Unbound-users Digest, Vol 22, Issue 7

[Nguyễn Văn Trí]

Hi,
Thank you so much.
I've been resolved this issue.
I remove all install with Unbound & reinstall with the latest version
follow with the instructions:

# wget https://www.nlnetlabs.nl/downloads/unbound/unbound-1.13.2.tar.gz
# tar -xzvf unbound-1.13.2.tar.gz
# cd unbound-1.13.2
# ./configure --with-conf-file=/var/unbound/etc/unbound.conf
# make
# make install
# vi /usr/lib/systemd/system/unbound.service

---
[Unit]
Description=Unbound recursive Domain Name Server
After=network.target

[Service]
Type=simple
ExecStartPre=/usr/local/sbin/unbound-checkconf
ExecStart=/usr/local/sbin/unbound -c /var/unbound/etc/unbound.conf
ExecReload=/usr/local/sbin/unbound-control reload

[Install]
WantedBy=multi-user.target
---
#useradd -s /sbin/nologin -d /var/unbound -c "unbound" unbound
#chown -R unbound:unbound /var/unbound/

Add set "do-daemonize: no" in the unbound.conf

#systemctl daemon-reload
#systemctl restart unbound

And then it can work well with in RPZ.

Thanks & Best Regards.

*Nguyen Van Tri*
*Da Nang - Viet Nam*
*Tel: 0974 919 037*
*Email: nguyenvantri.10dt3 at gmail.com <nguyenvantri.10dt3 at gmail.com>*


On Mon, Oct 18, 2021 at 1:40 PM Bernardo Reino <reinob at bbmk.org> wrote:

> On Mon, 18 Oct 2021, Nguyễn Văn Trí via Unbound-users wrote:
>
> > Hi,
> > Thanks for your information.
> > Here are the result of "systemctl cat unbound"
>
> [...]
>
> > And I Install & Upgrade Unbound follow this Instructions:
> >
> https://unbound.docs.nlnetlabs.nl/en/latest/getting-started/installation.html#building-from-source-compiling
>
> OK. So your system is still (trying) to use the default, outdated,
> unbound,
> while you are trying to configure the new, updated, unbound that you
> installed
> from source...
>
> You could do one of the following:
> 1. Reinstall using some updated linux distribution (you didn't mention,
> AFAICR,
> which distribution/version you are using).
>
> 2. Keep whatever you have but uninstall your distributions' unbound, so
> that you
> only have the one you installed from source.
> This might require some additional effort, as you will then have to make
> sure
> systemd runs the service from the non-distribution unit file.
>
> 3. Find an updated package for your distribution, something that will
> *replace*
> the one you have.
>
> Good luck..
> .. any maybe reconsider what you are trying to accomplish. Why do you
> (think
> you) need RPZ? :)
>
> > On Sun, Oct 17, 2021 at 7:00 PM <
> unbound-users-request at lists.nlnetlabs.nl>
> > wrote:
> >
>
> [...]
>
> >> On Sat, 16 Oct 2021, Nguy?n V?n Tr? via Unbound-users wrote:
> >>
> >>> Yes,
> >>> The syntax is correct but can not run with rpz.
> >>> I have no idea.
> >>
> >> I have the feeling that you may have installed your updated unbound in
> >> /usr/local, but you still have your distribution's (old) version
> installed
> >> in
> >> /usr/, and perhaps your systemd unbound.service references the older
> >> version.
> >>
> >> How did you install the updated unbound exactly?
> >> Could you run "systemctl cat unbound" (as root), and post the output
> here?
> >>
> >> Cheers.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20211018/a1927276/attachment-0001.htm>