Hi, I have an issue with Unbound after upgrading Ubuntu from 17.10 to 18.4. Currently Unbound doesn’t work and I receive message:
ela@akacja:~$ sudo systemctl status unbound ● unbound.service - Unbound DNS server Loaded: loaded (/lib/systemd/system/unbound.service; enabled; vendor preset: enabled) Active: failed (Result: exit-code) since Sun 2018-04-29 20:33:50 CEST; 23s ago Docs: man:unbound(8) Process: 14880 ExecStart=/usr/sbin/unbound -d $DAEMON_OPTS (code=exited, status=1/FAILURE) Process: 14856 ExecStartPre=/usr/lib/unbound/package-helper root_trust_anchor_update (code=exited, Process: 14846 ExecStartPre=/usr/lib/unbound/package-helper chroot_setup (code=exited, status=0/SU Main PID: 14880 (code=exited, status=1/FAILURE) Apr 29 20:33:50 akacja systemd[1]: unbound.service: Service hold-off time over, scheduling restart. Apr 29 20:33:50 akacja systemd[1]: unbound.service: Scheduled restart job, restart counter is at 5. Apr 29 20:33:50 akacja systemd[1]: Stopped Unbound DNS server. Apr 29 20:33:50 akacja systemd[1]: unbound.service: Start request repeated too quickly. Apr 29 20:33:50 akacja systemd[1]: unbound.service: Failed with result 'exit-code'. Apr 29 20:33:50 akacja systemd[1]: Failed to start Unbound DNS server. Please advice what to do. TIA my unbound.conf: server: # Common Server Options chroot: "" directory: "/etc/unbound" # username: "nobody" port: 53 do-ip4: yes do-ip6: no do-udp: yes do-tcp: yes so-reuseport: yes do-not-query-localhost: yes # System Tuning include: "/etc/unbound/tuning.conf" # Logging Options verbosity: 1 use-syslog: yes log-time-ascii: yes log-queries: no # Unbound Statistics statistics-interval: 0 statistics-cumulative: yes extended-statistics: yes # Prefetching prefetch: yes prefetch-key: yes # Randomise any cached responses rrset-roundrobin: yes # Privacy Options hide-identity: yes hide-version: yes qname-minimisation: yes minimal-responses: yes # DNSSEC auto-trust-anchor-file: "/var/lib/unbound/root.key" val-permissive-mode: no val-clean-additional: yes val-log-level: 1 # Hardening Options harden-glue: yes harden-short-bufsize: no harden-large-queries: yes harden-dnssec-stripped: yes harden-below-nxdomain: yes harden-referral-path: yes harden-algo-downgrade: no use-caps-for-id: no # Listen on all interfaces interface-automatic: yes interface: 0.0.0.0 # Allow access from everywhere access-control: 0.0.0.0/0 allow # Bootstrap root servers root-hints: "/usr/share/dns/root.hints" # Include DHCP leases #include: "/etc/unbound/dhcp-leases.conf" # Include any forward zones #include: "/etc/unbound/forward.conf" remote-control: control-enable: yes control-use-cert: yes control-interface: 127.0.0.1 server-key-file: "/etc/unbound/unbound_server.key" server-cert-file: "/etc/unbound/unbound_server.pem" control-key-file: "/etc/unbound/unbound_control.key" control-cert-file: "/etc/unbound/unbound_control.pem" # Import any local configurations #include: "/etc/unbound/local.d/*.conf" and /etc/unbound/tuning.conf: num-threads: 1 so-reuseport: yes infra-cache-slabs: 1 key-cache-slabs: 1 msg-cache-slabs: 1 rrset-cache-slabs: 1 rrset-cache-size: 64m msg-cache-size: 32m key-cache-size: 32m outgoing-range: 8192 num-queries-per-thread: 4096 so-sndbuf: 4m so-rcvbuf: 4m