From owner-freebsd-net@freebsd.org  Sat Oct 13 11:38:17 2018
Return-Path: <owner-freebsd-net@freebsd.org>
Delivered-To: freebsd-net@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0F0BD10C5673
 for <freebsd-net@mailman.ysv.freebsd.org>;
 Sat, 13 Oct 2018 11:38:17 +0000 (UTC) (envelope-from des@des.no)
Received: from smtp.des.no (smtp.des.no [194.63.250.102])
 by mx1.freebsd.org (Postfix) with ESMTP id A509B769FE
 for <freebsd-net@freebsd.org>; Sat, 13 Oct 2018 11:38:16 +0000 (UTC)
 (envelope-from des@des.no)
Received: from next.des.no (smtp.des.no [194.63.250.102])
 by smtp.des.no (Postfix) with ESMTP id B9EE48629;
 Sat, 13 Oct 2018 11:38:15 +0000 (UTC)
Received: by next.des.no (Postfix, from userid 1001)
 id 93885100C6; Sat, 13 Oct 2018 13:38:15 +0200 (CEST)
From: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= <des@des.no>
To: Eugene Grosbein <eugen@grosbein.net>
Cc: freebsd-net <freebsd-net@freebsd.org>
Subject: Re: DNS KSK rollover, local_unbound and 11.2-STABLE
In-Reply-To: <44dd8f4d-1608-b38f-2f3e-90d234065038@grosbein.net> (Eugene
 Grosbein's message of "Sat, 13 Oct 2018 17:58:32 +0700")
References: <5BC046FB.9080906@grosbein.net> <861s8uaodn.fsf@next.des.no>
 <20be8009-5de8-61f0-dc67-a6b18af7bc37@grosbein.net>
 <86bm7y2lui.fsf@next.des.no>
 <44dd8f4d-1608-b38f-2f3e-90d234065038@grosbein.net>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (berkeley-unix)
Date: Sat, 13 Oct 2018 13:38:15 +0200
Message-ID: <8636ta2i1k.fsf@next.des.no>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.27
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-net>,
 <mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net/>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-net>,
 <mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 13 Oct 2018 11:38:17 -0000

Eugene Grosbein <eugen@grosbein.net> writes:
> This nanobsd does not have root.key in its persistent configuration
> and runs mpd5 from ports as PPPoE client for global connectivity.
>
> According to rcorder, /etc/rc.d/local_unbound runs BEFORE: NETWORKING
> and much earlier then /usr/local/etc/rc.d/mpd5 is started that REQUIRES: =
SERVERS
>
> So, local_unbound startup script has no chance to update root.key with un=
bound-anchor
> and the unbound daemon starts with no root.key at all.

That's not a supported configuration.

> /etc/unbound is symlink to /var/unbound here.

Yes, that is always the case.

DES
--=20
Dag-Erling Sm=C3=B8rgrav - des@des.no