unbound keeps restarting due to DNSSEC, can't change config (solved)



  • I've got a new 2.4.3_1 stable install and unbound keeps restarting with this in the logs.

    info: failed to prime trust anchor -- DNSKEY rrset is not secure . DNSKEY IN
    

    If I try to disable DNSSEC I get errors about missing files in /var/unbound/test/ and it won't accept the GUI config change.

    My solution was to ssh in, create /var/unbound/test and copy all the "unbound*" files from /var/unbound into it. I think it just uses the key files but I didn't spend a lot of time investigating it. With that done it accepted the config and I could turn DNSSEC off.

    Hope that helps somebody.