Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[unbound-checkconf] fatal error: module conf 'dns64 subnetcache respip validator iterator' is not known to work #192

Closed
ghost opened this issue Mar 14, 2020 · 3 comments
Assignees

Comments

@ghost
Copy link

ghost commented Mar 14, 2020

Version 1.10.0

Configure line: --target=arm-openwrt-linux --host=arm-openwrt-linux --build=x86_64-pc-linux-gnu --program-prefix= --program-suffix= --prefix=/usr --exec-prefix=/usr --bindir=/usr/bin --sbindir=/usr/sbin --libexecdir=/usr/lib --sysconfdir=/etc --datadir=/usr/share --localstatedir=/var --mandir=/usr/man --infodir=/usr/info --disable-dsa --disable-gost --enable-allsymbols --enable-subnet --with-libexpat=/home/beast/beast/workspace/turris-os-packages-dragons-omnia/build/staging_dir/target-arm_cortex-a9+vfpv3_musl_eabi/usr --with-ssl=/home/beast/beast/workspace/turris-os-packages-dragons-omnia/build/staging_dir/target-arm_cortex-a9+vfpv3_musl_eabi/usr --without-pthreads --enable-tfo-server --enable-tfo-client
Linked libs: pluggable-event internal (it uses select), OpenSSL 1.1.1d 10 Sep 2019
Linked modules: dns64 subnetcache respip validator iterator
TCP Fastopen feature available


module-config: 'respip validator iterator' -> no error printed

module-config: 'dns64 subnetcache validator iterator' -> no error printed

module-config: 'dns64 subnetcache respip validator iterator' -> prints

unbound-checkconf[29761:0] fatal error: module conf 'dns64 subnetcache respip validator iterator' is not known to work

module-config: 'subnetcache respip validator iterator' -> prints

unbound-checkconf[30313:0] fatal error: module conf 'subnetcache respip validator iterator' is not known to work

module-config: 'dns64 respip validator iterator' -> prints

unbound-checkconf[31009:0] fatal error: module conf 'dns64 respip validator iterator' is not known to work

Despite the error the instance starts.

@wcawijngaards wcawijngaards self-assigned this Mar 16, 2020
@wcawijngaards
Copy link
Member

wcawijngaards commented Mar 16, 2020

Hi N8v8r,
Yes it starts, and checkconf warns that we do not know if it works. If you can verify that it in fact works, I mean also the parts where those modules perform special work for you and regular lookups work too, then I can mark then as working in checkconf. In checkconf we currently have a list of working module combinations. We simply have not checked all of them. But if you can tell us that a module combination - the one you want to use - works, then I can change the source to indicate that the module combination is a working one.

The message gives the warning, unbound starts. Apart from starting, does everything work?

Best regards, Wouter

@ghost
Copy link
Author

ghost commented Mar 16, 2020

currently having in place module-config: 'dns64 subnetcache respip validator iterator' I do not see any inclement impact.

Not sure if it is any indication (since it appears to to test the upstream resolver instances configured in unbound but not clear whether the test uses its own resolver or the local unbound instance) but the score on https://cmdns.dev.dns-oarc.net exhibits
Annotation 2020-03-16 091817

@ghost ghost closed this as completed Mar 16, 2020
wcawijngaards added a commit that referenced this issue Mar 16, 2020
  dns64 subnetcache respip validator iterator is whitelisted, it was
  reported it seems to work.
@wcawijngaards
Copy link
Member

wcawijngaards commented Mar 16, 2020

Ok thanks, I have listed the config as working, because thing seem to work for you. Yes, I think the score is (mostly) the upstream server you are looking at.

jedisct1 added a commit to jedisct1/unbound that referenced this issue Mar 20, 2020
* nlnet/master: (149 commits)
  - Fix .travis.yml error, missing 'env' option.
  - Merge PR#194: Add libevent testing to Travis, by Jeffrey Walton.
  Add changelog entries for PR#134.
  - Log warning when using outgoing-port-permit and outgoing-port-avoid   while explicit port randomisation is disabled.
  - Fix NLnetLabs#158: open tls-session-ticket-keys as binary, for Windows. By Daisuke   HIGASHI.
  - Merge PR#191: Update iOS testing on Travis, by Jeffrey Walton.
  Add libevent testing to Travis
  Sync with upstream
  - Fix NLnetLabs#192: In the unbound-checkconf tool, the module config of   dns64 subnetcache respip validator iterator is whitelisted, it was   reported it seems to work.
  - Fix compile of test tools without protobuf.
  - Add check to make sure RPZ records are subdomain of configured zone origin.
  - Changelog entry for (Fix NLnetLabs#189, Merge PR NLnetLabs#190).
  Changelog for NLnetLabs#188 and configure script created.  Removed unneeded whitespace.
  Fix NLnetLabs#188: unbound-control.c:882:6: error: 'execlp' is unavailable: not available on tvOS
  Fix NetBSD compile (GH NLnetLabs#189)
  - Changelog note for PR NLnetLabs#186: Fix unrecognized 'echo -n' option on OS X,   by noloader.
  Fix unrecognized 'echo -n' option on OS X Also see NLnetLabs#183. This PR also updates a few typos in README-Travis.md, and expands the discussion of PKG_CONFIG_PATH for those who are not familiar with it.
  Fix changelog note, it is NLnetLabs#182, not NLnetLabs#184.
  Changelog note for NLnetLabs#184. - Fix PR NLnetLabs#184 from noloader: Add iOS testing to Travis.
  Add iOS testing to Travis
  ...
This issue was closed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant