Bind 9 in container - parsing failed: file not found

[FlossFarrier]

Hi there.

I am trying to run Bind 9 inside a container.

• Container Image: registry.opensuse.org/opensuse/tumbleweed:latest

• Host OS: openSUSE MicroOS with Podman 5.1.2

• Built completes without error.

• All volumes are mounted.

• All files are there and accessible/editable by the user; permissions set correctly.

4e93cfd341b9:/ # su named
named@4e93cfd341b9:/> cd /data/named.d
named@4e93cfd341b9:~> ls -l
total 20
-rw-r--r-- 1 root named    0 Jul  5 09:27 forwarders.conf
-rw-r--r-- 1 root named 1348 Jul 17 13:22 logging.conf
-rw-r--r-- 1 root named  913 Jul 17 13:21 options.conf

but when I try to run named or named-checkconf, an error occurs:

4e93cfd341b9:/ # named-checkconf
/data/named.d/options.conf:10: parsing failed: file not found
4e93cfd341b9:/ # named -u named -g
18-Jul-2024 11:52:30.682 starting BIND 9.18.27 (Extended Support Version) <id:>
18-Jul-2024 11:52:30.682 running on Linux x86_64 6.9.9-1-default #1 SMP PREEMPT_DYNAMIC Thu Jul 11 11:31:54 UTC 2024 (8c0f797)
18-Jul-2024 11:52:30.682 built with  '--host=x86_64-suse-linux' '--build=x86_64-suse-linux' '--program-prefix=' '--disable-dependency-tracking' '--prefix=/usr' '--exec-prefix=/usr' '--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc' '--datadir=/usr/share' '--includedir=/usr/include' '--libdir=/usr/lib64' '--libexecdir=/usr/libexec' '--localstatedir=/var' '--sharedstatedir=/var/lib' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--with-python=/usr/bin/python3' '--includedir=/usr/include/bind' '--disable-static' '--with-openssl' '--enable-threads' '--with-libtool' '--with-libxml2' '--with-dlz_filesystem' '--with-json-c' '--with-libidn2' '--with-randomdev=/dev/urandom' '--enable-ipv6' '--with-pic' '--disable-openssl-version-check' '--with-tuning=large' '--with-maxminddb' '--with-dlopen=auto' '--with-gssapi=yes' '--disable-isc-spnego' '--enable-fixed-rrset' '--enable-filter-aaaa' '--enable-dnstap' '--with-systemd' '--enable-full-report' 'build_alias=x86_64-suse-linux' 'host_alias=x86_64-suse-linux' 'CFLAGS=-O2 -Wall -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=3 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -Werror=return-type -flto=auto -g -fPIE -DNO_VERSION_DATE' 'LDFLAGS=-pie' 'PKG_CONFIG_PATH=:/usr/lib64/pkgconfig:/usr/share/pkgconfig'
18-Jul-2024 11:52:30.682 running as: named -u named -g
18-Jul-2024 11:52:30.682 compiled by GCC 13.2.1 20240509 [revision b7a2697733d19a093cbdd0e200ffce069a4bc812]
18-Jul-2024 11:52:30.682 compiled with OpenSSL version: OpenSSL 3.1.4 24 Oct 2023
18-Jul-2024 11:52:30.682 linked to OpenSSL version: OpenSSL 3.1.4 24 Oct 2023
18-Jul-2024 11:52:30.682 compiled with libuv version: 1.48.0
18-Jul-2024 11:52:30.682 linked to libuv version: 1.48.0
18-Jul-2024 11:52:30.682 compiled with libxml2 version: 2.12.7
18-Jul-2024 11:52:30.682 linked to libxml2 version: 21208
18-Jul-2024 11:52:30.682 compiled with json-c version: 0.17
18-Jul-2024 11:52:30.682 linked to json-c version: 0.17
18-Jul-2024 11:52:30.682 compiled with zlib version: 1.3.1
18-Jul-2024 11:52:30.682 linked to zlib version: 1.3.1
18-Jul-2024 11:52:30.682 ----------------------------------------------------
18-Jul-2024 11:52:30.682 BIND 9 is maintained by Internet Systems Consortium,
18-Jul-2024 11:52:30.682 Inc. (ISC), a non-profit 501(c)(3) public-benefit 
18-Jul-2024 11:52:30.682 corporation.  Support and training for BIND 9 are 
18-Jul-2024 11:52:30.682 available at https://www.isc.org/support
18-Jul-2024 11:52:30.682 ----------------------------------------------------
18-Jul-2024 11:52:30.682 found 4 CPUs, using 4 worker threads
18-Jul-2024 11:52:30.682 using 4 UDP listeners per interface
18-Jul-2024 11:52:30.688 DNSSEC algorithms: RSASHA1 NSEC3RSASHA1 RSASHA256 RSASHA512 ECDSAP256SHA256 ECDSAP384SHA384 ED25519 ED448
18-Jul-2024 11:52:30.692 DS algorithms: SHA-1 SHA-256 SHA-384
18-Jul-2024 11:52:30.692 HMAC algorithms: HMAC-MD5 HMAC-SHA1 HMAC-SHA224 HMAC-SHA256 HMAC-SHA384 HMAC-SHA512
18-Jul-2024 11:52:30.692 TKEY mode 2 support (Diffie-Hellman): yes
18-Jul-2024 11:52:30.692 TKEY mode 3 support (GSS-API): yes
18-Jul-2024 11:52:30.695 loading configuration from '/etc/named.conf'
18-Jul-2024 11:52:30.698 /data/named.d/options.conf:10: parsing failed: file not found
18-Jul-2024 11:52:30.698 loading configuration: file not found
18-Jul-2024 11:52:30.698 exiting (due to fatal error)
4e93cfd341b9:/ # 

• Container runs rootful
• SELinux not installed on host
• AppArmor enabled/disabled on host makes no difference
• Starting with --privileged makes no difference
• Using Alpine as base image makes no difference
• Same bind config works fine in INCUS / LXD container

What could be the problem here? Which information do you need to figure it out? 🤔

Thanks in advance,
Magnus.

[nalind]

/data/named.d/options.conf:10: parsing failed: file not found: what's on line 10 of that file?