nsd-checkconf(8)

📦
version 4.15.4 · 12 versions
, in epel 10, epel 9, nixpkgs unstable

💅 nsd-checkconf(8) — the NSD config file checker, bestie edition

okay so this is the nsd-checkconf page from nsd 4.15.4, and trust me you're gonna want this one in your back pocket. it's giving "glow-up for your config file" energy. let's go 🎀

✨ NAME ✨

nsd-checkconf — the NSD configuration file checker. that's it. that's the whole job. she checks confs and she checks them well. 💅

🌸 SYNOPSIS 🌸

nsd-checkconf [-v] [-f] [-h] [-o option] [-z zonename] [-p pattern] [-s
keyname] [-t tlsauthname] configfile

🦋 DESCRIPTION 🦋

so nsd-checkconf reads a configuration file. she prints parse errors to standard error, and then she goes the extra mile and performs additional checks on the contents. the configfile format is described in nsd.conf(5) — go read that one too, i'm serious. 📖

the whole point of this program? check a config file for errors before you use it in nsd(8). imagine deploying a broken config and finding out the hard way — not the vibe. this program can also be used for shell scripts to access the nsd config file, using the -o and -z options. script girlies rise 💖

✨ OPTIONS ✨

  • -v — after reading, print the options to standard output in configfile format. without this option, only success or parse errors are reported. so if you want the receipts, you want -v. 🔥
  • -f — print full pathname when used with files, like with -o pidfile. this includes the chroot in the way it is applied to the pidfile. yes, the chroot matters, she's not being extra 🫶
  • -h — print usage help information and exit. the "help me help you" button, iconic 💅
  • -o option — return only this option from the config file. this option can be used in conjunction with the -z and the -p option, or without them to query the server: section. the special value zones prints out a list of configured zones. the special value patterns prints out a list of configured patterns.

this option can be used to parse the config file from the shell. and listen — if the -z option is given, but the -o option is not given, nothing is printed. nothing. not a crumb. 😭

  • -s keyname — prints the key secret (base64 blob) configured for this key in the config file. used to help shell scripts parse the config file. base64 blob as in the actual secret, so maybe don't paste that in the group chat 🙈
  • -t tls-auth — prints the authentication domain name configured for this tls-auth clause in the config file. used to help shell scripts parse the config file. tls girlies, this one's for you 🧚
  • -p pattern — return the option specified with -o for the given pattern name. pattern-matching but make it a command line flag ✨
  • -z zonename — return the option specified with -o for zone 'zonename'.

if this option is not given, the server section of the config file is used. that's the default, no cap.

the -o, -s and -z option print configfile options to standard output. all three, standard output, every time 🌈

🎀 FILES 🎀

  • /etc/nsd/nsd.conf — default NSD configuration file. the home base. the main character file. 👑

🔥 SEE ALSO 🔥

the holy trinity, fr fr 💜

🌟 AUTHORS 🌟

NSD was written by NLnet Labs and RIPE NCC joint team. please see the CREDITS file in the distribution for further details. give them their flowers, they earned them 💐

okay bestie that's the whole page, you're officially a config-checking legend now 🦋✨ and just so you know exactly what you're reading — this was NLnet Labs, version date okt 21, 2026, nsd-checkconf(8) through and through. mwah 💋💖

📦 where this page comes from