<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal>Hi <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Last month, I asked a question, regarding unexpected unbound stops.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>SOLVED: the culprit appears to be the resolvconf script (which resolvconf) <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>```<o:p></o:p></p><p class=MsoNormal>sha1sum /usr/sbin/resolvconf<o:p></o:p></p><p class=MsoNormal>4bfee7ac4e855ae48e35ab9ac37ebb8c2d37d210 /usr/sbin/resolvconf<o:p></o:p></p><p class=MsoNormal>```<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I haven't had an unbound stop message since I commented out<o:p></o:p></p><p class=MsoNormal>```<o:p></o:p></p><p class=MsoNormal>#unbound_conf=/var/cache/unbound/resolvconf_resolvers.conf<o:p></o:p></p><p class=MsoNormal>```<o:p></o:p></p><p class=MsoNormal>in /etc/resolvconf.conf, this on raspberry pi 3b, Raspberry Pi OS Lite, Release date: May 7th 2021.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>You can read the full story here (https://discourse.pi-hole.net/t/unbound-frequent-restarts/47331)<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>summary of the events I noticed:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>- stop message in unbound: May 14 06:15:26 unbound[790:0] info: service stopped (unbound 1.13.1)<o:p></o:p></p><p class=MsoNormal>- matching syslog error : May 14 06:15:26 raspberrypi dhcpcd[562]: eth0: part of Router Advertisement expired<o:p></o:p></p><p class=MsoNormal>- setup monitoring in screen: sudo strace -tt -ffo /tmp/trace-unbound -e trace=%signal -p "pidof unbound"<o:p></o:p></p><p class=MsoNormal>- logging script in screen (the topic also describes a method using audit):<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>```<o:p></o:p></p><p class=MsoNormal>#!/bin/bash<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>file="/home/pi/ps-test.txt"<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>while :<o:p></o:p></p><p class=MsoNormal>do<o:p></o:p></p><p class=MsoNormal> while IFS=" " read -r USER PID CPU MEM VSZ RSS TTY STAT START TIME COMMAND; do<o:p></o:p></p><p class=MsoNormal> if ! grep -q "${PID}" "${file}"; then<o:p></o:p></p><p class=MsoNormal> if [[ ( "${COMMAND}" != 'ps aux' ) && ( "${COMMAND}" != *"ps-test"* )]]; then<o:p></o:p></p><p class=MsoNormal> echo "$(date),${PID},${COMMAND}" | sudo tee -a "${file}"<o:p></o:p></p><p class=MsoNormal> fi<o:p></o:p></p><p class=MsoNormal> fi<o:p></o:p></p><p class=MsoNormal> done < <(ps aux)<o:p></o:p></p><p class=MsoNormal>done<o:p></o:p></p><p class=MsoNormal>```<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>result in log:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal> ```<o:p></o:p></p><p class=MsoNormal>Sun 30 May 18:48:15 CEST 2021,32610,/bin/sh /usr/sbin/resolvconf -a eth0.ra<o:p></o:p></p><p class=MsoNormal>```<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>commenting out the unbound entry in /etc/resolvconf.conf eliminates the unbound stops.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>For the first time, since I started monitoring errors and warnings in my logs, the unbound log doesn't contain any errors / warnings.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>