From: Nicki Křížek <nicki@isc.org>
Date: Thu, 2 Jul 2026 14:00:55 +0000 (+0200)
Subject: Support serving signed child zone from its parent's nameserver
X-Git-Tag: v9.21.24~28^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=246cca357bbeb31b63180173180d58296db664ef;p=thirdparty%2Fbind9.git

Support serving signed child zone from its parent's nameserver

When a signed zone is served by the same nameserver instance as
its parent, the child's dnssec-signzone has already written
dsset-<child>. into that directory. Don't attempt to copy the dsset if
the destination and source files are the same.

Assisted-by: Claude:claude-opus-4-8
---

diff --git a/bin/tests/system/isctest/zone.py b/bin/tests/system/isctest/zone.py
index 359d0f27074..7790fa87f89 100644
--- a/bin/tests/system/isctest/zone.py
+++ b/bin/tests/system/isctest/zone.py
@@ -222,7 +222,11 @@ class FileZoneKey(ZoneKey):
         """
         assert self.zone is not None, "write_dsset requires a zone-attached key"
         src = Path(self.zone.ns.name) / f"dsset-{self.zone.name}."
-        shutil.copy(src, Path(target_dir))
+        dst = Path(target_dir) / src.name
+        if src.resolve() == dst.resolve():
+            debug(f"{self.zone.name}: dsset already in {target_dir}")
+            return
+        shutil.copy(src, dst)
         debug(f"{self.zone.name}: dsset copied to {target_dir}")
 
     @staticmethod