I’m assuming there’s a plethora of ways to do this efficiently, and I chose a less than wise way to do things.
The goal is to pare off the computing hog databases that used to run on my main server to run alone on a separate machine, but still give myself access to do maintenance on them from anywhere.
I will have something.com, this.something.com & that.something.com being served on host srvweb with static IP A. It’s a Virtualmin Pro machine.
I’m desiring to have mariadb.something.com being served on host srvdata with static IP B. It’s a Virtualmin Community machine.
Years ago, before I had any static IP’s, I tried to achieve this by serving mariadb.something.com on srvweb, and then using it’s Web Configuration → Proxy Paths feature to point it at srvdata which was a Webmin machine and ran phpMyAdmin from it’s root webserver folder. It worked, but felt like a kludge.
At the moment, my srvdata can’t get a LetsEncrypt cert even though I have A records at Cloudflare connecting srvdata.something.com & mariadb.something.com to static IP B.
Side Note: the Virtualmin community software on srvdata won’t let me install BIND, but the srvweb machine was nearly identically installed from formatted disks to a ready for use Virtualmin, apart from the Pro/Community difference.
Oh shit, the detected external IPv[4|6] address isn’t anything familiar to me.
The status of your system is being checked to ensure that all enabled features are available and properly configured ..
Your system has 377.86 GiB of memory, which is at or above the Virtualmin recommended minimum of 256 MiB
Apache is installed
Apache supports HTTP/2 on your system
The following CGI script execution modes are available : suexec fcgiwrap
The following PHP execution modes are available : fpm fcgid cgi
The following PHP versions are available : 8.4.21 (/bin/php-cgi8.4)
The following PHP-FPM versions are available : 8.4.21 (php8.4-fpm)
The following PHP-FPM workload profile is selected: balanced
Apache is configured to host SSL websites
MariaDB 11.8.6 is installed and running
Logrotate is installed
Plugin AWStats reporting is installed
Plugin Protected web directories is installed
Using network interface eno1 for virtual IPs
IPv6 addresses are available, using interface eno1
Default IPv4 address for virtual servers is 72.45.208.228
Default IPv6 address for virtual servers is fd00:7437:5f4f:dd00:da9d:67ff:fe28:964c
Detected external IPv4 address is 24.103.162.89
Detected external IPv6 address is 2603:7080:1d00:65f9::162b
Both user and group quotas are enabled for home and email directories
All commands needed to create and restore backups are installed
The selected package management and update systems are installed
The Virtualmin GPL stable repository is configured correctly
.. your system is ready for use by Virtualmin
Updating system information ..
.. done
I don’t know what you’re talking about? Virtualmin GPL or Pro includes BIND. For a secondary DNS server, you only need Webmin, no Virtualmin at all. Nothing ever stops you from installing or managing BIND.
When I first used the options in Virtualmin to enable BIND for that virtual server, it errored out and while following the error message trail, I saw that specific verion so tried doing it, and then after searching the error for what other people ran into.
I definitely tried bind9 before the 6 got stuck into my failure spiral because here is the bind9 error. At some point I saw a thing about adding in other repositories, but they didn’t help either.
I swear I’m fucking cursed. I would love to believe I’m the OP of some fucking hacker kiddies for talking too much shit about Elon Mush and Trump in the past, but that sounds too crazy for me to believe.
@Joe Can you create an EdgeCase flag for posts, and start out by marking all my posts with it?
Well something is going on because in your screenshot it just errors trying to fetch from repo’s
Firewall? apparmor?
But you only have trouble with bind?
Your post is a bit confusing I myself use a bare metal dedicated server and had no problems if anything it was just a couple commands and everything installed itself. But one question I would ask that complicated alot of things was cloud flare are you using cloudflare? You haven’t gave much technical information with operating system are you using also you might not be using the right command
All IT is confusing from a general point of view. The OS is up top in the boilerplate Debian 13. I do use Cloudflare for DNS services. I switched to them when Google spun off that venture. I used to have all the DNS records that BIND would have up on Cloudflare also, but on 137421 I got talked into having minimal records there and let Virtualmin do the rest.
The commands used can be seen in some of the images posted above.
Oddly the LetsEncrypt failure is a “Red Herring” in the post. I was mainly asking what the ideal form would be for me to achieve the goal.
Because I described my current state, my attempt to achieve the goal without advice, at the end I mentioned the LetsEncrypt irritation of my plan not working as expected. Then while trying to solve my LE issue found the BIND problem.
Also that server has been running less than a month so I’ll probably erase it and start again. It’s one of my machines I’m migrating to from ones I’ve had going for a decade or more.
There’s never been a BIND 6. Three decades ago, they jumped from BIND 4 to BIND 8. They’re on BIND 9, now, and all of our supported distros use BIND 9.
Your failed installation of bind9 is due to name resolution failure. Your DNS servers weren’t working for that name at the time when you tried. Totally unrelated to Virtualmin. You need the DNS servers you’re using for resolution to work (this is not your DNS servers, this is usually the DNS servers of your hosting provider or some large free DNS resolver like Google’s 8.8.8.8 and 8.8.4.4 or Cloudflare’s 1.1.1.1 and 1.0.0.1, or whatever).
Sorry for blaming Virtualmin, but since this unhappy trail started after checking a box on a Virtualmin form for a virtual server, I didn’t know.
Putting in Cloudflare’s two fixed things. Won’t make that mistake in the future (I hope). So, just to eliminate confusion, I pay Spectrum Business for the internet connection and they sold me my block of 4 static IP addresses. They gave me 3 DNS name servers IPv4’s. I also have Cloudflare where my domain names are at.
Does it matter which DNS resolver I put in Webmin → Network Configuration → Hostname and DNS Client? Could I even put these 209.18.47.61, 1.1.1.1, & 8.8.8.8 into the three slots?
Modern Linux systems do not use resolv.conf in a way that it makes sense to use the DNS Client form to configure it, I don’t think. (We probably need to remove it or make it systemd-resolved aware).
resolv.conf gets overwritten on every reboot or systemd-networkd status change. So, any changes you make in Webmin will not “stick”. (And, even before systemd-resolved, there was resolvconf, which may be what you have depending on OS and version…in any case, modern Linux does not want you editing /etc/resolv.conf, which is what DNS Client does.)
If your system uses resolvconf and NetworkManager, you need something like nmcli connection modify "Connection name" ipv4.dns "1.1.1.1 8.8.8.8"
If your system uses netplan, you edit the config files in /etc/netplan/*.yaml
Don’t blame me for this mess, though. We didn’t make Linux have five different common ways to configure networking and DNS resolvers. I would like to make DNS Client work without needing to know all this stuff, but I can’t figure out how. It’s a goddamned travesty, so complicated.
Is this guy AI. 
