ROLLSET(1)

📦
version 2.2.3 · 2 versions
, in fedora 43

💖 ROLLSET(1) 💖

okay bestie, welcome to rollset — it's a User Contributed Perl Documentation page, and it's here to ✨*modify stuff*✨ in your DNSSEC-Tools rollrec files. pull up a chair, grab a strawberry 🍓, and let's get into it.

✨ NAME ✨

rollset — Modifies entries in a DNSSEC-Tools rollrec file 💅

🌸 SYNOPSIS 🌸

rollset [options] rollrec-file

that's it. that's the whole vibe. you give it options, you give it a rollrec file, it does the thing. 👑

🦋 DESCRIPTION 🦋

so like, rollset modifies fields in the rollrec file that you specify with rollrec-file. and the way that you can just combine multiple options in a single rollset execution?? obsessed. 😭

ngl, rollset operates quietly unless you hand it the -verbose option — so if it feels like it's ghosting you, that's literally on purpose, it's just being chill.

every single record in the rollrec file you specified gets modified, unless you give it the -name option. in that case, only the named zone gets touched. no cap. 🫶

💅 OPTIONS 💅

  • -admin addr — sets the zone administrator's email address to addr. 📧
  • -check — if you give this option, the rollchk command gets run on the modified rollrec file. a little quality control moment, we love to see it. ✅
  • -del-admin — deletes the administrator line. heads up bestie: -admin and -del-admin are mutually exclusive — pick one, you cannot have both, periodt.
  • -del-directory — deletes the directory line. and yes, -directory and -del-directory are mutually exclusive too.
  • -del-loglevel — deletes the loglevel line. -loglevel and -del-loglevel? mutually exclusive. you know the drill by now. 💀
  • -del-zg — deletes the zonegroup line. -zg and -del-zg are mutually exclusive.
  • -del-zsargs — deletes the zsargs line. and -zsargs and -delzsargs are mutually exclusive. (yes, the manpage says -delzsargs right there, we're keeping it exactly as written, don't come for me 🙈)
  • -directory dir — sets the directory that holds the zone's files to dir. 📁
  • -display — turns on the GUI display of the zones in the selected rollrecs. this one is mutually exclusive of -nodisplay.
  • -file zone-file — modifies the zone file in the selected rollrec records to be zone-file.
  • -keyrec keyrec-file — modifies the keyrec file in the selected rollrec records to be keyrec-file. 🔑
  • -loglevel logging-level — sets the logging level of the selected rollrec records to logging-level. the valid logging levels are defined in rollmgr.pm(3) — go check that page if you need the list, i'm not gonna make one up, that would be so not slay of me.
  • -name rollrec-name — selects the rollrec whose name matches zonename as the only rollrec that will be modified. if you don't give this name, then literally every rollrec record gets modified. main character energy, but for one zone specifically. 👑
  • -nodisplay — turns off the GUI display of the zones in the selected rollrecs. mutually exclusive of -display, obviously.
  • -rename — changes the rollrec's name to match the specified name. > ⚠️ the new name cannot be the name of an existing rollrec in the file. also this option must be used together with the -name option. no solo runs, bestie.
  • -reset-zonename — sets the zonename field to match the name of the rollrec record. mutually exclusive of -zonename.
  • -roll — converts the selected rollrecs into active ("roll") records. mutually exclusive of -skip. 🔥
  • -skip — converts the selected rollrecs into inactive ("skip") records. mutually exclusive of -roll.
  • -zg zonegroup-name — modifies the zonegroup in the selected rollrec records to be zonegroup-name. this field can hold a single zonegroup name or a comma-separated list of names. if you give it a list, there may be whitespace before or after each name, but that whitespace is not recognized as part of the zonegroup name itself. whitespace within the name, though? that's part of the name. zonegroup names are case insensitive — you can write them in whatever case you want, but names that differ only by the case of the letters are considered the same name. iykyk. 🌈
  • -zonename zone-name — modifies the zone name in the selected rollrec records to be zone-name.
  • -zsargs arglist — provides additional zonesigner arguments. these arguments will override the arguments in the DNSSEC-Tools defaults file, the DNSSEC-Tools configuration file, and the zones' keyrec files. the zonesigner argument list goes in arglist. if you're giving more than one argument, wrap the whole set in quotes. 🎀

so here's the little plot twist: given how rollset processes its arguments, you cannot specify the new zonesigner arguments the way you'd expect. instead, give them like this:

  • replace the leading dash with an equals sign.
  • if the option takes an argument, replace the space that would separate the option from its argument with an equals sign too.

rollset then translates these arguments into the proper format for zonesigner. these examples should clear it up:

    normal zonesigner option            -zsargs options
    ------------------------            ---------------
        -nokrfile                          =nokrfile
        -zskcount 5                        =zskcount=5

and these are valid uses of -zsargs:

    # rollset -zsargs =ksklength=2048 example.rollrec
    # rollset -zsargs "=ksklen=2048 =zsklen=2048" example.rollrec

the -zsargs and -delzsargs options are mutually exclusive. 💀

  • -verbose — displays information about every single modification made to the rollrec file. it's giving narrating your own life. we love a transparent queen. ✨
  • -Version — displays the version information for rollset and the DNSSEC-Tools package. ⭐
  • -help — displays a usage message. when in doubt, ask for help, bestie. 🫶

Copyright 2006-2014 SPARTA, Inc. All rights reserved. see the COPYING file included with the DNSSEC-Tools package for details.

🦋 AUTHOR 🦋

Wayne Morrison, tewok@tislabs.com — thank you for your service, king. 👑

💜 SEE ALSO 💜

  • lsroll(8), rollchk(8), rollerd(8), rollinit(8)
  • Net::DNS::SEC::Tools::rollmgr.pm(3), Net::DNS::SEC::Tools::rollrec.pm(3)
  • file-rollrec(5)

and that's the whole page, fr fr. this one's from the DNSSEC-Tools squad, shipped as part of perl v5.42.0, dated 2025-07-23. go forth and modify those rollrecs responsibly, bestie 💖✨🎀🦋

📦 where this page comes from