volunteer-admins

The following is the GNU All-permissive License as recommended in https://www.gnu.org/licenses/license-recommendations.en.html

Copying and distribution of this file, with or without modification, are permitted in any medium without royalty provided the copyright notice and this notice are preserved. This file is offered as-is, without any warranty.

Contributions are welcome. See https://savannah.gnu.org/maintenance/fsf/.

To allow volunteers in the dnsadmin group to alter the bind config:

cd /etc/bind
shopt -s extglob
chown -Rh dnsadmin !(rndc.key)
mv /etc/sudoers.d/dnsadmin.disabled /etc/sudoers.d/dnsadmin

And to remove access:

cd /etc/bind
shopt -s extglob
chown -Rh root !(rndc.key)
mv /etc/sudoers.d/dnsadmin /etc/sudoers.d/dnsadmin.disabled

Note in the post-receive hook, there are some commands that do initial bind setup. Those will fail when volunteers do a git push, but it is safe to ignore them, since bind is already setup. Currently, they are

` cd /var/lib/bind/ mkdir -p masters ln -sf /etc/bind/masters/db.fsf.org-sshfp masters/ ln -sf /etc/bind/masters/db.gnu.org-sshfp masters/