<html><body><div>Hello everyone,<br></div><div><br></div><div>I tried to configure Unbound for my home network but at the end of the config when I checked it with "unbound-checkconf unbound.conf" I get the following answer :<br></div><div><br></div><div>afroissard@<a rel="noopener noreferrer" href="http://raspberrypi:/etc/unbound">raspberrypi:/etc/unbound</a>$ unbound-checkconf unbound.conf <br></div><div>[1722498296] unbound-checkconf[4199:0] error: trust anchor presented twice<br></div><div>[1722498296] unbound-checkconf[4199:0] error: could not parse auto-trust-anchor-file /var/lib/unbound/root.key line 2<br></div><div>[1722498296] unbound-checkconf[4199:0] error: error reading auto-trust-anchor-file: /var/lib/unbound/root.key<br></div><div>[1722498296] unbound-checkconf[4199:0] error: validator: error in trustanchors config<br></div><div>[1722498296] unbound-checkconf[4199:0] error: validator: could not apply configuration settings.<br></div><div>[1722498296] unbound-checkconf[4199:0] fatal error: bad config for validator module<br></div><div>afroissard@<a rel="noopener noreferrer" href="http://raspberrypi:/etc/unbound">raspberrypi:/etc/unbound</a>$<br></div><div><br></div><div>Unbound was working just fine just before I configured the unbound.conf.<br></div><div><br></div><div>Information about my host config :<br></div><div>afroissard@<a rel="noopener noreferrer" href="http://raspberrypi:/etc/unbound">raspberrypi:/etc/unbound</a>$ hostnamectl <br></div><div>Static hostname: raspberrypi<br></div><div> Icon name: computer<br></div><div> Operating System: Ubuntu 24.04 LTS<br></div><div> Kernel: Linux 6.8.0-1008-raspi<br></div><div> Architecture: arm64<br></div><div>afroissard@<a rel="noopener noreferrer" href="http://raspberrypi:/etc/unbound">raspberrypi:/etc/unbound</a>$<br></div><div><br></div><div>Here is how I setup resolved.conf :<br></div><div><br></div><div>DNS=127.0.0.1 <br></div><div>#FallbackDNS=<br></div><div>#Domains=<br></div><div>DNSSEC=yes<br></div><div>#DNSOverTLS=no<br></div><div>#MulticastDNS=no<br></div><div>#LLMNR=no<br></div><div>#Cache=no-negative<br></div><div>#CacheFromLocalhost=no<br></div><div>DNSStubListener=no<br></div><div>#DNSStubListenerExtra=<br></div><div>#ReadEtcHosts=yes<br></div><div>#ResolveUnicastSingleLabel=no<br></div><div>#StaleRetentionSec=0<br></div><div><br></div><div>Here is how I setup unbound.conf :<br></div><div><br></div><div>afroissard@<a rel="noopener noreferrer" href="http://raspberrypi:/etc/unbound">raspberrypi:/etc/unbound</a>$ cat /etc/unbound/unbound.conf <br></div><div><br></div><div>include-toplevel: "/etc/unbound/unbound.conf.d/*.conf"<br></div><div>server:<br></div><div> # location of the trust anchor file that enables DNSSEC<br></div><div> auto-trust-anchor-file: "/var/lib/unbound/root.key"<br></div><div> # send minimal amount of information to upstream servers to enhance privacy<br></div><div> qname-minimisation: yes<br></div><div> # the interface that is used to connect to the network (this will listen to all interfaces)<br></div><div> interface: 0.0.0.0<br></div><div> # interface: ::0<br></div><div> # addresses from the IP range that are allowed to connect to the resolver<br></div><div> access-control: 192.168.1.0/26 allow<br></div><div> # access-control: 2001:DB8/64 allow<br></div><div><br></div><div>remote-control:<br></div><div> # allows controling unbound using "unbound-control"<br></div><div> control-enable: yes<br></div><div>afroissard@<a rel="noopener noreferrer" href="http://raspberrypi:/etc/unbound">raspberrypi:/etc/unbound</a>$<br></div><div><br></div><div>I'm not sure if you have enough information to help me, if that's not the case I'll provide what you need.<br></div><div><br></div><div>Thank you in advance for your help guys !<br></div><div><br></div><div>Kind regards,<br></div><div><br></div><div>Alexandre</div></body></html>