Mikolaj Kucharski([email protected]) on 2022.09.02 06:47:00 +0000:
> Hi,
>
> I have a question, could or should unbound in base be delivered with:
>
> # cat /etc/login.conf.d/unbound
> unbound:\
> :openfiles-cur=4096:\
> :openfiles-max=8192:\
> :tc=daemon:
>
> or the like? Above is taken from dovecot. I was able to trigger via
> rcctl reload unbound following warnings in logs:
>
> Sep 2 06:37:21 x1c unbound: [32940:0] notice: Restart of unbound 1.16.0.
> Sep 2 06:37:21 x1c unbound: [32940:0] warning: setrlimit: Operation not
> permitted
> Sep 2 06:37:21 x1c unbound: [32940:0] warning: cannot increase max open fds
> from 512 to 4152
> Sep 2 06:37:21 x1c unbound: [32940:0] warning: continuing with less udp
> ports: 460
> Sep 2 06:37:21 x1c unbound: [32940:0] warning: increase ulimit or decrease
> threads, ports in config to remove this warning
> Sep 2 06:37:21 x1c unbound: [32940:0] notice: init module 0: validator
> Sep 2 06:37:21 x1c unbound: [32940:0] notice: init module 1: iterator
>
> After placing above login.conf.d login class capability file above
> warnings go away:
>
> Sep 2 06:39:58 x1c unbound: [14264:0] notice: Restart of unbound 1.16.0.
> Sep 2 06:39:58 x1c unbound: [14264:0] notice: init module 0: validator
> Sep 2 06:39:58 x1c unbound: [14264:0] notice: init module 1: iterator
As far as i understand, the number of fds that unbound is asking for is
based on the num-threads, outgoing-num-tcp, interface and some other setting
in the unbound config.
Did you change any?
We already ship with this
unbound:\
:openfiles=512:\
:tc=daemon:
It is expected that you change login.conf yourself when you tune unbound to
your needs.
