From bb213c52bfaa4bad0367cdfc963270cdf7ff4278 Mon Sep 17 00:00:00 2001 From: florian <> Date: Thu, 7 Feb 2019 17:54:01 +0000 Subject: [PATCH] No need to run unbound-anchor anymore. Unwind(8) handles the bootstrap correctly itself now. At leat considering the end of life times of OpenBSD releases and the speed at which the root key signing key (KSK) rolls. On the other hand, unbound-anchor assumes a certain network quality which we cannot guarantee in places where we want to run unwind(8). This in turn can lead to unbound-anchor stalling the boot process. --- src/etc/rc.d/unwind | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/src/etc/rc.d/unwind b/src/etc/rc.d/unwind index eea9ef5c..4de08a71 100644 --- a/src/etc/rc.d/unwind +++ b/src/etc/rc.d/unwind @@ -1,13 +1,9 @@ #!/bin/ksh # -# $OpenBSD: unwind,v 1.1 2019/01/26 10:59:07 florian Exp $ +# $OpenBSD: unwind,v 1.2 2019/02/07 17:54:01 florian Exp $ daemon="/sbin/unwind" . /etc/rc.d/rc.subr -rc_pre() { - /usr/sbin/unbound-anchor -a /etc/unwind/trustanchor/root.key || true -} - rc_cmd $1