hi wouter, > You are correct. The problem is the check-conf is failing, unbound > itself is happy with both definitions "root.ca" or "/etc/unbound/root.ca". yes, unbound is happy. on two small servers now, more when i have time. i am trying to get our big nameserver guy to play. > chroot is enabled by default. you can turn it off with > chroot: "" > in the config file. > > I think my fix will be that: > in the config file you specify files are /my_chroot/bla or as "bla", > with the first being relative to the chroot obviously and the last > relative to the working directory. uh, most places foo/bar would be relative to chroot /foo/bar would be absolute randy