Revert unbound to 18.7.7 - not possible?

[chemlud]

Nearly, as the locked unbound 1.8.1 from 19.1.1 will give you on reboot after update to 19.1.4

Code Select Expand

opnsense: /usr/local/etc/rc.newwanip: The command '/usr/local/sbin/unbound -c '/var/unbound/unbound.conf'' returned exit code '1', the output was 'Shared object "libssl.so.45" not found, required by "unbound"'

...

switch to DNSmasq (don't forget to enter DNS servers in Settings - General, might cost you some time to recognize why your DNS is dead), update unbound from 1.8.1 to 1.8.1 (verson provided by Franco's link above) and back in business...

[franco]

LibreSSL was updated in 19.1.2 and so the shared library version mismatches. I'm sorry, but that's exactly what I mean by "frustrating, kinda like every other day".


Cheers,
Franco

[chemlud]

Not a big issue, that's why I did the update on Saturday to have some extra time for surprises... ;)

[chemlud]

Update on 19.1.5 with unbound 1.9.1: Same problem, trying to revert to unbound 1.8.1

...the unbound 1.8.1 linked above is no longer available..

[franco]

# opnsense-code -f ports tools
# cd /usr/ports/dns/unbound
# git checkout 18.7.6 .
# pkg install -yA gmake libtool automake pkgconf
# make package deinstall install

I can provide a binary if needed, but I'm pretty sure this will work now...

[chemlud]

Thank you very much, franco, I'm at

Code Select Expand

# make package deinstall install
===>   unbound-1.8.1 depends on package: autoconf>=2.69 - found
===>   unbound-1.8.1 depends on package: automake>=1.16.1 - found
===>   unbound-1.8.1 depends on executable: libtoolize - found
===>   unbound-1.8.1 depends on package: pkgconf>=1.3.0_1 - found
===>   unbound-1.8.1 depends on file: /usr/local/lib/libcrypto.so.43 - not found
===>  Installing for libressl-2.7.4
===>  Checking if libressl already installed
===>   libressl-2.7.4 is already installed
      You may wish to ``make deinstall'' and install this port again
      by ``make reinstall'' to upgrade it properly.
      If you really wish to overwrite the old port of libressl
      without deleting it first, set the variable "FORCE_PKG_REGISTER"
      in your environment or the "make install" command line.
*** Error code 1

Stop.
make[1]: stopped in /usr/ports/security/libressl
*** Error code 1

Stop.
make: stopped in /usr/ports/dns/unbound


Sorry for that... No hurry, it's only an experimental system at that time.

[franco]

No, did you type "git checkout 18.7.6 ." with the DOT at the end. Important...


Cheers,
Franco

[franco]

(You have an older tree checked out and that clashes with everything else installed.)

[chemlud]

Yepp, I copy&pasted your commands ;-)

Tried again, gives "Updated 0 from path e704d..."

and in the end same error. I'm not a coder, sorry

[franco]

# rm -r /usr/ports

This needs to work... Maybe the tree is stuck although opnsense-code -f should do that as well..

[chemlud]

That one did the trick! Pörfect! :-D

[franco]

Whew, ok...  8)

[chemlud]

Someone finally notified Unbound after a bit of prodding ;)

https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=4232

Hi franco, is Menco even active on this forum? I found that under "Advanced" in the GUI (last option on page) the logging level of  Unbound can be increased. Did anybody try to get such a log and if not, would it be helpful to the Unbound people for debugging?

[franco]

It certainly would. The way it is now we have a lot of people using advanced options reporting errors here but not to Unbound which doesn't bring us closer to a solution.

I'm happy to provide custom builds of Unbound for patches that they want to try or extra debugging info added...


Cheers,
Franco

[chemlud]

... will break my test system by updating to 19.1.6 (unbound unlocked) and post the output here. Or any other method preferred? The log might be quite large in the most verbose mode, I guess....

Who would report the log to unbpund (I have no git account or alike...)?