{"action":"created","issue":{"url":"https://api.github.com/repos/xaque208/puppet-unbound/issues/67","labels_url":"https://api.github.com/repos/xaque208/puppet-unbound/issues/67/labels{/name}","comments_url":"https://api.github.com/repos/xaque208/puppet-unbound/issues/67/comments","events_url":"https://api.github.com/repos/xaque208/puppet-unbound/issues/67/events","html_url":"https://github.com/xaque208/puppet-unbound/pull/67","id":50536345,"number":67,"title":"Updates to trust anchoring","user":{"login":"b4ldr","id":1110206,"avatar_url":"https://avatars.githubusercontent.com/u/1110206?v=3","gravatar_id":"","url":"https://api.github.com/users/b4ldr","html_url":"https://github.com/b4ldr","followers_url":"https://api.github.com/users/b4ldr/followers","following_url":"https://api.github.com/users/b4ldr/following{/other_user}","gists_url":"https://api.github.com/users/b4ldr/gists{/gist_id}","starred_url":"https://api.github.com/users/b4ldr/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/b4ldr/subscriptions","organizations_url":"https://api.github.com/users/b4ldr/orgs","repos_url":"https://api.github.com/users/b4ldr/repos","events_url":"https://api.github.com/users/b4ldr/events{/privacy}","received_events_url":"https://api.github.com/users/b4ldr/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":7,"created_at":"2014-12-01T15:30:58Z","updated_at":"2015-02-02T16:23:50Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/xaque208/puppet-unbound/pulls/67","html_url":"https://github.com/xaque208/puppet-unbound/pull/67","diff_url":"https://github.com/xaque208/puppet-unbound/pull/67.diff","patch_url":"https://github.com/xaque208/puppet-unbound/pull/67.patch"},"body":"The unbound process needs write access to the directory where the trust anchor file exists as it writes the new file in the same dir and then preforms a move operation to ensure the update is atomic.  If the process does not have write permission you will see an error like the following\r\n\r\nDec  1 10:38:39 host unbound: [11768:0] error: could not open autotrust file for writing, /etc/unbound/root.anchor.11768-0: Permission denied\r\n\r\nThis merge does the following \r\n   * adds a new directory which is writable and stores the anchor file.  I considered changing the permissions of confdir however it felt as if it was downgrading the security of other files.\r\n   * moves the anchor file to this new directory\r\n   * initiate this file using unbound-anchor instead of a hardcoded DS record."},"comment":{"url":"https://api.github.com/repos/xaque208/puppet-unbound/issues/comments/72486119","html_url":"https://github.com/xaque208/puppet-unbound/pull/67#issuecomment-72486119","issue_url":"https://api.github.com/repos/xaque208/puppet-unbound/issues/67","id":72486119,"user":{"login":"xaque208","id":334176,"avatar_url":"https://avatars.githubusercontent.com/u/334176?v=3","gravatar_id":"","url":"https://api.github.com/users/xaque208","html_url":"https://github.com/xaque208","followers_url":"https://api.github.com/users/xaque208/followers","following_url":"https://api.github.com/users/xaque208/following{/other_user}","gists_url":"https://api.github.com/users/xaque208/gists{/gist_id}","starred_url":"https://api.github.com/users/xaque208/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/xaque208/subscriptions","organizations_url":"https://api.github.com/users/xaque208/orgs","repos_url":"https://api.github.com/users/xaque208/repos","events_url":"https://api.github.com/users/xaque208/events{/privacy}","received_events_url":"https://api.github.com/users/xaque208/received_events","type":"User","site_admin":false},"created_at":"2015-02-02T16:23:50Z","updated_at":"2015-02-02T16:23:50Z","body":"I'd rather stick to whatever unbound defaults to and let the admin do what is needed elsewhere.  Its been long enough of using this module, I don't actually know what the default is.  I just don't want to impose too many world views on this module if we can avoid it. "}}