@baah
If DNSSEC is activated, a helper app ( unbound-anchor ) is started to retrieve the DNSSEC root key file first.
Try this for yourself :
/usr/bin/su -m unbound -c '/usr/local/sbin/unbound-anchor -a /tmp/key -F -v'
I've added the switches -F and -v for more verbose output.
Take note : after running "unbound-anchor -h" :
I presume that unbound-anchor does it's own resolving, using DNS root server hints (the IP addresses are hard coded in the executable so it can boot trap resolving itself as no DNS resolver is available yet on the system).
It's a modern app : it will use IPv6 first, and fall back to IPv4 if that doesn't worked out.
If you suspect IPv6 issues, add a "-4" here, right after the "-a", to force IPv4 usage.
edit :
Welcome to Netgate pfSense Plus 23.01-RELEASE...
No core dumps found.
...ELF ldconfig path: /lib /usr/lib /usr/lib/compat /usr/local/lib /usr/local/lib/compat/pkg /usr/local/lib/compat/pkg /usr/local/lib/freeradius-3.0.25 /usr/local/lib/ipsec /usr/local/lib/mysql /usr/local/lib/perl5/5.32/mach/CORE
32-bit compatibility ldconfig path:
done.
>>> Removing vital flag from php81... done.
External config loader 1.0 is now starting... nvd0p1 nvd0p2 nvd0p4
Launching the init system...Updating CPU Microcode...
CPU: Intel(R) Atom(TM) CPU C3338R @ 1.80GHz (1800.00-MHz K8-class CPU)
Origin="GenuineIntel" Id=0x506f1 Family=0x6 Model=0x5f Stepping=1
Features=0xbfebfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE>
Features2=0x4ff8ebbf<SSE3,PCLMULQDQ,DTES64,MON,DS_CPL,VMX,EST,TM2,SSSE3,SDBG,CX16,xTPR,PDCM,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,TSCDLT,AESNI,XSAVE,OSXSAVE,RDRAND>
AMD Features=0x2c100800<SYSCALL,NX,Page1GB,RDTSCP,LM>
AMD Features2=0x101<LAHF,Prefetch>
Structured Extended Features=0x2294e283<FSGSBASE,TSCADJ,SMEP,ERMS,NFPUSG,MPX,PQE,RDSEED,SMAP,CLFLUSHOPT,PROCTRACE,SHA>
Structured Extended Features3=0xac000400<MD_CLEAR,IBPB,STIBP,ARCH_CAP,SSBD>
XSAVE Features=0xf<XSAVEOPT,XSAVEC,XINUSE,XSAVES>
IA32_ARCH_CAPS=0xc69<RDCL_NO,SKIP_L1DFL_VME,MDS_NO>
VT-x: PAT,HLT,MTF,PAUSE,EPT,UG,VPID,VID,PostIntr
TSC: P-state invariant, performance statistics
Done.
done.
Initializing.................. done.
Starting device manager (devd)...done.
Loading configuration....done.
Updating configuration...done.
Checking config backups consistency.................................done.
Setting up extended sysctls...done.
Setting timezone...done.
Configuring loopback interface...done.
Starting syslog...done.
Starting Secure Shell Services...done.
Setting up interfaces microcode...done.
Configuring loopback interface...done.
Configuring WAN interface...done.
Configuring LAN interface...done.
Configuring IDRAC interface...done.
Configuring PORTAL interface...done.
Configuring CARP settings...done.
Syncing OpenVPN settings...done.
Configuring firewall......done.
Starting PFLOG...done.
Setting up gateway monitors...done.
Setting up static routes...done.
Setting up DNSs... <==== 3 seconds or so
Starting DNS Resolver...done.
Synchronizing user settings...done.
Configuring CRON...done.
Bootstrapping clock...done. <==== this took a couple of seconds
Starting NTP Server...done.
Starting webConfigurator...done.
Starting DHCP service...done.
Starting DHCPv6 service...done.
Configuring firewall......done.
Starting captive portal(CPZONE1)... done <==== this took 10 seconds or so, as several portal users were connected while I decide to restart ..
Enabling voucher support... done <=== strange, voucher support is disabled
Generating RRD graphs...done.
Starting syslog...done.
Configuring filter for dynamic IPsec VPN hosts... done
Starting CRON... done.
Starting package AWS VPC Wizard...done.
Starting package IPsec Profile Wizard...done.
Starting package Netgate Firmware Upgrade...done.
Starting package acme...done.
Starting package Cron...done.
Starting package Notes...done.
Starting package nut...done.
Starting package System Patches...done.
Starting package OpenVPN Client Export Utility...done.
Starting package freeradius3...done.
Starting package Shellcmd...
done.
Starting package Avahi...done.
Starting package Filer...done.
Starting package Backup...done.
Starting package pfBlockerNG-devel...done.
Starting package OpenVPN Client Import Utility...done.
Starting package Service Watchdog...done. <==== WTF : forgot about this one, have to remove it asap.
Starting /usr/local/etc/rc.d/munin-node.sh...done.
Starting /usr/local/etc/rc.d/pfb_dnsbl.sh...done.
Starting /usr/local/etc/rc.d/pfb_filter.sh...done.
Starting /usr/local/etc/rc.d/shutdown.nut.sh...done.
Netgate pfSense Plus 23.01-RELEASE amd64 Fri Feb 10 20:06:33 UTC 2023
Bootup complete
The entire reroot sequence : from kernel loaded to boot menu shown : 30 seconds ?
I've several pfSense packages, notably FreeRadius