/etc/bind/db.root is out of date on Trusty

[PerToft]

I noticed errors in the logs and discovered that the /etc/bind/db.root are not being updated.

05-Jan-2016 11:21:58.048 general: warning: checkhints: h.root-servers.net/A (198.97.190.53) missing from hints
05-Jan-2016 11:21:58.048 general: warning: checkhints: h.root-servers.net/A (128.63.2.53) extra record in hints
05-Jan-2016 11:21:58.048 general: warning: checkhints: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
05-Jan-2016 11:21:58.048 general: warning: checkhints: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints

pto@dns2-s3538:~$ dpkg -l bind9
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name Version Architecture Description
+++-=============================================-===========================-===========================-================================================================================================
ii bind9 1:9.9.5.dfsg-3ubuntu0.6 amd64 Internet Domain Name Server
pto@dns2-s3538:~$

pto@dns2-s3538:~$ uname -a
Linux dns2-s3538 3.13.0-24-generic #47-Ubuntu SMP Fri May 2 23:30:00 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux
pto@dns2-s3538:~$

pto@dns2-s3538:~$ lsb_release -rd
Description: Ubuntu 14.04.3 LTS
Release: 14.04
pto@dns2-s3538:~$

pto@dns2-s3538:~$ apt-cache policy bind9
bind9:
  Installed: 1:9.9.5.dfsg-3ubuntu0.6
  Candidate: 1:9.9.5.dfsg-3ubuntu0.6
  Version table:
 *** 1:9.9.5.dfsg-3ubuntu0.6 0
        500 http://194.19.194.51/ubuntu/ trusty-updates/main amd64 Packages
        500 http://91.189.92.200/ubuntu/ trusty-security/main amd64 Packages
        100 /var/lib/dpkg/status
     1:9.9.5.dfsg-3 0
        500 http://194.19.194.51/ubuntu/ trusty/main amd64 Packages
pto@dns2-s3538:~$

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Robie Basak (racb)]

Thank you for taking the time to report this bug and helping to make Ubuntu better.

These are log warnings, not errors. bind's operation is not affected if the hints file is not completely up to date, since it picks up the latest root server list from other root servers.

[Pieter (diepes)]

I updated db.root with

# dig +bufsize=1200 +norec NS . @a.root-servers.net > /etc/bind/db.root
# rndc reload

now the log messages are gone.
general: warning: checkhints: view xxx: h.root-servers.net/AAAA (2001:500:1::53) missing from hints
general: warning: checkhints: view xxx: h.root-servers.net/AAAA (2001:500:1::803f:235) extra record in hints

[Rafael Jesus Alcantara Perez (rafa-dedaloingenieros)]

You can use also this:

# curl ftp://ftp.internic.net/domain/named.cache > /etc/bind/db.root

[Simon Déziel (sdeziel)]

Marking as fix released because 14.04 is now out of regular support and newer releases of bind9 depend on the package dns-data-root that ships an updated root hints (/usr/share/dns/root.hints).