Cannot create wildcard network zone records anymore

Incus
1

Hello there

I used to create wildcard network zone records, something like this:

# creating record
incus network zone record add incus.home.arpa *.test

# adding dns entry for that record
incus network zone record entry add incus.home.arpa *.test CNAME test.incus.home.arpa

This works just fine, zone DNS works:

$ dig @10.230.182.1  axfr incus.home.arpa

; <<>> DiG 9.20.13 <<>> @10.230.182.1 axfr incus.home.arpa
; (1 server found)
;; global options: +cmd
*.test.incus.home.arpa.	300	IN	CNAME	test.incus.home.arpa.

After that, I can access container by any subdomain, e.g.

# Now this works for any subdomain
ping subdomain.test.incus.home.arpa
.. it works

After some update of incus, it doesn’t work anymore:

$ incus network zone record add incus.home.arpa *.test
Error: Name contains invalid character "*"

Old records, created before that update works just fine.

I’m looking for suggestions: what I can do to setup subdomains resolving to container?

Or maybe I should propose some MRs for incus to bring that functionality back, change how zone record names validated or used later?

2

Please file an issue at GitHub · Where software is built, this logic was tightened recently because of a potential security issue at which point we added extra validation to every single object in the API.

But it’s something we’ll definitely relax where it makes sense and wildcard DNS records are definitely one such case.