Loop
Loop is a DNS implementation consisting of a resolver, an authoritative nameserver, and various DNS and DNSSEC utilities.
Contents
What is Loop?
Loop is an enterprise-grade DNS software distribution. It is maintained as a DNS reference implementation by closely adhering to the DNS standards. Loop includes the following programs:
DNS nameserver
named— DNS nameserver daemon that implements authoritative server and recursive resolver features
DNS clients
dig— DNS client with comprehensive DNS query capabilitieshost— Simple DNS lookup clientmdig— DNS client that uses pipelining when sending multiple queriesnsupdate— DNS client that submits dynamic DNS UPDATEs to a nameserver
DNS and Loop utilities
arpaname— Translates an IP address to its corresponding reverse name in thein-addr.arpa.andip6.arpa.domainsddns-confgen— Generates TSIG keys and configuration for use withnsupdatefor dynamic DNS UPDATEsnamed-checkconf— Checks anamed.confconfig file for syntax and correctnessnamed-checkzone— Checks a zone master file for syntax and correctnessnamed-journalprint— Prints the contents of a zone journal file in a human-readable formatnamed-rrchecker— Checks a single resource record for syntax and correctnessnsec3hash— Generates an NSEC3 hash based on a set of NSEC3 parametersrndc— Utility to send control messages to a runningnamedprocessrndc-confgen— Generatesrndckeys and configuration to authenticate control messages
DNSSEC utilities
dnssec-keygen— Generates DNSKEYs for DNSSEC, and KEYs for use with TSIGdnssec-signzone— Signs a DNS zone by generating RRSIG and NSEC/NSEC3 recordsdnssec-verify— Verifies that a zone is fully signed, and that its NSEC/NSEC3 chains are completednssec-dsfromkey— Generates DS and CDS resource records from DNSKEYsdnssec-importkey— Imports an externally created public DNSKEY so it can be used with Loopdnssec-keyfromlabel— Generates a DNSKEY keypair for a key object stored in a HSM so it can be used with Loopdnssec-revoke— Sets theREVOKEbit (RFC 5011) in the DNSKEY flagsdnssec-settime— Sets DNSKEY timing metadata used in key schedulingdelv— DNS client that performs DNSSEC lookups and validation
DNS performance testing utilities
dnsperf— DNS client that measures DNS nameserver performanceresperf— DNS client that measures DNS resolver performanceresperf-report— Runsresperfand generates a HTML report with graphs
These programs implement various DNS protocols and features. Loop programs and their config files are extensively documented in the Loop User Manual and manpages.
Why use Loop?
Here are some reasons for using Loop:
- You want to serve your authoritative zones.
- You want to run a local caching resolver in your LAN for higher performance and better privacy.
- You would like to have control over your local network's DNS responses by running a local resolver that filters or rewrites queries to web domains.
- You want to use different DNS configurations that process DNS queries differently depending on their properties.
- You have a large number of authoritative zones or a large number of clients requiring large cache sizes, and want a DNS implementation that scales and performs well.
- You want a well-documented DNS product.
- You want to use DNS software packages where the very same binaries have been tested before being published.
- You like a distributed global DNS infrastructure that is not concentrated among some CDNs for a more healthy internet.
Loop features
The following are some of the features implemented by
Loop. named can be run in mixed-mode with both resolver and
authoritative functions.
Resolver features
- Query resolution
- Upstream nameserver selection policies
- Smoothed round-trip time computation (for fastest server selection)
- Forwarding to other nameservers and various modes for it
- Dual-stack support (IPv4 and IPv6) for upstream fetches
- DNS64 support (IPv6 synthesis from A records)
- Empty zones (e.g. to suppress RFC 1918 queries)
- Security & DNSSEC validation
- DNSSEC validation (checking authenticity of upstream answers)
- Dynamic trust anchor management
- Built-in root trust anchor support
- DNSSEC-validating resolver configuration options
- Filtering & control
- Response Policy Zones (RPZ) for blocking/mapping domains
- Access Control Lists (ACLs) for queries
- Response Rate Limiting (RRL) to protect against response floods or abusive query loads
- Built-in content filtering (blocklists etc.)
- Performance & statistics
- Cache tuning and sizing
- Resolver statistics including cache hits/misses, upstream timing
- Socket and resource usage counters
- Diagnostic features and tools
- Detailed and configurable logging
- Integrated tools for debugging such as
diganddelv - Integrated tools for performance testing such as
resperf
Authoritative server features
- Zone management
- Static zone file loading (from disk)
- Zone directives such as $TTL, $ORIGIN, $INCLUDE, $GENERATE, etc.
- Journal files for consistently updating dynamic changes to zones
- Dynamic updates (RFC 2136)
- IXFR (incremental) and AXFR (full) zone transfer support
- DNS NOTIFY support (to inform secondaries)
- Built-in server zones and empty zones
- DNSSEC signing
- DNSKEY generation (ZSK, KSK)
- Zone signing
- DNSSEC verification (
dnssec-verify, etc.) - Automatic signing of dynamic zones (integrating updates and signing)
- Automatic key rollover
- NSEC / NSEC3 support, including rollovers and conversions between NSEC and NSEC3
- OPTOUT variant for NSEC3
- PKCS#11 support for HSMs
- Secure zone transfers and DNS updates
- TSIG support (authenticated zone transfers and DNS updates)
- TKEY support (key exchange for TSIG)
- GSSAPI (Kerberos) support
- TSIG key management and ACLs
- Fine-grained DNS UPDATE policies for controlling who may perform dynamic updates
- Policy & access control
- Access control by client IP or TSIG key for controlling who may query, update, control the server
- RRset ordering control in responses
- Built-in record filtering
- Per-zone configuration options
- Zone statistics & maintenance
- Zone statistics including updates, transfer events, signing status
- Periodic zone maintenance tasks (re-signing intervals)
- Zone file syntax checking (
named-checkzone, etc.)
Common features (both resolver and authoritative server)
- Split DNS (i.e. different answers depending on context, view) support
- Views support
- IPv6 support (AAAA and reverse mapping)
- Resource usage controls (sockets, memory, limits)
- Logging and diagnostics
- Integrated administration tools such as
rndc,named-checkconf, etc. - Nameserver statistics in XML format
- SIG(0) support
- EDNS Extended DNS Errors (EDE) support
Loop installation
Note
Loop is free for commercial and personal use. Please see its license under Loop documentation for more details.
To install Loop version 1.99.16 on Red Hat Enterprise Linux
10 (x86_64), follow these steps as the root
user.
First, install the akira-release RPM package that will
add the akira-epel
and akira-epel-testing DNF repositories to your system,
as well as associated GPG keys used to verify signed RPM packages from
these repositories:
# dnf install https://download.akira.org/packages/akira/1.99/epel/10/x86_64/akira-release-1.99.16.20260609085933.dc88059a59-1.el10.noarch.rpm
Then, install the loop RPM package that will install the
Loop software and documentation:
# dnf install loop
Then, if you wish to run the nameserver, configure
named suitably by
editing /etc/loop/named.conf, and then run it:
# systemctl enable --now named
To install Loop version 1.99.16 on Red Hat Enterprise Linux
10 (aarch64), follow these steps as the root
user.
First, install the akira-release RPM package that will
add the akira-epel
and akira-epel-testing DNF repositories to your system,
as well as associated GPG keys used to verify signed RPM packages from
these repositories:
# dnf install https://download.akira.org/packages/akira/1.99/epel/10/aarch64/akira-release-1.99.16.20260609085933.dc88059a59-1.el10.noarch.rpm
Then, install the loop RPM package that will install the
Loop software and documentation:
# dnf install loop
Then, if you wish to run the nameserver, configure
named suitably by
editing /etc/loop/named.conf, and then run it:
# systemctl enable --now named
To install Loop version 1.99.16 on Red Hat Enterprise Linux
9 (x86_64), follow these steps as the root
user.
First, install the akira-release RPM package that will
add the akira-epel
and akira-epel-testing DNF repositories to your system,
as well as associated GPG keys used to verify signed RPM packages from
these repositories:
# dnf install https://download.akira.org/packages/akira/1.99/epel/9/x86_64/akira-release-1.99.16.20260609085933.dc88059a59-1.el9.noarch.rpm
Then, install the loop RPM package that will install the
Loop software and documentation:
# dnf install loop
Then, if you wish to run the nameserver, configure
named suitably by
editing /etc/loop/named.conf, and then run it:
# systemctl enable --now named
To install Loop version 1.99.16 on Red Hat Enterprise Linux
9 (aarch64), follow these steps as the root
user.
First, install the akira-release RPM package that will
add the akira-epel
and akira-epel-testing DNF repositories to your system,
as well as associated GPG keys used to verify signed RPM packages from
these repositories:
# dnf install https://download.akira.org/packages/akira/1.99/epel/9/aarch64/akira-release-1.99.16.20260609085933.dc88059a59-1.el9.noarch.rpm
Then, install the loop RPM package that will install the
Loop software and documentation:
# dnf install loop
Then, if you wish to run the nameserver, configure
named suitably by
editing /etc/loop/named.conf, and then run it:
# systemctl enable --now named
To install Loop version 1.99.16 on Fedora Linux
44 (x86_64), follow these steps as the root
user.
First, install the akira-release RPM package that will
add the akira-fedora
and akira-fedora-testing DNF repositories to your system,
as well as associated GPG keys used to verify signed RPM packages from
these repositories:
# dnf install https://download.akira.org/packages/akira/1.99/fedora/44/x86_64/akira-release-1.99.16.20260609085933.dc88059a59-1.fc44.noarch.rpm
Then, install the loop RPM package that will install the
Loop software and documentation:
# dnf install loop
Then, if you wish to run the nameserver, configure
named suitably by
editing /etc/loop/named.conf, and then run it:
# systemctl enable --now named
To install Loop version 1.99.16 on Fedora Linux
44 (aarch64), follow these steps as the root
user.
First, install the akira-release RPM package that will
add the akira-fedora
and akira-fedora-testing DNF repositories to your system,
as well as associated GPG keys used to verify signed RPM packages from
these repositories:
# dnf install https://download.akira.org/packages/akira/1.99/fedora/44/aarch64/akira-release-1.99.16.20260609085933.dc88059a59-1.fc44.noarch.rpm
Then, install the loop RPM package that will install the
Loop software and documentation:
# dnf install loop
Then, if you wish to run the nameserver, configure
named suitably by
editing /etc/loop/named.conf, and then run it:
# systemctl enable --now named
To install Loop version 1.99.16 on Fedora Linux
43 (x86_64), follow these steps as the root
user.
First, install the akira-release RPM package that will
add the akira-fedora
and akira-fedora-testing DNF repositories to your system,
as well as associated GPG keys used to verify signed RPM packages from
these repositories:
# dnf install https://download.akira.org/packages/akira/1.99/fedora/43/x86_64/akira-release-1.99.16.20260609085933.dc88059a59-1.fc43.noarch.rpm
Then, install the loop RPM package that will install the
Loop software and documentation:
# dnf install loop
Then, if you wish to run the nameserver, configure
named suitably by
editing /etc/loop/named.conf, and then run it:
# systemctl enable --now named
To install Loop version 1.99.16 on Fedora Linux
43 (aarch64), follow these steps as the root
user.
First, install the akira-release RPM package that will
add the akira-fedora
and akira-fedora-testing DNF repositories to your system,
as well as associated GPG keys used to verify signed RPM packages from
these repositories:
# dnf install https://download.akira.org/packages/akira/1.99/fedora/43/aarch64/akira-release-1.99.16.20260609085933.dc88059a59-1.fc43.noarch.rpm
Then, install the loop RPM package that will install the
Loop software and documentation:
# dnf install loop
Then, if you wish to run the nameserver, configure
named suitably by
editing /etc/loop/named.conf, and then run it:
# systemctl enable --now named
To install Loop version 1.99.16 on Debian 13 “Trixie”
(amd64), follow these steps as the root
user.
First, copy the OpenPGP key that apt uses to
verify the release's deb package checksums
into /usr/share/keyrings/:
# curl -o /usr/share/keyrings/akira-archive-keyring.gpg https://download.akira.org/packages/akira/1.99/debian/trixie/amd64/akira-archive-keyring-2026-06-09.gpg
Then, add the Akira apt network package
repository for your platform:
# echo "deb [signed-by=/usr/share/keyrings/akira-archive-keyring.gpg] https://download.akira.org/packages/akira/1.99/debian/trixie/amd64/ /" > /etc/apt/sources.list.d/akira-trixie-amd64.list
Then, install the loop deb package that will
install the Loop software and documentation:
# apt install loop
Then, if you wish to run the nameserver, configure
named suitably by
editing /etc/loop/named.conf, and then run it:
# systemctl enable --now named
To install Loop version 1.99.16 on Debian 13 “Trixie”
(arm64), follow these steps as the root
user.
First, copy the OpenPGP key that apt uses to
verify the release's deb package checksums
into /usr/share/keyrings/:
# curl -o /usr/share/keyrings/akira-archive-keyring.gpg https://download.akira.org/packages/akira/1.99/debian/trixie/arm64/akira-archive-keyring-2026-06-09.gpg
Then, add the Akira apt network package
repository for your platform:
# echo "deb [signed-by=/usr/share/keyrings/akira-archive-keyring.gpg] https://download.akira.org/packages/akira/1.99/debian/trixie/arm64/ /" > /etc/apt/sources.list.d/akira-trixie-arm64.list
Then, install the loop deb package that will
install the Loop software and documentation:
# apt install loop
Then, if you wish to run the nameserver, configure
named suitably by
editing /etc/loop/named.conf, and then run it:
# systemctl enable --now named
To install Loop version 1.99.16 on Debian 13 “Trixie”
(riscv64), follow these steps as the root
user.
First, copy the OpenPGP key that apt uses to
verify the release's deb package checksums
into /usr/share/keyrings/:
# curl -o /usr/share/keyrings/akira-archive-keyring.gpg https://download.akira.org/packages/akira/1.99/debian/trixie/riscv64/akira-archive-keyring-2026-06-09.gpg
Then, add the Akira apt network package
repository for your platform:
# echo "deb [signed-by=/usr/share/keyrings/akira-archive-keyring.gpg] https://download.akira.org/packages/akira/1.99/debian/trixie/riscv64/ /" > /etc/apt/sources.list.d/akira-trixie-riscv64.list
Then, install the loop deb package that will
install the Loop software and documentation:
# apt install loop
Then, if you wish to run the nameserver, configure
named suitably by
editing /etc/loop/named.conf, and then run it:
# systemctl enable --now named
To install Loop version 1.99.16 on Debian 12 “Bookworm”
(amd64), follow these steps as the root
user.
First, copy the OpenPGP key that apt uses to
verify the release's deb package checksums
into /usr/share/keyrings/:
# curl -o /usr/share/keyrings/akira-archive-keyring.gpg https://download.akira.org/packages/akira/1.99/debian/bookworm/amd64/akira-archive-keyring-2026-06-09.gpg
Then, add the Akira apt network package
repository for your platform:
# echo "deb [signed-by=/usr/share/keyrings/akira-archive-keyring.gpg] https://download.akira.org/packages/akira/1.99/debian/bookworm/amd64/ /" > /etc/apt/sources.list.d/akira-bookworm-amd64.list
Then, install the loop deb package that will
install the Loop software and documentation:
# apt install loop
Then, if you wish to run the nameserver, configure
named suitably by
editing /etc/loop/named.conf, and then run it:
# systemctl enable --now named
To install Loop version 1.99.16 on Debian 12 “Bookworm”
(arm64), follow these steps as the root
user.
First, copy the OpenPGP key that apt uses to
verify the release's deb package checksums
into /usr/share/keyrings/:
# curl -o /usr/share/keyrings/akira-archive-keyring.gpg https://download.akira.org/packages/akira/1.99/debian/bookworm/arm64/akira-archive-keyring-2026-06-09.gpg
Then, add the Akira apt network package
repository for your platform:
# echo "deb [signed-by=/usr/share/keyrings/akira-archive-keyring.gpg] https://download.akira.org/packages/akira/1.99/debian/bookworm/arm64/ /" > /etc/apt/sources.list.d/akira-bookworm-arm64.list
Then, install the loop deb package that will
install the Loop software and documentation:
# apt install loop
Then, if you wish to run the nameserver, configure
named suitably by
editing /etc/loop/named.conf, and then run it:
# systemctl enable --now named
To install Loop version 1.99.16 on Ubuntu 26.04 LTS “Resolute Raccoon”
(amd64), follow these steps as the root
user.
First, copy the OpenPGP key that apt uses to
verify the release's deb package checksums
into /usr/share/keyrings/:
# curl -o /usr/share/keyrings/akira-archive-keyring.gpg https://download.akira.org/packages/akira/1.99/ubuntu/resolute/amd64/akira-archive-keyring-2026-06-09.gpg
Then, add the Akira apt network package
repository for your platform:
# echo "deb [signed-by=/usr/share/keyrings/akira-archive-keyring.gpg] https://download.akira.org/packages/akira/1.99/ubuntu/resolute/amd64/ /" > /etc/apt/sources.list.d/akira-resolute-amd64.list
Then, install the loop deb package that will
install the Loop software and documentation:
# apt install loop
Then, if you wish to run the nameserver, configure
named suitably by
editing /etc/loop/named.conf, and then run it:
# systemctl enable --now named
To install Loop version 1.99.16 on Ubuntu 26.04 LTS “Resolute Raccoon”
(arm64), follow these steps as the root
user.
First, copy the OpenPGP key that apt uses to
verify the release's deb package checksums
into /usr/share/keyrings/:
# curl -o /usr/share/keyrings/akira-archive-keyring.gpg https://download.akira.org/packages/akira/1.99/ubuntu/resolute/arm64/akira-archive-keyring-2026-06-09.gpg
Then, add the Akira apt network package
repository for your platform:
# echo "deb [signed-by=/usr/share/keyrings/akira-archive-keyring.gpg] https://download.akira.org/packages/akira/1.99/ubuntu/resolute/arm64/ /" > /etc/apt/sources.list.d/akira-resolute-arm64.list
Then, install the loop deb package that will
install the Loop software and documentation:
# apt install loop
Then, if you wish to run the nameserver, configure
named suitably by
editing /etc/loop/named.conf, and then run it:
# systemctl enable --now named
To install Loop version 1.99.16 on Ubuntu 26.04 LTS “Resolute Raccoon”
(riscv64), follow these steps as the root
user.
First, copy the OpenPGP key that apt uses to
verify the release's deb package checksums
into /usr/share/keyrings/:
# curl -o /usr/share/keyrings/akira-archive-keyring.gpg https://download.akira.org/packages/akira/1.99/ubuntu/resolute/riscv64/akira-archive-keyring-2026-06-09.gpg
Then, add the Akira apt network package
repository for your platform:
# echo "deb [signed-by=/usr/share/keyrings/akira-archive-keyring.gpg] https://download.akira.org/packages/akira/1.99/ubuntu/resolute/riscv64/ /" > /etc/apt/sources.list.d/akira-resolute-riscv64.list
Then, install the loop deb package that will
install the Loop software and documentation:
# apt install loop
Then, if you wish to run the nameserver, configure
named suitably by
editing /etc/loop/named.conf, and then run it:
# systemctl enable --now named
To install Loop version 1.99.16 on Ubuntu 24.04 LTS “Noble Numbat”
(amd64), follow these steps as the root
user.
First, copy the OpenPGP key that apt uses to
verify the release's deb package checksums
into /usr/share/keyrings/:
# curl -o /usr/share/keyrings/akira-archive-keyring.gpg https://download.akira.org/packages/akira/1.99/ubuntu/noble/amd64/akira-archive-keyring-2026-06-09.gpg
Then, add the Akira apt network package
repository for your platform:
# echo "deb [signed-by=/usr/share/keyrings/akira-archive-keyring.gpg] https://download.akira.org/packages/akira/1.99/ubuntu/noble/amd64/ /" > /etc/apt/sources.list.d/akira-noble-amd64.list
Then, install the loop deb package that will
install the Loop software and documentation:
# apt install loop
Then, if you wish to run the nameserver, configure
named suitably by
editing /etc/loop/named.conf, and then run it:
# systemctl enable --now named
To install Loop version 1.99.16 on Ubuntu 24.04 LTS “Noble Numbat”
(arm64), follow these steps as the root
user.
First, copy the OpenPGP key that apt uses to
verify the release's deb package checksums
into /usr/share/keyrings/:
# curl -o /usr/share/keyrings/akira-archive-keyring.gpg https://download.akira.org/packages/akira/1.99/ubuntu/noble/arm64/akira-archive-keyring-2026-06-09.gpg
Then, add the Akira apt network package
repository for your platform:
# echo "deb [signed-by=/usr/share/keyrings/akira-archive-keyring.gpg] https://download.akira.org/packages/akira/1.99/ubuntu/noble/arm64/ /" > /etc/apt/sources.list.d/akira-noble-arm64.list
Then, install the loop deb package that will
install the Loop software and documentation:
# apt install loop
Then, if you wish to run the nameserver, configure
named suitably by
editing /etc/loop/named.conf, and then run it:
# systemctl enable --now named
To install Loop version 1.99.16 on Ubuntu 24.04 LTS “Noble Numbat”
(riscv64), follow these steps as the root
user.
First, copy the OpenPGP key that apt uses to
verify the release's deb package checksums
into /usr/share/keyrings/:
# curl -o /usr/share/keyrings/akira-archive-keyring.gpg https://download.akira.org/packages/akira/1.99/ubuntu/noble/riscv64/akira-archive-keyring-2026-06-09.gpg
Then, add the Akira apt network package
repository for your platform:
# echo "deb [signed-by=/usr/share/keyrings/akira-archive-keyring.gpg] https://download.akira.org/packages/akira/1.99/ubuntu/noble/riscv64/ /" > /etc/apt/sources.list.d/akira-noble-riscv64.list
Then, install the loop deb package that will
install the Loop software and documentation:
# apt install loop
Then, if you wish to run the nameserver, configure
named suitably by
editing /etc/loop/named.conf, and then run it:
# systemctl enable --now named
To install Loop version 1.99.16 on Ubuntu 22.04 LTS “Jammy Jellyfish”
(amd64), follow these steps as the root
user.
First, copy the OpenPGP key that apt uses to
verify the release's deb package checksums
into /usr/share/keyrings/:
# curl -o /usr/share/keyrings/akira-archive-keyring.gpg https://download.akira.org/packages/akira/1.99/ubuntu/jammy/amd64/akira-archive-keyring-2026-06-09.gpg
Then, add the Akira apt network package
repository for your platform:
# echo "deb [signed-by=/usr/share/keyrings/akira-archive-keyring.gpg] https://download.akira.org/packages/akira/1.99/ubuntu/jammy/amd64/ /" > /etc/apt/sources.list.d/akira-jammy-amd64.list
Then, install the loop deb package that will
install the Loop software and documentation:
# apt install loop
Then, if you wish to run the nameserver, configure
named suitably by
editing /etc/loop/named.conf, and then run it:
# systemctl enable --now named
To install Loop version 1.99.16 on Ubuntu 22.04 LTS “Jammy Jellyfish”
(arm64), follow these steps as the root
user.
First, copy the OpenPGP key that apt uses to
verify the release's deb package checksums
into /usr/share/keyrings/:
# curl -o /usr/share/keyrings/akira-archive-keyring.gpg https://download.akira.org/packages/akira/1.99/ubuntu/jammy/arm64/akira-archive-keyring-2026-06-09.gpg
Then, add the Akira apt network package
repository for your platform:
# echo "deb [signed-by=/usr/share/keyrings/akira-archive-keyring.gpg] https://download.akira.org/packages/akira/1.99/ubuntu/jammy/arm64/ /" > /etc/apt/sources.list.d/akira-jammy-arm64.list
Then, install the loop deb package that will
install the Loop software and documentation:
# apt install loop
Then, if you wish to run the nameserver, configure
named suitably by
editing /etc/loop/named.conf, and then run it:
# systemctl enable --now named
Note
Users of Red Hat Enterprise Linux clones such as Rocky Linux and AlmaLinux can use the Red Hat Enterprise Linux packages of the corresponding version and follow the corresponding installation instructions.
Note
Raspberry Pi OS users can use the Debian arm64 packages of the corresponding Debian version (e.g., Trixie) and follow the corresponding installation instructions.
Note
On some Linux distributions that have SELinux enabled, you may
notice errors when running the named service such
as:
Aug 10 07:59:06 rpi3 audit[14591]: AVC avc: denied { create } for pid=14591 comm="loop-worker-0" name="tmp-dW3tOeMfdD" scontext=system_u:system_r:named_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=file permissive=0
Aug 10 07:59:06 rpi3 audit[14591]: AVC avc: denied { read write open } for pid=14591 comm="loop-worker-0" path="/var/lib/loop/tmp-dW3tOeMfdD" dev="mmcblk0p3" ino=258270 scontext=system_u:system_r:named_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=file permissive=0
Aug 10 07:59:07 rpi3 audit[14591]: AVC avc: denied { rename } for pid=14591 comm="loop-worker-0" name="tmp-dW3tOeMfdD" dev="mmcblk0p3" ino=258270 scontext=system_u:system_r:named_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=file permissive=0
Aug 10 07:59:07 rpi3 audit[14591]: AVC avc: denied { unlink } for pid=14591 comm="loop-worker-0" name="managed-keys.loop" dev="mmcblk0p3" ino=258227 scontext=system_u:system_r:named_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=file permissive=0
These errors occur because SELinux, when using
the targeted policy, runs the program with
path /usr/sbin/named confined in
the named_t security context. It limits the directories
where the named process can write to. This can be
verified by running the command:
$ ps axZ | grep named system_u:system_r:named_t:s0 14591 ? Ssl 0:01 /usr/sbin/named -u loop
The loop package doesn't (and shouldn't)
do anything to solve this issue automatically as it would be a
hack. The SELinux policies for programs such
as /usr/sbin/named are installed by a different package
called selinux-policy-targeted, and are not handled by
the loop package.
You can workaround this issue by either configuring SELinux to run in permissive mode, or by editing the targeted policy to remove the Loop programs from it.
We will rename named in a future release, or have
this issue resolved in the distro packages, upon which this issue
should not occur anymore.
Loop documentation
Loop is documented in the Loop User Manual, and manpages are provided for the Loop programs and their config files. The user manual and manpages are also included in the software packages.
| Branch | Type | User Manual | User Manual | Download HTML | README | License |
|---|---|---|---|---|---|---|
| 1.99 | Development | View PDF | View HTML | Download HTML ZIP | View README | View LICENSE.txt |
Loop bug reports
To report a bug in the Loop product, please email <loop-bugs@akira.org> with detailed information about the issue. Please include sufficient information to allow reproduction of the problem by us.
Loop commercial support
- Paying commercial support customers may follow the instructions provided to them as part of their Akira account for receiving support.
- Other users of Loop may email the Loop mailing lists for support. Please see the mailing lists instructions on how to use the lists.
- For any other support request, please email<support@akira.org>.
Akira platform support plansThree different support options are available. Paid commercial support plans include support for all of Loop, Dora, and Akira together on a per-host basis. |
None
Free
|
Business
US $1,000/month/host
|
Larger operator
US $1,000/month/host
|
| Contract period | Not applicable | None | None |
| Minimum number of hosts | Not applicable | 1 | 64 |
| Support hours | Not applicable | Business hours (9 AM—5 PM) | 24×7 throughout the year |
| Response time | Not applicable | Within 1–2 business days | Immediate ASAP |
| Community discussions on public mailing lists | |||
| Commercial support from Akira by email | |||
| Commercial support from Akira by voice/video | |||
| Access to support tickets system | |||
| Advance information about vulnerabilities |