4 Bře
2025
4 Bře
'25
8:18
Hello.
On 04/03/2025 08.00, Mike Wright wrote:
I've found this warning in my journal:
... kresd[1071788]: [taupd ] you need to update package with trust
anchors in "/usr/share/dns/root.key" before it breaks
I don't know how to do that.
I think my system is current but just ran: apt update; apt list
--upgradable and it shows nothing regarding knot.
First of all, ICANN is super-careful, so there's no need to panic
(yet). I read that they don't plan to sign with the new key before
October 2026:
https://lists.icann.org/hyperkitty/list/root-dnssec-announce@icann.org/mess…
As I see you mentioning `apt`, I think this update is exactly what is needed
https://tracker.debian.org/news/1603458/accepted-dns-root-data-2024071801de…
and incarnations of that in various versions of Debian, Ubuntu and other
derivatives. I really hope that a well-maintained distro couldn't miss
to update this.
--Vladimir