Fedora and DNSSEC Presented by Paul Wouters Fedora Packager, - PowerPoint PPT Presentation

Feb 13, 2023 •587 likes •671 views

Fedora and DNSSEC Presented by Paul Wouters Fedora Packager, DNSSEC Advisor Creative Commons Attribution 3.0 https://fedoraproject.org/ What is Fedora Fedora is a fast, stable, and powerful

Fedora and DNSSEC Presented by Paul Wouters Fedora Packager, DNSSEC Advisor Creative Commons Attribution 3.0 https://fedoraproject.org/
What is Fedora Fedora is a fast, stable, and powerful operating system for everyday use built by a worldwide community of friends. It's completely free to use, share, modify Innovative, Cutting edge, Leading 25,000 packages, 250,000 contributors Forms the basis for Red Hat Enterprise Linux (RHEL) but also CentOS, OLPC, Moblin, etc
DNSSEC packages in Fedora Servers: bind9, nsd, unbound, powerdns Tools: ldns, libunbound, dnssec-tools, sshfp, autotrust, bind-pkcs11, OpenCryptoki, perl-Net-DNS-SEC Non-Fedora addons: Sun SCA 6000 HSM drivers for Linux kernel Firefox DNSSEC labs.nic.cz (Tools->Extensions) SPARTA patches for native DNSSEC in Firefox,Postfix, Sendmail, ejabberd, gaim,etc
DNSSEC with Fedora March 2009: unbound and bind ship with TLD trust anchors and DNSSEC & DLV validation enabled per default (Fedora 11) February 2010: RIPE DDoS incident in some branches of Fedora due to stale RIPE keys (AKA “Rollover or die” incident) December 2010: Ship DNSSEC root key for bind and unbound. Phased out all shipped TLD trust anchors and stopped using dnssec-conf. DLV still enabled.
DNSSEC with Fedora Fedora domains signed with DNSSEC since March 12, 2010 (fedoraproject.org, fedorahosted.org, etc) Signing using custom script based on bind's dnssec-signzone, keys restricted to ops DNSSEC keys are published in the DLV DS record support from Fedora's domain Registrar is expected soon Two auth name servers sign zones, with different Bind Views for GEO-IPS
DNSSEC developments DNSSEC resolving for all Fedora installs NetworkManager integration, compatible with virt- manager/KVM (currently dnsmasq) Should use DHCP obtained caching name server as forwarder (only unbound can do this – not bind) What to do when ISP DNS is broken? TLSA / HASTLS support tool (IETF DANE) SSL certificate validation via DNSSEC (without CAs) opendnssec support (dependancy packaging) fix ssh client VerifyHostKeyDNS=ask
Questions ? Contact: Paul Wouters pwouters@fedoraproject.org paul@xelerance.com Creative Commons Attribution 3.0 https://fedoraproject.org/

Recommend

Fedora 28 Release Party (Beijing) Whats new in Fedora 28 & introduction to Fedora and

Fedora 28 Release Party (Beijing) Whats new in Fedora 28 & introduction to Fedora and FZUG Pany About me Fedora L10n Fedora Zhongwen(Chinese) User Group FAS pany pany@FedoraProject.org Today's topic Whats new in

548 views • 35 slides

R packages from a Fedora perspective Jos Matos jamatos@{fep.up.pt, fedoraproject.org}

Introduction Fedora Fedora and R Conclusions R packages from a Fedora perspective Jos Matos jamatos@{fep.up.pt, fedoraproject.org} (Mathematics Research Center, Economics School) Porto University and Fedora Project 12 August 2008 useR!

502 views • 21 slides

Fedora Students Contributing Fedora KDE Netbook Remix Presented by Aditya Patawari Fedora

Fedora Students Contributing Fedora KDE Netbook Remix Presented by Aditya Patawari Fedora Ambassador, Packager and Netbook Remix Maintainer This work is licensed under a Creative Commons Attribution-ShareAlike 3.0 Unported License. T opics

411 views • 12 slides

Migrating from Fedora 3 to 4 Now With More Hydra Goals for the Session Understand the basic

Migrating from Fedora 3 to 4 Now With More Hydra Goals for the Session Understand the basic conceptual models underlying Fedora 3/CMA, Fedora 4, and PCDM Work through a rudimentary migration exercise with Hydra/Fedora-Migrate Explore

906 views • 63 slides

How to test Fedora updates with your custom CI who am i Aleksandra Fedorova aka bookwar

How to test Fedora updates with your custom CI who am i Aleksandra Fedorova aka bookwar Build/DevOps/CI Engineer Fedora contributor for >10 years Former member of FESCo Current member of Fedora Council Member of Fedora

371 views • 19 slides

GPIO as a character device or Fedora on wheels who am i Aleksandra Fedorova CI Engineer at Red

GPIO as a character device or Fedora on wheels who am i Aleksandra Fedorova CI Engineer at Red Hat Fedora Ambassador and member of FESCo https://quantum-integration.org Fedora User Group NRW @ Meetup.com bookwar @ IRC

661 views • 21 slides

Fedora Astronomy The benefits for astronomical software from integration into Linux distributions

Fedora Astronomy The benefits for astronomical software from integration into Linux distributions Christian Dersch AG Astronomie, Philipps-Universitt Marburg June 27, 2018 History of Fedora Astronomy 2003 Fedora has been founded, successor

723 views • 17 slides

Introduction to Fedora 4 Features Learning Outcomes Understand the purpose of a Fedora

Introduction to Fedora 4 Features Learning Outcomes Understand the purpose of a Fedora repository Understand the core features of the software What is a Fedora Repository? Secure software that stores, preserves, and provides access to digital

869 views • 66 slides

Fedora Classroom Writing Fedora documentation 101 Presented by Adam Samalik Agenda

Fedora Classroom Writing Fedora documentation 101 Presented by Adam Samalik Agenda Introduction The new site Antora The build engine Git The source control How The complete workflow Q&A Introduction The

349 views • 23 slides

Projeto Fedora Fbio Oliv Embaixador do Projeto Fedora no Brasil (fabio.olive@gmail.com)

Projeto Fedora Fbio Oliv Embaixador do Projeto Fedora no Brasil (fabio.olive@gmail.com) Baseado em apresentaes de Sergio Durigan Jr. e Paul W. Frields This work is licensed under a Creative Commons Attribution-ShareAlike 3.0 Unported

494 views • 20 slides

Introduction to Fedora Overview, examples, and core features David Wilcox, DuraSpace @d_wilcox

Introduction to Fedora Overview, examples, and core features David Wilcox, DuraSpace @d_wilcox Learning Outcomes Understand the purpose of a Fedora repository Learn what Fedora can do for you Understand the key capabilities of the software

840 views • 55 slides

Fedora Project From a community to an Operating System Fabio Alessandro Locati 27 October 2016

Fedora Project From a community to an Operating System Fabio Alessandro Locati 27 October 2016 Outline Intro Fedora Project Fedora Intro Ambassador Infrastructure administrator Packager Pacakging Sponsor Linux user since

1.11k views • 57 slides

Atomic Workstation Kalev Lember, Red Hat desktop team DevConf.cz 2018 What is Fedora Atomic

Atomic Workstation Kalev Lember, Red Hat desktop team DevConf.cz 2018 What is Fedora Atomic Workstation? Regular Fedora, based on RPMs Shipped in a different way Atomic Workstation: changing the way we ship Fedora Workstation Base

943 views • 12 slides

fedpkg Maintaining packages in Fedora PRESENTED BY: Karel Kl Creative Commons Attribution

fedpkg Maintaining packages in Fedora PRESENTED BY: Karel Kl Creative Commons Attribution 3.0 T oday's T opics The fedpkg tool Exploring packages Updating a package Backporting changes to older Fedora releases Teamwork

561 views • 22 slides

Virtualization in Fedora Virtualization in Fedora (KVM based) (KVM based) Kashyap Chamarthy

Virtualization in Fedora Virtualization in Fedora (KVM based) (KVM based) Kashyap Chamarthy Kashyap Chamarthy kashyapc@fedoraproject.org kashyapc@fedoraproject.org Outline 1/ Virtualization at a glance 2/ Overview of KVM based Virt 3/

151 views • 13 slides

Ensuring ABI stability in Fedora P r e s e n t e d b y , D o d j i S e k e t

Flock 2016 Ensuring ABI stability in Fedora P r e s e n t e d b y , D o d j i S e k e t e l i < d o d j i @f e d o r a p r o j e c t . o r g > S i n n y K u ma r i < s i n n

317 views • 16 slides

Automatic Printer Driver Installation in Fedora 13 Presenter Tim Waugh Senior Software

Automatic Printer Driver Installation in Fedora 13 Presenter Tim Waugh Senior Software Engineer, Red Hat 1 Tim Waugh Automatic Printer Driver Installation in Fedora 13 The idea Current status Driver requirements Limitations

188 views • 14 slides

What to do When Google ignores your Fedora objects Robin

What to do When Google ignores your Fedora objects Robin Dean Jonathan Green robin@coalliance.org jonathan@discoverygarden.ca Digital Repository Director Chief Technology Officer

381 views • 18 slides

How to Remaster Fedora Core Amir Hossein Payberah payberah@kth.se 1 Agenda Linux History

How to Remaster Fedora Core Amir Hossein Payberah payberah@kth.se 1 Agenda Linux History Linux Distributions How to Remaster Fedora Core? Conclusion References 2 Linux History 3 GNU History In 1983 Richard

1.09k views • 47 slides

I contributed ! But what now ? By Bhagyashree(Bee) Padalkar IRC : bee2502 Who is this girl ?

I contributed ! But what now ? By Bhagyashree(Bee) Padalkar IRC : bee2502 Who is this girl ? Data - freak !! Fedora Community Operations member - mostly working on community oriented metrics ! Fedora @bee2502 Blog (with

533 views • 30 slides

Podman, Buildah and Skopeo coreutils for containers who am i Aleksandra Fedorova

Podman, Buildah and Skopeo coreutils for containers who am i Aleksandra Fedorova DevOps/CI/Build Engineer CI Engineer at Red Hat Fedora Linux Ambassador https://medium.com/quantum-integration Fedora User Group NRW @

521 views • 24 slides

Building the Future of Fedora Edwin Shin (eddie@curationexperts.com) & Andrew Woods

Building the Future of Fedora Edwin Shin (eddie@curationexperts.com) & Andrew Woods (awoods@duraspace.org) 11 July, 2013 Open Repositories, Charlottetown The Problem A large, aging codebase + Declining year-on-year number of

411 views • 14 slides

Red Hat Development Model Community driven foster relationships with upstream Fedora

OS integrating of DNSSEC Paul Wouters Senior software engineer, Red Hat October 17, 2012 1 Paul Wouters <pwouters@redhat.com> Red Hat Development Model Community driven foster relationships with upstream Fedora Linux -

413 views • 12 slides

GNU Emacs A guide to packaging add-ons Presented by Arun S.A.G Package maintainer, Fedora

GNU Emacs A guide to packaging add-ons Presented by Arun S.A.G Package maintainer, Fedora project. GNU Free documentation License Emacs I am not going to lie, Emacs sucks! Some of us tolerate it, but i can't tell you if YOU'LL be able to.

684 views • 21 slides