#!/usr/local/cpanel/3rdparty/bin/perl # cpanel - scripts/setupnameserver Copyright 2022 cPanel, L.L.C. # All rights reserved. # copyright@cpanel.net http://cpanel.net # This code is subject to the cPanel license. Unauthorized copying is prohibited use strict; use warnings; use Config::Tiny (); use Cpanel::Config::LoadCpConf (); use Cpanel::Config::CpConfGuard (); use Cpanel::ServerTasks (); use Cpanel::Chkservd::Manage (); use Cpanel::Chkservd::Tiny (); use Cpanel::Pkgr (); use Cpanel::RPM::Versions::File (); use Cpanel::RPM::Versions::Directory (); use Cpanel::Services::Enabled (); use Cpanel::Services::Restart (); use Cpanel::Init (); use Cpanel::OS (); use Cpanel::NameServer::Utils::Enabled (); use Cpanel::Usage (); use Cpanel::PID (); use Cpanel::Encoder::Tiny (); use Cpanel::RestartSrv::Systemd (); use Cpanel::ServerTasks (); my $force = 0; my $current = 0; my $html = 0; delete $ENV{'cp_security_token'}; delete $ENV{'HTTP_REFERER'}; # Argument processing my %opts = ( 'force' => \$force, 'current' => \$current, 'html' => \$html, ); Cpanel::Usage::wrap_options( \@ARGV, \&usage, \%opts ); local @ARGV = ( grep( !/^--/, @ARGV ) ); my $dnstype = shift; usage() unless ( $dnstype || $current ); if ( $> != 0 ) { die "Conversion process must be performed as root"; } my $cpconf_ref = Cpanel::Config::LoadCpConf::loadcpconf_not_copy(); $cpconf_ref->{'local_nameserver_type'} ||= 'powerdns'; my $current_nameserver = Cpanel::Services::Enabled::is_enabled('dns') ? $cpconf_ref->{'local_nameserver_type'} : 'disabled'; if ($current) { print "Current nameserver type: $current_nameserver\n"; exit 0; } if ( !$force && $current_nameserver eq $dnstype ) { print "Already configured.\n"; exit 0; } my $valid_dnstypes = { map { $_ => 1 } qw(bind powerdns disabled) }; unless ( $valid_dnstypes->{$dnstype} ) { print "Unknown nameserver type specified.\nTry $0 --help\n"; exit 1; } my ( $valid, $reason ) = Cpanel::NameServer::Utils::Enabled::valid_nameserver_type($dnstype); unless ($valid) { print "The specified nameserver type is not available for your system:\n"; print $reason, "\n"; exit 1; } if ( !$force && $current_nameserver eq 'powerdns' && $dnstype ne 'powerdns' && -t STDIN ) { print "WARNING: If you switch your nameserver away from PowerDNS, your DNS server will no longer serve DNSSEC records.\n"; print "You must ensure that the domains do not have DS records configured at their domain registrar.\n"; print "Failure to do so will cause DNS resolution issues.\n\n"; my $msg = qq{Are you sure you want to switch to "$dnstype" [y/n]? }; print $msg; my $count = 0; while ( my $read = <STDIN> ) { $count++; exit if ( $count >= 5 ); exit if ( $read =~ m/^n/i ); last if ( $read =~ m/^y/i ); print $msg; } } # Check if the target service is currently unmanaged # WARNING: GLOBAL VARIABLE if ( !$force && $dnstype =~ m/^(powerdns)$/ ) { my $dir = Cpanel::RPM::Versions::Directory->new( { 'dont_set_legacy' => 1 } ); my $target_state = $dir->fetch( { 'section' => 'target_settings', 'key' => $dnstype } ); if ( $target_state && $target_state =~ m/^(unmanaged|uninstalled)$/ ) { print "WARNING: You are attempting to switch to $dnstype, but it has explicitly been set to $target_state in /var/cpanel/rpm.versions.d/\n"; print "This means its packages have been flagged to be left alone by cPanel. " if ( $target_state eq 'unmanaged' ); print "This means its packages have been explicitly blocked from installation. " if ( $target_state eq 'uninstalled' ); print "If this was unintentional, you may be able to remove\nthis flag by running the following command and then re-running setupnameserver\n"; print "\n /usr/local/cpanel/scripts/update_local_rpm_versions --del target_settings.$dnstype\n\n"; print "If you meant to do this, please re-run setupnameserver with --force\n\n"; exit 2; } } my $pid_obj = Cpanel::PID->new( { 'pid_file' => '/var/run/setupnameserver.pid' } ); unless ( $pid_obj->create_pid_file() > 0 ) { print "Setupnameserver appears to be running already.\n"; print "Please wait for the conversion to finish before attempting another.\n"; exit 1; } # check bind rpm before any actions, as we are not going to autofix it, but le the admin take care of it check_bind() if $dnstype eq 'bind'; { my $cpconf_guard = Cpanel::Config::CpConfGuard->new(); print "Setting name server to $dnstype in /var/cpanel/cpanel.config\n"; $cpconf_ref->{'local_nameserver_type'} = $cpconf_guard->{'data'}->{'local_nameserver_type'} = $dnstype; $cpconf_guard->save(); } my $init = Cpanel::Init->new(); suspend_chksrvd_monitoring(); _disable_systemd_resolved_stub_resolver(); #branch to uninsall/install functions if ( $dnstype eq 'bind' ) { disable_none(); disable_nsd(); disable_mydns(); disable_powerdns(); enable_bind(); enable_chksrvd_monitoring(); } elsif ( $dnstype eq 'powerdns' ) { disable_none(); disable_nsd(); disable_bind(); disable_mydns(); enable_powerdns(); enable_chksrvd_monitoring(); } else { disable_chksrvd_monitoring(); enable_none(); disable_bind(); disable_nsd(); disable_mydns(); disable_powerdns(); install_cpanel_rpms(); } if ( $force && $dnstype && $dnstype ne 'disabled' && $dnstype ne 'bind' && !$ENV{'CPANEL_BASE_INSTALL'} ) { print "\nChecking status of installed packages for $dnstype\n"; system( '/usr/local/cpanel/scripts/check_cpanel_pkgs', '--fix', '--long-list', '--targets', $dnstype ); } restart_dnsadmin(); # Rebuild global cache so that the 'is_dnssec_supported' value is updated Cpanel::ServerTasks::schedule_task( ['CpDBTasks'], 5, 'build_global_cache' ); $pid_obj->remove_pid_file(); print "\nNameserver conversion complete\n"; exit 0; sub disable_bind { return unless Cpanel::OS::list_contains_value( 'dns_supported', 'bind' ); print "\nHalting BIND\n"; my $output = eval { $init->run_command( 'named', 'stop' ) }; print "\nDisabling BIND in init system\n"; $output = $init->run_command_for_one( 'disable', 'named' ); return; } # can be removed in 112 sub disable_nsd { my $unlink = sub { unlink('/var/cpanel/usensd') if -e '/var/cpanel/usensd'; return; }; return $unlink->() unless Cpanel::Pkgr::is_installed('nsd'); print "\nHalting NSD\n"; my $result = $init->run_command( 'nsd', 'stop' ); $result->{'status'} or warn( $result->{'message'} ); print "\nDisabling NSD in init system\n"; $init->run_command_for_one( 'disable', 'nsd' ); return $unlink->(); } # can be removed in 112 sub disable_mydns { my $unlink = sub { unlink('/var/cpanel/usemydns') if -e '/var/cpanel/usemydns'; return; }; return $unlink->() unless Cpanel::Pkgr::is_installed('cpanel-mydns'); print "\nHalting MYDNS\n"; my $result = $init->run_command( 'mydns', 'stop' ); $result->{'status'} or warn( $result->{'message'} ); print "\nDisabling MyDNS in init system\n"; $init->run_command_for_one( 'disable', 'mydns' ); return $unlink->(); } sub disable_powerdns { return unless Cpanel::OS::list_contains_value( 'dns_supported', 'powerdns' ); if ( Cpanel::Pkgr::is_installed('cpanel-pdns') ) { print "\nHalting PowerDNS\n"; eval { $init->run_command( 'pdns', 'stop' ) }; print "\nDisabling PowerDNS in init system\n"; $init->run_command_for_one( 'disable', 'pdns' ); } unlink('/var/cpanel/usepowerdns') if ( -e '/var/cpanel/usepowerdns' ); return; } sub disable_none { unlink('/etc/nameddisable') if ( -e '/etc/nameddisable' ); unlink('/etc/binddisable') if ( -e '/etc/binddisable' ); unlink('/etc/nsddisable') if ( -e '/etc/nsddisable' ); unlink('/etc/mydnsdisable') if ( -e '/etc/mydnsdisable' ); unlink('/etc/powerdnsdisable') if ( -e '/etc/powerdnsdisable' ); return; } # Strictly speaking, touching /etc/nameddisable will cause chksrvd to skip over # restarting BIND or NSD, but this will stop it from even polling for these processes sub disable_chksrvd_monitoring { my %monitored_services = Cpanel::Chkservd::Manage::getmonitored(); return unless ( $monitored_services{'named'} ); Cpanel::Chkservd::Manage::disable('named'); local $@; eval { Cpanel::ServerTasks::queue_task( ['CpServicesTasks'], "restartsrv tailwatchd" ); }; warn if $@; return; } sub check_bind { print "Checking that BIND is installed\n"; return if Cpanel::Pkgr::is_installed('bind'); my $advice = q[/scripts/sysup]; $advice = q[yum install bind] if Cpanel::OS::is_yum_based(); print STDERR <<"EOS"; Error: The 'bind' package is not installed on your system. Run the '$advice' command to install it before you run this command again. EOS exit 1; ## no critic qw(Cpanel::NoExitsFromSubroutines) } # dummy helper to use or not html sub restartservice { my $service = shift or die; # We do not taskqueue here since we want bind up right away on fresh installs my @args = $html ? ( 1, 0, \&Cpanel::Encoder::Tiny::safe_html_encode_str ) : (); return Cpanel::Services::Restart::restartservice( $service, @args ); } sub enable_bind { print "\nUninstalling unused nameservers\n"; install_cpanel_rpms($force); print "\nEnabling the BIND service...\n"; my $output = $init->run_command_for_one( 'enable', 'named' ); # Setup rndc print "\nSetting up rndc configuration\n"; my @args = $html ? ('--html') : (); system( '/usr/local/cpanel/scripts/fixrndc', '-f', '-v', @args ); print "\nStarting BIND\n"; $output = restartservice('named'); return; } sub enable_powerdns { print "\nChecking that PowerDNS is installed\n"; system( 'touch', '/var/cpanel/usepowerdns' ); install_cpanel_rpms($force); # Ensure that the dnssec.db exists my $dnssec_db_file = '/var/cpanel/pdns/dnssec.db'; if ( !-e $dnssec_db_file ) { my $rc = system( '/usr/bin/pdnsutil', 'create-bind-db', $dnssec_db_file ); if ( !$rc ) { chmod 0600, $dnssec_db_file; my $uid = getpwnam 'named'; my $gid = getgrnam 'named'; chown $uid, $gid, $dnssec_db_file; } else { warn "Error creating $dnssec_db_file: $rc"; } } print "\nEnabling PowerDNS in init system\n"; my $output = $init->run_command_for_one( 'enable', 'pdns' ); print "\nStarting PowerDNS\n"; $output = restartservice('named'); return; } sub enable_none { system( 'touch', '/etc/nameddisable' ); return; } # Both BIND and NSD are monitored by chksrvd using restartsrv_named sub enable_chksrvd_monitoring { my %monitored_services = Cpanel::Chkservd::Manage::getmonitored(); return if ( $monitored_services{'named'} ); Cpanel::Chkservd::Manage::enable('named'); local $@; eval { Cpanel::ServerTasks::queue_task( ['CpServicesTasks'], "restartsrv tailwatchd" ); }; warn if $@; unsuspend_chksrvd_monitoring(); return; } sub unsuspend_chksrvd_monitoring { return Cpanel::Chkservd::Tiny::resume_service('named'); } sub suspend_chksrvd_monitoring { return Cpanel::Chkservd::Tiny::suspend_service( 'named', 600 ); } sub install_cpanel_rpms { # Cpanel::RPM::Versions::Directory intentionally avoids installing the configured DNS service in the initial installation environment so that it will only occur once, when this script runs. # It is necessary to hide the installation environment so that the installation happens now. local $ENV{'CPANEL_BASE_INSTALL'} = 0; # This object should always be re-instantiated here changing targets means Cpanel::RPM::Versions::Directory is invalid prior to now my $versions = Cpanel::RPM::Versions::File->new( { 'only_targets' => [qw/nsd mydns powerdns/] } ); # remove mydns and nsd after 112 print "\nCalling package installer object\n"; $versions->stage(); $versions->commit_changes(); return; } sub restart_dnsadmin { if ( Cpanel::Services::Enabled::is_enabled('dnsadmin') ) { local $@; eval { Cpanel::ServerTasks::queue_task( ['CpServicesTasks'], "restartsrv dnsadmin" ); }; warn if $@; } return; } sub usage { print <<EO_USAGE; setupnameserver [options] [nameserver type] Options: --help Brief help message --force Rerun configuration routines even if the selected nameserver type is already configured --current Show the currently selected nameserver type Nameserver Types: powerdns Suggested. High performance. Supports DNSSEC. Functions only as authoritative nameserver. bind Functions as both authoritative and caching nameserver. disabled Disable the local nameserver. EO_USAGE exit 0; ## no critic qw(Cpanel::NoExitsFromSubroutines) - existing sub } sub _disable_systemd_resolved_stub_resolver { my $conf_path = '/etc/systemd/resolved.conf'; return if !-e $conf_path; print "\nDisabling systemd-resolved stub resolver\n"; # I wanted to use Config::Simple to preserve comments, but it's not available on fresh install my $conf = Config::Tiny->read($conf_path) || return; # see `man resolved.conf` $conf->{'Resolve'} //= {}; $conf->{'Resolve'}->{'DNSStubListener'} = 'no'; $conf->write($conf_path); Cpanel::RestartSrv::Systemd::restart_via_systemd('systemd-resolved'); return; }

RE-INVENTING THE TELEVISION NEWS BUSINESS*

A revolution in video storytelling

Creating entirely new & cost-effective production methods

From the world leaders in video production training and the creators of Character Driven Storytelling™

*and every other business that uses video

WHAT WE DO

Over the past 35 years, we have designed, built or restructured some of the most powerful news and journalism companies in the world.

We replace the traditional TV news ‘crew’ with one highly trained journalist, working alone with nothing but an iPhone.

No more TV news ‘crews’, no editors and no field producers.

This is television news done the way newspaper journalism is done – one reporter with their electronic pad and pencil.

In doing this, we can cut the cost of production by as much as 75% while increasing ratings and audience engagement.

In the place of conventional TV news ‘packages’ – ie, reporter stand up, interview, b-roll, man on the street, we marry great journalism with Netflix and Hollywood storytelling.

It’s a combination that works.

We have taken most of our clients to #1 in their respective markets.

And it’s not just for news. Any company, any profit, any NGO and anyone else who is online needs to tell their story in compelling yet cost-effective video. We can teach you to do that. Either in person or virtually.

EXAMPLES OF WHAT WE CAN TEACH YOUR STAFF TO PRODUCE

ITAY HOD

Itay Hod, MMJ with KPIX/CBS in San Francisco, took the 5-Day Intensive Video Storytelling Bootcamp in 2018.

Because he works alone, with only an iPhone, he was able to embed himself with a homeless family.

Here’s the story he produced in a one-day turn.

KIET DO

Kiet Do, an MMJ with KPIX/CBS in San Francisco, took the 5-Day Intensive Video Storytelling Bootcamp in 2021.

Here is a story he produced, all on his own, with only an iPhone and in a one-day turn.

TAYLOR SCHAUB

Taylor Schaub, an MMJ with Spectrum News 1 in LA, took the 5-Day Intensive Video Storytelling Bootcamp in 2023.

Here is a story he turned in only one day, using only an iPhone. It was the first video story he ever did and it was nominated for an Emmy.

THE BOOTCAMP

How do we convert stations and whole networks to working in this way?

Since 1988, we have run intensive 5-Day Video Storytelling Bootcamps

We have done these all over the world.

These are hands-on bootcamps, and participants learn an entirely new way of creating TV news stories.

-We shoot at a 3:1 ratio or lower, so turnaround times are fast.

-We go directly from camera to timelilne and edit – no written scripts. We work in the medium of pictures and sound.

-We are entirely character-driven.

-We are driven by pictures and real events.

-We are focused almost entirely on ’the viewer experience’.

Since 1988, more than 70,000 journalists around the world have taken our bootcamps, either in person on virtualy.

Case Studies

CBS News

We have started to work with CBS News, bringing our ideas of character-driven storytelling to one of the most successful and biggest networks in the United States. Since beginning to work with them ratings have climbed and more importantly, audience engagement is through the ceiling.

Learn More

New York Times Television

We started New York Times Television in 1990 and it was the first paper to be brought into the world of TV. It quickly became one of the most successful non-fiction production companies in the United States. The series and documentaries we produced won many awards including multiple Emmys.

Learn More

The BBC

We have been working with the BBC since the year 2000 helping to convert their national news network to our visual storytelling technique. Most recently we have trained teams from their sports, documentaries, and comedy divisions to make character-driven stories using only smartphones.

Learn More

Spectrum News

For the past five years we have worked with Spectrum News to introduce and train their journalists on visual, character driven storytelling using smartphones helping to create a different kind of local news for their network of 24-Hour News Stations across the United States.

Learn More

The United Nations

In 2006, we were approached by the United Nations. Rather than rely on news outlets, it would be much easier to train the field operatives to produce their own stories. We spent two years working with the UN, training more than 100 of their staff in bootcamps in Geneva and Nairobi.

Learn More

The Newark Star-Ledger

We trained 50 print reporters at the paper to shoot and tell their own stories, in conjunction with their print work. We built a TV newsroom in their existing print newsroom – you could not ask for a better set and they began to live stream their stories in conjunction with their print work.

Learn More

Mcgraw Hill

We spent two years with McGraw Hill, training more than 150 of their staffers, making them completely video literate. McGraw/Hill media properties we transit included Business Week, Aviation Week, (what was the name of the architecture magazine), and JD Power and Associates.

Learn More

Voice of America

In 1990, we were approached by The Voice of America, the official broadcasting agency for the United States Government. When we met with VOA, they were only a short wave radio broadcaster, but working with them, we took them into television, launching VOA-TV.

Learn More

Oyster Yachts

British based Oyster Yachts makes some of the finest yachts in the world. Like every other company, they had to find a way to feed the never-ending video demands of social media – sites like Instagram and TikTok. We trained the Oyster staff to tell their own stories, using only iPhones.

Learn More

Scottish Environmental Protection Agency

We were approached by SEPA, the Scottish Environmental Protection Agency because they had to continually find a way to ‘feed the media beast’. The result was that SEPA was able to tell their own stories, whenever they wanted, and at almost no additional cost.

Learn More

Michael on Media

Michael Rosenblum has been writing about the media since 1988. His work and ideas have appeared in The Guardian, The Huffington Post, Ilkeston Life and many other publications.

He has been blogging regularly for the past 35 years on this subject. Having taught media studies at Columbia University, NYU and now the University of Oxford, he is considered an expert on this subject.

Continue reading this post or look back at previous posts.

Do You Have Questions About Learning Video Skills?

If you would like to know more about our courses contact us and one of our training advisors will be happy to call you.

Your IP : 216.73.216.209

RE-INVENTING THE TELEVISION NEWS BUSINESS*

A revolution in video storytelling

Creating entirely new & cost-effective production methods

From the world leaders in video production training and the creators of Character Driven Storytelling™

*and every other business that uses video

WHAT WE DO

Over the past 35 years, we have designed, built or restructured some of the most powerful news and journalism companies in the world.

We replace the traditional TV news ‘crew’ with one highly trained journalist, working alone with nothing but an iPhone.

No more TV news ‘crews’, no editors and no field producers.

This is television news done the way newspaper journalism is done – one reporter with their electronic pad and pencil.

In doing this, we can cut the cost of production by as much as 75% while increasing ratings and audience engagement.

In the place of conventional TV news ‘packages’ – ie, reporter stand up, interview, b-roll, man on the street, we marry great journalism with Netflix and Hollywood storytelling.

It’s a combination that works.

We have taken most of our clients to #1 in their respective markets.

And it’s not just for news. Any company, any profit, any NGO and anyone else who is online needs to tell their story in compelling yet cost-effective video. We can teach you to do that. Either in person or virtually.

EXAMPLES OF WHAT WE CAN TEACH YOUR STAFF TO PRODUCE

ITAY HOD

Itay Hod, MMJ with KPIX/CBS in San Francisco, took the 5-Day Intensive Video Storytelling Bootcamp in 2018.

Because he works alone, with only an iPhone, he was able to embed himself with a homeless family.

Here’s the story he produced in a one-day turn.

KIET DO

Kiet Do, an MMJ with KPIX/CBS in San Francisco, took the 5-Day Intensive Video Storytelling Bootcamp in 2021.

Here is a story he produced, all on his own, with only an iPhone and in a one-day turn.

TAYLOR SCHAUB

Taylor Schaub, an MMJ with Spectrum News 1 in LA, took the 5-Day Intensive Video Storytelling Bootcamp in 2023.

Here is a story he turned in only one day, using only an iPhone. It was the first video story he ever did and it was nominated for an Emmy.

THE BOOTCAMP

How do we convert stations and whole networks to working in this way?

Since 1988, we have run intensive 5-Day Video Storytelling Bootcamps

We have done these all over the world.

These are hands-on bootcamps, and participants learn an entirely new way of creating TV news stories.

-We shoot at a 3:1 ratio or lower, so turnaround times are fast.

-We go directly from camera to timelilne and edit – no written scripts. We work in the medium of pictures and sound.

-We are entirely character-driven.

-We are driven by pictures and real events.

-We are focused almost entirely on ’the viewer experience’.

Since 1988, more than 70,000 journalists around the world have taken our bootcamps, either in person on virtualy.

Case Studies

CBS News

New York Times Television

The BBC

Spectrum News

The United Nations

The Newark Star-Ledger

Mcgraw Hill

Voice of America

Oyster Yachts

Scottish Environmental Protection Agency

Michael on Media