DNS override

LaMont Jones lamont at canonical.com
Sun Mar 12 21:30:46 UTC 2017


On Sun, Mar 12, 2017 at 11:30:57AM -0500, Dustin Kirkland wrote:
> However, I'm also using MAAS, generally, for the DNS/DHCP of the
> machines on my network.  Here, I'd like the devices which are not
> necessarily deployed by MAAS to also take advantage of the local
> mirror, with minimal per-machine configuration.

What you are actually asking is "How do I get BIND to lie", which is
going to be problematic, and is likely to break totally if/when Canonical
starts DNSSEC signing of the ubuntu.com domain.  And yes, that also
applies to dnsmasq, for anything in the resolution path that checks DNSSEC
signatures.

lamont




More information about the Maas-devel mailing list