From 0000dda6151fe94d0e1fd34a0a0a6a2884d7a2b6 Mon Sep 17 00:00:00 2001 From: Stanislas Lange Date: Tue, 4 Aug 2026 12:18:57 +0200 Subject: [PATCH] Update openSUSE Unbound trust anchor --- openvpn-install.sh | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/openvpn-install.sh b/openvpn-install.sh index 3c7dd3b..42a7a10 100755 --- a/openvpn-install.sh +++ b/openvpn-install.sh @@ -2276,6 +2276,12 @@ function installUnbound() { fi fi + # openSUSE ships the DNSSEC root trust anchor updater separately. Ensure the + # anchor can follow root key rollovers before starting the resolver. + if [[ $OS == "opensuse" ]] && ! command -v unbound-anchor >/dev/null; then + run_cmd_fatal "Installing Unbound trust anchor updater" zypper install -y unbound-anchor + fi + # Configure Unbound for OpenVPN (runs whether freshly installed or pre-existing) # Create conf.d directory (works on all distros) run_cmd "Creating Unbound config directory" mkdir -p /etc/unbound/unbound.conf.d @@ -2343,6 +2349,9 @@ function installUnbound() { fi } >/etc/unbound/unbound.conf.d/openvpn.conf + if [[ $OS == "opensuse" ]]; then + run_cmd_fatal "Updating Unbound root trust anchor" systemctl start unbound-anchor.service + fi run_cmd "Enabling Unbound service" systemctl enable unbound run_cmd "Starting Unbound service" systemctl restart unbound