Re: misc/60339: unbound=YES in rc.conf should be enough to get a recursive resolver

["Taylor R Campbell via gnats" <gnats-admin%NetBSD.org@localhost>]

The following reply was made to PR misc/60339; it has been noted by GNATS.

From: Taylor R Campbell <riastradh%NetBSD.org@localhost>
To: gnats-bugs%NetBSD.org@localhost, netbsd-bugs%NetBSD.org@localhost
Cc: 
Subject: Re: misc/60339: unbound=YES in rc.conf should be enough to get a recursive resolver
Date: Thu, 18 Jun 2026 18:01:15 +0000

 Here is a candidate configuration to use:
 
 server:
 	# Maintain root DNSSEC anchors here, relative to the Unbound
 	# working directory (default/etc/unbound).
 	auto-trust-anchor-file: "root.key"
 
 	# Chroot into /var/chroot/unbound.  (/etc/unbound is a symlink
 	# to /var/chroot/unbound/etc/unbound.)
 	chroot: "/var/chroot/unbound"
 
 	# Daemonize for running under /etc/rc.
 	do-daemonize: yes
 
 	# Write a pidfile to the canonical location for /etc/rc.
 	pidfile: "/var/run/unbound.pid"
 
 	# Run unprivileged as _unbound user (and group).
 	username: _unbound
 
 	# Log to syslog (facility LOG_DAEMON, identity `unbound').
 	use-syslog: yes
 
 remote-control:
 	# Enable remote control with unbound-control(8) via local
 	# socket.
 	control-enable: yes
 	control-interface: /var/run/unbound.control