diff --git a/bin/tests/system/_common/root.hint.blackhole b/bin/tests/system/_common/root.hint.blackhole new file mode 100644 index 0000000000..d90ac89856 --- /dev/null +++ b/bin/tests/system/_common/root.hint.blackhole @@ -0,0 +1,14 @@ +; Copyright (C) Internet Systems Consortium, Inc. ("ISC") +; +; SPDX-License-Identifier: MPL-2.0 +; +; This Source Code Form is subject to the terms of the Mozilla Public +; License, v. 2.0. If a copy of the MPL was not distributed with this +; file, you can obtain one at https://mozilla.org/MPL/2.0/. +; +; See the COPYRIGHT file distributed with this work for additional +; information regarding copyright ownership. + +$TTL 999999 +. IN NS ns99.root-servers.nil. +ns99.root-servers.nil. IN A 10.53.0.99 diff --git a/bin/tests/system/journal/ns1/named.conf.in b/bin/tests/system/journal/ns1/named.conf.in index 7d43e04b83..fc16127ccb 100644 --- a/bin/tests/system/journal/ns1/named.conf.in +++ b/bin/tests/system/journal/ns1/named.conf.in @@ -36,6 +36,11 @@ controls { inet 10.53.0.1 port @CONTROLPORT@ allow { any; } keys { rndc_key; }; }; +zone . { + type hint; + file "../../_common/root.hint.blackhole"; +}; + zone changed { type primary; update-policy local; diff --git a/bin/tests/system/journal/ns2/named.conf.in b/bin/tests/system/journal/ns2/named.conf.in index 5cebf61f01..e0fd9d8295 100644 --- a/bin/tests/system/journal/ns2/named.conf.in +++ b/bin/tests/system/journal/ns2/named.conf.in @@ -35,3 +35,8 @@ key rndc_key { controls { inet 10.53.0.2 port @CONTROLPORT@ allow { any; } keys { rndc_key; }; }; + +zone . { + type hint; + file "../../_common/root.hint.blackhole"; +}; diff --git a/bin/tests/system/kasp/ns3/named-fips.conf.in b/bin/tests/system/kasp/ns3/named-fips.conf.in index ab0d87dcfa..01d7592686 100644 --- a/bin/tests/system/kasp/ns3/named-fips.conf.in +++ b/bin/tests/system/kasp/ns3/named-fips.conf.in @@ -39,6 +39,11 @@ controls { inet 10.53.0.3 port @CONTROLPORT@ allow { any; } keys { rndc_key; }; }; +zone "." { + type hint; + file "../../_common/root.hint.blackhole"; +}; + /* Zones that are getting initially signed */ /* The default case: No keys created, using default policy. */ diff --git a/bin/tests/system/kasp/ns6/named.conf.in b/bin/tests/system/kasp/ns6/named.conf.in index 3a3536de97..a8a74d3204 100644 --- a/bin/tests/system/kasp/ns6/named.conf.in +++ b/bin/tests/system/kasp/ns6/named.conf.in @@ -39,6 +39,11 @@ controls { inet 10.53.0.6 port @CONTROLPORT@ allow { any; } keys { rndc_key; }; }; +zone "." { + type hint; + file "../../_common/root.hint.blackhole"; +}; + /* This zone switch from dynamic to inline-signing. */ zone "dynamic2inline.kasp" { type primary; diff --git a/bin/tests/system/kasp/ns6/named2.conf.in b/bin/tests/system/kasp/ns6/named2.conf.in index 9a1be143b6..e037e8d335 100644 --- a/bin/tests/system/kasp/ns6/named2.conf.in +++ b/bin/tests/system/kasp/ns6/named2.conf.in @@ -38,6 +38,11 @@ controls { inet 10.53.0.6 port @CONTROLPORT@ allow { any; } keys { rndc_key; }; }; +zone "." { + type hint; + file "../../_common/root.hint.blackhole"; +}; + /* This zone switch from dynamic to inline-signing. */ zone "dynamic2inline.kasp" { type primary; diff --git a/bin/tests/system/nsupdate/ns3/named.conf.in b/bin/tests/system/nsupdate/ns3/named.conf.in index 66c874ab0c..5473b7eea0 100644 --- a/bin/tests/system/nsupdate/ns3/named.conf.in +++ b/bin/tests/system/nsupdate/ns3/named.conf.in @@ -35,6 +35,11 @@ controls { inet 10.53.0.3 port @CONTROLPORT@ allow { any; } keys { rndc_key; }; }; +zone "." { + type hint; + file "../../_common/root.hint.blackhole"; +}; + dnssec-policy "default-dynamic" { inline-signing no; };