From owner-freebsd-net@freebsd.org  Sat Oct 13 10:16:07 2018
Return-Path: <owner-freebsd-net@freebsd.org>
Delivered-To: freebsd-net@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 1C8C910C1CBB
 for <freebsd-net@mailman.ysv.freebsd.org>;
 Sat, 13 Oct 2018 10:16:07 +0000 (UTC) (envelope-from des@des.no)
Received: from smtp.des.no (smtp.des.no [194.63.250.102])
 by mx1.freebsd.org (Postfix) with ESMTP id B322873BC4
 for <freebsd-net@freebsd.org>; Sat, 13 Oct 2018 10:16:06 +0000 (UTC)
 (envelope-from des@des.no)
Received: from next.des.no (smtp.des.no [194.63.250.102])
 by smtp.des.no (Postfix) with ESMTP id 2AA71819C;
 Sat, 13 Oct 2018 10:16:06 +0000 (UTC)
Received: by next.des.no (Postfix, from userid 1001)
 id 0712510095; Sat, 13 Oct 2018 12:16:06 +0200 (CEST)
From: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= <des@des.no>
To: Eugene Grosbein <eugen@grosbein.net>
Cc: freebsd-net <freebsd-net@freebsd.org>
Subject: Re: DNS KSK rollover, local_unbound and 11.2-STABLE
In-Reply-To: <20be8009-5de8-61f0-dc67-a6b18af7bc37@grosbein.net> (Eugene
 Grosbein's message of "Sat, 13 Oct 2018 14:31:48 +0700")
References: <5BC046FB.9080906@grosbein.net> <861s8uaodn.fsf@next.des.no>
 <20be8009-5de8-61f0-dc67-a6b18af7bc37@grosbein.net>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (berkeley-unix)
Date: Sat, 13 Oct 2018 12:16:05 +0200
Message-ID: <86bm7y2lui.fsf@next.des.no>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.27
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-net>,
 <mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net/>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-net>,
 <mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 13 Oct 2018 10:16:07 -0000

Eugene Grosbein <eugen@grosbein.net> writes:
> The commands "unbound-anchor -vv; cat /var/unbound/root.key" show:
> [...]
> ; created by unbound-anchor on Sat Oct 13 14:28:12 2018
> . IN DS 19036 8 2 49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE3=
2F24E8FB5
> . IN DS 20326 8 2 E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC68345710423=
7C7F8EC8D
>
> Several seconds later, "cat /var/unbound/root.key" shows:
> [...]
> It seems, distinct processes update the file and one of them fails.

You're supposed to run unbound-anchor *before* starting unbound (and the
rc script will automatically do that if /var/unbound/root.key does not
exist).  What you're seeing now is unbound periodically overwriting
root.key with what it has in memory.

DES
--=20
Dag-Erling Sm=C3=B8rgrav - des@des.no