file root.hints needs update

Status changed to 'Confirmed' because the bug affects multiple users.

Or https://www.internic.net/domain/named.root if you prefer HTTPS.

/var/log/syslog output after restart of named

Dec 12 16:39:40 ns named[341840]: checkhints: b.root-servers.net/A (170.247.170.2) missing from hints
Dec 12 16:39:40 ns named[341840]: checkhints: b.root-servers.net/A (199.9.14.201) extra record in hints
Dec 12 16:39:40 ns named[341840]: checkhints: b.root-servers.net/AAAA (2801:1b8:10::b) missing from hints
Dec 12 16:39:40 ns named[341840]: checkhints: b.root-servers.net/AAAA (2001:500:200::b) extra record in hints

Thank you for taking the time to report the bug.

I'm marking it as Triaged and will add it to the server-todo list. It will be addressed as soon as possible.

I tested the verification, working fine - thanks @Andreas Ott for the hint btw.

I converted the discussion and links so far into an SRU template so we can later serve that change to all active releases.

I diffed this against content back to bionic (didn't exist before artful), there are no other changes (other than date bumps) to consider or even conflict with this when we go for SRUs.

I tested manual updates of the files on bind9 servers, they were happy and the warnings gone.

So really, this seems to be a small yet to some important change (marked it bitesize).
Hence I prepared an MR for Noble:
=> https://code.launchpad.net/~paelzer/ubuntu/+source/dns-root-data/+git/dns-root-data/+merge/459421

It has a slightly debatable but hopefully helpful versioning proposed.
Once that is completed we can open the same change for all the SRUs.

So far the fix in noble LGTM, after yet another detour picking a version that works for potential future delta, for a Debian upload of the same as well as working with SRUing the same change back to former releases it is now building.
=> https://launchpad.net/ubuntu/+source/dns-root-data/2023112702~willsync1

We will see in a few hours if all is smooth and it migrates.

Until then I prepared the same fix for all series containing this package.

For later SRU (once noble is complete)
- M: https://code.launchpad.net/~paelzer/ubuntu/+source/dns-root-data/+git/dns-root-data/+merge/459564
- J: https://code.launchpad.net/~paelzer/ubuntu/+source/dns-root-data/+git/dns-root-data/+merge/459563
- F: https://code.launchpad.net/~paelzer/ubuntu/+source/dns-root-data/+git/dns-root-data/+merge/459562

For later ESM consideration (once SRUs are accepted, I'd add those as debdiffs and nudge security to have a look)
- B: https://code.launchpad.net/~paelzer/ubuntu/+source/dns-root-data/+git/dns-root-data/+merge/459561
- X: https://code.launchpad.net/~paelzer/ubuntu/+source/dns-root-data/+git/dns-root-data/+merge/459560

This bug was fixed in the package dns-root-data - 2023112702~willsync1

---------------
dns-root-data (2023112702~willsync1) noble; urgency=medium

  * We need to pick a version that will auto-sync, but stay
    ahead of backport versions like 2023112702~ubuntu0.20.04.1
    that will be used for SRUs in this case. Therefore
    switching to ~willsync which is by the ~ before a potential
    ubuntu1 to -dev but after ~ubuntu0 SRUs.

dns-root-data (2023112702~maysync1) noble; urgency=medium

  [ Imre Jonk ]
  * update root hints to 2023112702
    (LP: #2045297 Closes: #1054393)

 -- Christian Ehrhardt <email address hidden> Mon, 29 Jan 2024 08:17:35 +0100

It migrated well in noble, waiting for the MR reviews of the SRU now

MRs approved, migrated in Noble, SRU template ready
Since it is an uncommon build (native) I double checked if the debdiff has just what is expected, but that LGTM as well.

=> uploading for SRUs to F,J,M for review by the SRU team

Hello Andreas, or anyone else affected,

Accepted dns-root-data into mantic-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/dns-root-data/2023112702~ubuntu0.23.10.1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed-mantic to verification-done-mantic. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-mantic. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

Hello Andreas, or anyone else affected,

Accepted dns-root-data into jammy-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/dns-root-data/2023112702~ubuntu0.22.04.1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed-jammy to verification-done-jammy. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-jammy. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

Hello Andreas, or anyone else affected,

Accepted dns-root-data into focal-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/dns-root-data/2023112702~ubuntu0.20.04.1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed-focal to verification-done-focal. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-focal. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

I installed the package dns-root-data/mantic-proposed and the fix looks OK. Thank you.

We can see the issue before, and the fix after upgrade as well as the upgrade itself.
=> Setting as verified

root@f:~# apt-cache policy dns-root-data bind9; systemctl restart named; sleep 5s; systemctl status named; apt install -y dns-root-data/$(lsb_release -cs)-proposed; apt-cache policy dns-root-data bind9; systemctl restart named; sleep 5s; systemctl status named;
dns-root-data:
  Installed: 2019052802
  Candidate: 2023112702~ubuntu0.20.04.1
  Version table:
     2023112702~ubuntu0.20.04.1 500
        500 http://archive.ubuntu.com/ubuntu focal-proposed/main amd64 Packages
 *** 2019052802 500
        500 http://archive.ubuntu.com/ubuntu focal/main amd64 Packages
        100 /var/lib/dpkg/status
bind9:
  Installed: 1:9.16.1-0ubuntu2.16
  Candidate: 1:9.16.1-0ubuntu2.16
  Version table:
 *** 1:9.16.1-0ubuntu2.16 500
        500 http://archive.ubuntu.com/ubuntu focal-updates/main amd64 Packages
        500 http://security.ubuntu.com/ubuntu focal-security/main amd64 Packages
        100 /var/lib/dpkg/status
     1:9.16.1-0ubuntu2 500
        500 http://archive.ubuntu.com/ubuntu focal/main amd64 Packages
● named.service - BIND Domain Name Server
     Loaded: loaded (/lib/systemd/system/named.service; enabled; vendor preset: enabled)
     Active: active (running) since Mon 2024-02-05 10:17:33 UTC; 5s ago
       Docs: man:named(8)
   Main PID: 1615 (named)
      Tasks: 14 (limit: 38246)
     Memory: 29.5M
        CPU: 59ms
     CGroup: /system.slice/named.service
             └─1615 /usr/sbin/named -f -u bind

Feb 05 10:17:33 f named[1615]: zone 255.in-addr.arpa/IN: loaded serial 1
Feb 05 10:17:33 f named[1615]: zone 127.in-addr.arpa/IN: loaded serial 1
Feb 05 10:17:33 f named[1615]: all zones loaded
Feb 05 10:17:33 f named[1615]: running
Feb 05 10:17:33 f named[1615]: managed-keys-zone: Key 20326 for zone . is now trusted (acceptance timer complete)
Feb 05 10:17:33 f named[1615]: resolver priming query complete
Feb 05 10:17:33 f named[1615]: checkhints: b.root-servers.net/A (170.247.170.2) missing from hints
Feb 05 10:17:33 f named[1615]: checkhints: b.root-servers.net/A (199.9.14.201) extra record in hints
Feb 05 10:17:33 f named[1615]: checkhints: b.root-servers.net/AAAA (2801:1b8:10::b) missing from hints
Feb 05 10:17:33 f named[1615]: checkhints: b.root-servers.net/AAAA (2001:500:200::b) extra record in hints
Reading package lists... Done
Building dependency tree
Reading state information... Done
Selected version '2023112702~ubuntu0.20.04.1' (Ubuntu:20.04/focal-proposed [all]) for 'dns-root-data'
The following packages will be upgraded:
  dns-root-data
1 upgraded, 0 newly installed, 0 to remove and 9 not upgraded.
Need to get 5308 B of archives.
After this operation, 0 B of additional disk space will be used.
Get:1 http://archive.ubuntu.com/ubuntu focal-proposed/main amd64 dns-root-data all 2023112702~ubuntu0.20.04.1 [5308 B]
Fetched 5308 B in 0s (23.6 kB/s)
debconf: delaying package configuration, since apt-utils is not installed
(Reading database ... 19204 files and directories currently installed.)
Preparing to unpack .../dns-root-data_2023112702~ubuntu0.20.04.1_all.deb ...
Unpacking dns-root-data (2023112702~ubuntu0.20.04...

We can see the issue before, and the fix after upgrade as well as the upgrade itself.
=> Setting as verified

root@j:~# apt-cache policy dns-root-data bind9; systemctl restart named; sleep 5s; systemctl status named; apt install -y dns-root-data/$(lsb_release -cs)-proposed; apt-cache policy dns-root-data bind9; systemctl restart named; sleep 5s; systemctl status named;
dns-root-data:
  Installed: 2021011101
  Candidate: 2023112702~ubuntu0.22.04.1
  Version table:
     2023112702~ubuntu0.22.04.1 500
        500 http://archive.ubuntu.com/ubuntu jammy-proposed/main amd64 Packages
 *** 2021011101 500
        500 http://archive.ubuntu.com/ubuntu jammy/main amd64 Packages
        100 /var/lib/dpkg/status
bind9:
  Installed: 1:9.18.18-0ubuntu0.22.04.1
  Candidate: 1:9.18.18-0ubuntu0.22.04.1
  Version table:
 *** 1:9.18.18-0ubuntu0.22.04.1 500
        500 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 Packages
        100 /var/lib/dpkg/status
     1:9.18.12-0ubuntu0.22.04.3 500
        500 http://security.ubuntu.com/ubuntu jammy-security/main amd64 Packages
     1:9.18.1-1ubuntu1 500
        500 http://archive.ubuntu.com/ubuntu jammy/main amd64 Packages
● named.service - BIND Domain Name Server
     Loaded: loaded (/lib/systemd/system/named.service; enabled; vendor preset: enabled)
     Active: active (running) since Mon 2024-02-05 10:17:35 UTC; 5s ago
       Docs: man:named(8)
    Process: 3103 ExecStart=/usr/sbin/named $OPTIONS (code=exited, status=0/SUCCESS)
   Main PID: 3104 (named)
      Tasks: 6 (limit: 38246)
     Memory: 6.4M
        CPU: 52ms
     CGroup: /system.slice/named.service
             └─3104 /usr/sbin/named -u bind

Feb 05 10:17:35 j named[3104]: zone 255.in-addr.arpa/IN: loaded serial 1
Feb 05 10:17:35 j named[3104]: all zones loaded
Feb 05 10:17:35 j named[3104]: running
Feb 05 10:17:35 j systemd[1]: Started BIND Domain Name Server.
Feb 05 10:17:35 j named[3104]: managed-keys-zone: Key 20326 for zone . is now trusted (acceptance timer complete)
Feb 05 10:17:35 j named[3104]: resolver priming query complete: success
Feb 05 10:17:35 j named[3104]: checkhints: b.root-servers.net/A (170.247.170.2) missing from hints
Feb 05 10:17:35 j named[3104]: checkhints: b.root-servers.net/A (199.9.14.201) extra record in hints
Feb 05 10:17:35 j named[3104]: checkhints: b.root-servers.net/AAAA (2801:1b8:10::b) missing from hints
Feb 05 10:17:35 j named[3104]: checkhints: b.root-servers.net/AAAA (2001:500:200::b) extra record in hints
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Selected version '2023112702~ubuntu0.22.04.1' (Ubuntu:22.04/jammy-proposed [all]) for 'dns-root-data'
The following packages will be upgraded:
  dns-root-data
1 upgraded, 0 newly installed, 0 to remove and 32 not upgraded.
Need to get 5136 B of archives.
After this operation, 0 B of additional disk space will be used.
Get:1 http://archive.ubuntu.com/ubuntu jammy-proposed/main amd64 dns-root-data all 2023112702~ubuntu0.22.04.1 [5136 B]
Fetched 5136 B in 0s (90.1 kB/s)
debconf: delaying package configuration, since apt-utils is not installed
(Reading database ... 38663 files and directories currently installed...

We can see the issue before, and the fix after upgrade as well as the upgrade itself.
=> Setting as verified

root@m:~# apt-cache policy dns-root-data bind9; systemctl restart named; sleep 5s; systemctl status named; apt install -y dns-root-data/$(lsb_release -cs)-proposed; apt-cache policy dns-root-data bind9; systemctl restart named; sleep 5s; systemctl status named;
dns-root-data:
  Installed: 2023010101
  Candidate: 2023010101
  Version table:
     2023112702~ubuntu0.23.10.1 100
        100 http://archive.ubuntu.com/ubuntu mantic-proposed/main amd64 Packages
 *** 2023010101 500
        500 http://archive.ubuntu.com/ubuntu mantic/main amd64 Packages
        100 /var/lib/dpkg/status
bind9:
  Installed: 1:9.18.18-0ubuntu2
  Candidate: 1:9.18.18-0ubuntu2
  Version table:
 *** 1:9.18.18-0ubuntu2 500
        500 http://archive.ubuntu.com/ubuntu mantic/main amd64 Packages
        100 /var/lib/dpkg/status
● named.service - BIND Domain Name Server
     Loaded: loaded (/lib/systemd/system/named.service; enabled; preset: enabled)
     Active: active (running) since Mon 2024-02-05 10:17:39 UTC; 5s ago
       Docs: man:named(8)
   Main PID: 3360 (named)
     Status: "running"
      Tasks: 6 (limit: 38246)
     Memory: 5.9M
        CPU: 37ms
     CGroup: /system.slice/named.service
             └─3360 /usr/sbin/named -f -u bind

Feb 05 10:17:39 m named[3360]: zone 255.in-addr.arpa/IN: loaded serial 1
Feb 05 10:17:39 m named[3360]: all zones loaded
Feb 05 10:17:39 m named[3360]: running
Feb 05 10:17:39 m systemd[1]: Started named.service - BIND Domain Name Server.
Feb 05 10:17:39 m named[3360]: managed-keys-zone: Key 20326 for zone . is now trusted (acceptance timer complete)
Feb 05 10:17:39 m named[3360]: resolver priming query complete: success
Feb 05 10:17:39 m named[3360]: checkhints: b.root-servers.net/A (170.247.170.2) missing from hints
Feb 05 10:17:39 m named[3360]: checkhints: b.root-servers.net/A (199.9.14.201) extra record in hints
Feb 05 10:17:39 m named[3360]: checkhints: b.root-servers.net/AAAA (2801:1b8:10::b) missing from hints
Feb 05 10:17:39 m named[3360]: checkhints: b.root-servers.net/AAAA (2001:500:200::b) extra record in hints
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Selected version '2023112702~ubuntu0.23.10.1' (Ubuntu:23.10/mantic-proposed [all]) for 'dns-root-data'
The following packages will be upgraded:
  dns-root-data
1 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 0 B/4248 B of archives.
After this operation, 0 B of additional disk space will be used.
debconf: delaying package configuration, since apt-utils is not installed
(Reading database ... 42541 files and directories currently installed.)
Preparing to unpack .../dns-root-data_2023112702~ubuntu0.23.10.1_all.deb ...
Unpacking dns-root-data (2023112702~ubuntu0.23.10.1) over (2023010101) ...
Setting up dns-root-data (2023112702~ubuntu0.23.10.1) ...
dns-root-data:
  Installed: 2023112702~ubuntu0.23.10.1
  Candidate: 2023112702~ubuntu0.23.10.1
  Version table:
 *** 2023112702~ubuntu0.23.10.1 100
        100 http://archive.ubuntu.com/ubuntu mantic-proposed/main amd64 Packages
        100 /var/l...

This bug was fixed in the package dns-root-data - 2023112702~ubuntu0.23.10.1

---------------
dns-root-data (2023112702~ubuntu0.23.10.1) mantic; urgency=medium

  [ Imre Jonk ]
  * update root hints to 2023112702
    (LP: #2045297 Closes: #1054393)

 -- Christian Ehrhardt <email address hidden> Mon, 29 Jan 2024 08:10:05 +0100

The verification of the Stable Release Update for dns-root-data has completed successfully and the package is now being released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regressions.

This bug was fixed in the package dns-root-data - 2023112702~ubuntu0.22.04.1

---------------
dns-root-data (2023112702~ubuntu0.22.04.1) jammy; urgency=medium

  [ Imre Jonk ]
  * update root hints to 2023112702
    (LP: #2045297 Closes: #1054393)

 -- Christian Ehrhardt <email address hidden> Mon, 29 Jan 2024 08:10:05 +0100

This bug was fixed in the package dns-root-data - 2023112702~ubuntu0.20.04.1

---------------
dns-root-data (2023112702~ubuntu0.20.04.1) focal; urgency=medium

  [ Imre Jonk ]
  * update root hints to 2023112702
    (LP: #2045297 Closes: #1054393)

 -- Christian Ehrhardt <email address hidden> Mon, 29 Jan 2024 08:10:05 +0100