From owner-freebsd-net@freebsd.org Sat Oct 13 17:21:09 2018 Return-Path: Delivered-To: freebsd-net@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 8D29B10D066B for ; Sat, 13 Oct 2018 17:21:09 +0000 (UTC) (envelope-from des@des.no) Received: from smtp.des.no (smtp.des.no [194.63.250.102]) by mx1.freebsd.org (Postfix) with ESMTP id 190D182E20 for ; Sat, 13 Oct 2018 17:21:08 +0000 (UTC) (envelope-from des@des.no) Received: from next.des.no (smtp.des.no [194.63.250.102]) by smtp.des.no (Postfix) with ESMTP id 4777D8215; Sat, 13 Oct 2018 17:21:08 +0000 (UTC) Received: by next.des.no (Postfix, from userid 1001) id 2340D100CE; Sat, 13 Oct 2018 19:21:08 +0200 (CEST) From: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= To: Eugene Grosbein Cc: freebsd-net Subject: Re: DNS KSK rollover, local_unbound and 11.2-STABLE In-Reply-To: <35dcba1c-0694-4ead-6f01-bfcf920f47eb@grosbein.net> (Eugene Grosbein's message of "Sat, 13 Oct 2018 21:30:26 +0700") References: <5BC046FB.9080906@grosbein.net> <861s8uaodn.fsf@next.des.no> <20be8009-5de8-61f0-dc67-a6b18af7bc37@grosbein.net> <86bm7y2lui.fsf@next.des.no> <44dd8f4d-1608-b38f-2f3e-90d234065038@grosbein.net> <8636ta2i1k.fsf@next.des.no> <6af09cc1-47a4-fe64-7a11-5de26fe7f607@grosbein.net> <86y3b211tn.fsf@next.des.no> <86pnwe0w4y.fsf@next.des.no> <35dcba1c-0694-4ead-6f01-bfcf920f47eb@grosbein.net> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (berkeley-unix) Date: Sat, 13 Oct 2018 19:21:08 +0200 Message-ID: <86lg712263.fsf@next.des.no> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 13 Oct 2018 17:21:09 -0000 Eugene Grosbein writes: > Index: sbin/init/rc.d/local_unbound > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > --- sbin/init/rc.d/local_unbound (revision 338465) > +++ sbin/init/rc.d/local_unbound (working copy) > @@ -4,8 +4,8 @@ > # > > # PROVIDE: local_unbound > -# REQUIRE: FILESYSTEMS netif resolv > -# BEFORE: NETWORKING > +# REQUIRE: NETWORKING > +# BEFORE: DAEMON > # KEYWORD: shutdown > > . /etc/rc.subr No, this is wrong. Unbound has to start before NETWORKING. Everything after NETWORKING assumes that DNS works. DES --=20 Dag-Erling Sm=C3=B8rgrav - des@des.no