avigail-oron

//instructions are taken from: https://github.com/intel/linux-sgx

//Installing SGX driver:
//-----------------------
git clone https://github.com/intel/linux-sgx-driver.git
//Check if matching Kernel headers are installed: 
dpkg-query -s linux-headers-$(uname -r)
//If not run: 
sudo apt-get install linux-headers-$(uname -r)
//In order to build:

avigail-oron

//based on: https://serverfault.com/questions/549298/retrieving-an-rsa-key-from-a-running-instance-of-apache

//Setup
//------
sudo apt-get install make
sudo apt install gcc
sudo apt-get install openssl
//make sure it's openssl 1.0.x and not 1.1.x, passe-partout doesn't support it
sudo apt-get install libssl-dev
//get passe-partout files:

avigail-oron

 //Install Apache httpd server
 //---------------------------
 apt-get install apache2
 //verify it's configured OK
 apache2ctl configtest
 //Check httpd version and installed modules
 apache2ctl  -v
 apache2ctl -M
 
 //Installing PHP

avigail-oron

#!/usr/bin/perl -w

package Atomia::DNS::PowerDNSDatabase;

use Moose;
use DBI;
use MIME::Base32;
use Digest::SHA qw(sha1);
use strict;
use warnings;

avigail-oron

//Install on an Ubuntu machine (I used 16.04)
sudo su
//Add the Atomia APT Repository:
wget -q -O - http://public.apt.atomia.com/setup.sh.shtml | sed s/%distcode/`lsb_release -c | awk '{ print $2 }'`/g | sh
//Install the database schema (will also install MySQL):
apt-get install atomiadns-powerdns-database
//Install perl and perl mysql driver
sudo apt-get install libcgi-session-perl
apt-get install libdbd-mysql-perl
//To configure the nameserver to sync zones from your Atomia DNS installation, add to /etc/atomiadns.conf:

avigail-oron

//On an ubuntu machine (I used 16.04)

//On TRUSTED machine:
//===================
//Install AtomiaDNS API server
//-----------------------------
sudo su
repo="$(wget -q -O - http://public.apt.atomia.com/setup.sh.shtml | sed s/%distcode/`lsb_release -c | awk '{ print $2 }'`/g)"; echo "$repo"
echo "$repo" | sh
apt-get install atomiadns-masterserver

avigail-oron

#DNSSEC conf for BIND
#---------------------
#Add the following conf to BIND conf file
#IMPORTANT - dnssec-validation has to be set to 'auto', setting to 'yes' doesn't work
sudo nano /etc/bind/named.conf.options
        dnssec-enable yes; 
        dnssec-validation auto; 
        dnssec-lookaside auto;
// if you want to dynamically add zones add the following as well:
       allow-new-zones yes;

avigail-oron

#Need to install bind utils, no need for bind itself for signing
apt-get install bind9utils
#Create a zone file with the EXACT NAME as the domain! Let's assume its xx.com
#Note - we are using urandom to avoid the problem of not enough antropy. 
#In real life this option should be ommited so random will be used instead
#Generate KSK for the xx.com zone:
dnssec-keygen -r /dev/urandom -f KSK xx.com
#Generate ZSK for the xx.com zone:
dnssec-keygen -r /dev/urandom xx.com
#open the zone file and include the 2 key files (KSK & ZSK)