Package: dnsmasq Version: 2.76-5 Followup-For: Bug #858506 I agree, there is something in that dns-root-data that mucks it up
+ ROOT_DS=/usr/share/dns/root.ds + [ -f /usr/share/dns/root.ds ] + sed -e s/. IN DS /--trust-anchor=.,/ -e s/ /,/g /usr/share/dns/root.ds + tr \n + DNSMASQ_OPTS= --local-service . 172800 IN DS 19036,8,2,49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 .172800 IN DS 20326,8,2,e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d + [ ! -d /run/dnsmasq ] + exec /usr/sbin/dnsmasq -x /run/dnsmasq/dnsmasq.pid -u dnsmasq -7 /etc/dnsmasq.d,.dpkg-dist,.dpkg-old,.dpkg-new --local-service . 172800 IN DS 19036,8,2,49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 . 172800 IN DS 20326,8,2,e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d dnsmasq: junk found in command line The problem is the format of that root.ds has changed. My work-around was to change line 115 of /etc/init.d/dnsmasq DNSMASQ_OPTS="$DNSMASQ_OPTS `sed -e s/".\t[0-9]*\tIN\tDS\t"/--trust-anchor=.,/ -e s/" "/,/g $ROOT_DS | tr '\n' ' '`" Someone with much better regex-fu than me may be able to conjure a regex that covers both old and new formats. -- System Information: Debian Release: 9.0 APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.9.0-2-amd64 (SMP w/6 CPU cores) Locale: LANG=en_AU.utf8, LC_CTYPE=en_AU.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages dnsmasq depends on: ii dnsmasq-base 2.76-5+b1 ii init-system-helpers 1.47 ii netbase 5.4 dnsmasq recommends no packages. Versions of packages dnsmasq suggests: pn resolvconf <none> -- Configuration Files: /etc/dnsmasq.conf changed [not included] -- no debconf information
