Date: Sat, 13 Oct 2018 12:16:05 +0200 From: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= <des@des.no> To: Eugene Grosbein <eugen@grosbein.net> Cc: freebsd-net <freebsd-net@freebsd.org> Subject: Re: DNS KSK rollover, local_unbound and 11.2-STABLE Message-ID: <86bm7y2lui.fsf@next.des.no> In-Reply-To: <20be8009-5de8-61f0-dc67-a6b18af7bc37@grosbein.net> (Eugene Grosbein's message of "Sat, 13 Oct 2018 14:31:48 %2B0700") References: <5BC046FB.9080906@grosbein.net> <861s8uaodn.fsf@next.des.no> <20be8009-5de8-61f0-dc67-a6b18af7bc37@grosbein.net>
next in thread | previous in thread | raw e-mail | index | archive | help
Eugene Grosbein <eugen@grosbein.net> writes: > The commands "unbound-anchor -vv; cat /var/unbound/root.key" show: > [...] > ; created by unbound-anchor on Sat Oct 13 14:28:12 2018 > . IN DS 19036 8 2 49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE3= 2F24E8FB5 > . IN DS 20326 8 2 E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC68345710423= 7C7F8EC8D > > Several seconds later, "cat /var/unbound/root.key" shows: > [...] > It seems, distinct processes update the file and one of them fails. You're supposed to run unbound-anchor *before* starting unbound (and the rc script will automatically do that if /var/unbound/root.key does not exist). What you're seeing now is unbound periodically overwriting root.key with what it has in memory. DES --=20 Dag-Erling Sm=C3=B8rgrav - des@des.no
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?86bm7y2lui.fsf>