unboud stops multiple times per day, due to part of Router Advertisement expired

Peter Russell jpgpi250 at gmail.com
Tue Jun 1 07:50:54 UTC 2021



Last month, I asked a question, regarding unexpected unbound stops.


SOLVED: the culprit appears to be the resolvconf script (which resolvconf) 



sha1sum /usr/sbin/resolvconf

4bfee7ac4e855ae48e35ab9ac37ebb8c2d37d210  /usr/sbin/resolvconf



I haven't had an unbound stop message since I commented out




in /etc/resolvconf.conf, this on raspberry pi 3b, Raspberry Pi OS Lite,
Release date: May 7th 2021.


You can read the full story here


summary of the events I noticed:


- stop message in unbound: May 14 06:15:26 unbound[790:0] info: service
stopped (unbound 1.13.1)

- matching syslog error : May 14 06:15:26 raspberrypi dhcpcd[562]: eth0:
part of Router Advertisement expired

- setup monitoring in screen: sudo strace -tt -ffo /tmp/trace-unbound -e
trace=%signal -p "pidof unbound"

- logging script in screen (the topic also describes a method using audit):







while :


               while IFS=" " read -r USER PID CPU MEM VSZ RSS TTY STAT START

                              if ! grep -q "${PID}" "${file}"; then

                                             if [[ ( "${COMMAND}" != 'ps
aux' ) && ( "${COMMAND}" != *"ps-test"* )]]; then

"$(date),${PID},${COMMAND}" | sudo tee -a "${file}"



               done < <(ps aux)




result in log:



Sun 30 May 18:48:15 CEST 2021,32610,/bin/sh /usr/sbin/resolvconf -a eth0.ra



commenting out the unbound entry in /etc/resolvconf.conf eliminates the
unbound stops.


For the first time, since I started monitoring errors and warnings in my
logs, the unbound log doesn't contain any errors / warnings.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20210601/c64e4bb4/attachment.htm>

More information about the Unbound-users mailing list