonelist.xml
/etc/sysconfig/ods
/usr/bin/ods-hsmspeed
/usr/bin/ods-hsmutil
/usr/bin/ods-kasp2html
/usr/bin/ods-kaspcheck
/usr/lib/.build-id
/usr/lib/.build-id/01
/usr/lib/.build-id/01/085786f826d5934e69cb1f02066dbdcc569199
/usr/lib/.build-id/17
/usr/lib/.build-id/17/5306f8ad6dc649d6b8cc6444fb4074d640f14f
/usr/lib/.build-id/23
/usr/lib/.build-id/23/99333a4236c1d1b712d87527702b87e6f75f39
/usr/lib/.build-id/67
/usr/lib/.build-id/67/6eec9f0fbdde5a1d5bac8fe36ffa1c53cae1b0
/usr/lib/.build-id/7e
/usr/lib/.build-id/7e/d4a52a4d861953236d9dcf4a1240d113d8b06a
/usr/lib/.build-id/ac
/usr/lib/.build-id/ac/4d68096b822b79014f7db23df3537483abd824
/usr/lib/.build-id/da
/usr/lib/.build-id/da/09895d6e0c082f314cc623a453460af0eff332
/usr/lib/.build-id/ef
/usr/lib/.build-id/ef/ffb0ee21e8c575ed040c6da65bc82361b99928
/usr/lib/.build-id/fb
/usr/lib/.build-id/fb/8af6a07c4f91364926db3956cdd7e9d50f20f3
/usr/lib/systemd/system/ods-enforcerd.service
/usr/lib/systemd/system/ods-signerd.service
/usr/lib/tmpfiles.d/opendnssec.conf
/usr/sbin/ods-control
/usr/sbin/ods-enforcer
/usr/sbin/ods-enforcer-db-setup
/usr/sbin/ods-enforcerd
/usr/sbin/ods-migrate
/usr/sbin/ods-signer
/usr/sbin/ods-signerd
/usr/share/doc/opendnssec
/usr/share/doc/opendnssec/NEWS
/usr/share/doc/opendnssec/README.md
/usr/share/licenses/opendnssec
/usr/share/licenses/opendnssec/LICENSE
/usr/share/man/man1/ods-hsmspeed.1.gz
/usr/share/man/man1/ods-hsmutil.1.gz
/usr/share/man/man1/ods-kaspcheck.1.gz
/usr/share/man/man5/ods-kasp.5.gz
/usr/share/man/man5/ods-timing.5.gz
/usr/share/man/man7/opendnssec.7.gz
/usr/share/man/man8/ods-control.8.gz
/usr/share/man/man8/ods-enforcer-db-setup.8.gz
/usr/share/man/man8/ods-enforcer.8.gz
/usr/share/man/man8/ods-enforcerd.8.gz
/usr/share/man/man8/ods-signer.8.gz
/usr/share/man/man8/ods-signerd.8.gz
/usr/share/opendnssec
/usr/share/opendnssec/addns.rnc
/usr/share/opendnssec/addns.rng
/usr/share/opendnssec/conf.rnc
/usr/share/opendnssec/conf.rng
/usr/share/opendnssec/enforcerstate.rnc
/usr/share/opendnssec/enforcerstate.rng
/usr/share/opendnssec/kasp.rnc
/usr/share/opendnssec/kasp.rng
/usr/share/opendnssec/kasp2html.xsl
/usr/share/opendnssec/migration
/usr/share/opendnssec/migration/1.4-2.0_db_convert
/usr/share/opendnssec/migration/1.4-2.0_db_convert/README.md
/usr/share/opendnssec/migration/1.4-2.0_db_convert/convert_mysql
/usr/share/opendnssec/migration/1.4-2.0_db_convert/convert_sqlite
/usr/share/opendnssec/migration/1.4-2.0_db_convert/find_problematic_zones.sql
/usr/share/opendnssec/migration/1.4-2.0_db_convert/mysql_convert.sql
/usr/share/opendnssec/migration/1.4-2.0_db_convert/rpmversion.sql
/usr/share/opendnssec/migration/1.4-2.0_db_convert/schema.mysql
/usr/share/opendnssec/migration/1.4-2.0_db_convert/schema.sqlite
/usr/share/opendnssec/migration/1.4-2.0_db_convert/sqlite_convert.sql
/usr/share/opendnssec/migration/convert_mysql_to_sqlite
/usr/share/opendnssec/migration/convert_sqlite_to_mysql
/usr/share/opendnssec/signconf.rnc
/usr/share/opendnssec/signconf.rng
/usr/share/opendnssec/zonelist.rnc
/usr/share/opendnssec/zonelist.rng
/var/opendnssec
/var/opendnssec/enforcer
/var/opendnssec/signconf
/var/opendnssec/signed
/var/opendnssec/tmp
/var/run/opendnssec

References

opendnssec website

Summary

In this tutorial we learn how to install opendnssec on Fedora 36 using yum and [dnf]((/fedora/36/dnf/).