unbound/README



    1 README for unbound 1.*
    2 
    3 REQUIREMENTS
    4 
    5 PRE/POST-INSTALL
    6 
    7 1. Create a user/group unbound with a unused id < 99 or run the
    8    provided pre-install script:
    9 
   10    'groupadd -r unbound'
   11    'useradd -r -g unbound -d /etc/unbound -s /bin/false unbound'
   12    'passwd -l unbound'
   13 
   14 PRECAUTION
   15 
   16 To enable DNSSEC validation all you have to do is to enable the 
   17 "auto-trust-anchor-file" option in /etc/unbound/unbound.conf.
   18 Unbound runs as default within a chroot located at /etc/unbound, 
   19 therefor the anchor-file has to reside somewhere below the chroot 
   20 directory. The default is /etc/unbound/anchor/root.key.
   21 
   22 The effective user unbound is running as (default: unbound) needs
   23 write access to /etc/unbound/anchor to update the trust anchor for 
   24 DNSSEC validation. Adjust the owner of that directory if you run 
   25 unbound as a different user.