# Unbound log show failure "DietPi package-helper\[526\]: fail: the anchor is NOT ok and could not be fixed"
**URL:** https://dietpi.com/forum/t/unbound-log-show-failure-dietpi-package-helper-526-fail-the-anchor-is-not-ok-and-could-not-be-fixed/4859
**Category:** General Discussion
**Created:** [17 January 2021 21:45 UTC](https://dietpi.com/forum/t/unbound-log-show-failure-dietpi-package-helper-526-fail-the-anchor-is-not-ok-and-could-not-be-fixed/4859 "2021-01-17T21:45:22Z")
**Posts on this page:** 11
**Page:** 1
### Author:  [@mail2rst](https://dietpi.com/forum/u/mail2rst)
#### Post date: [17 January 2021 21:45 UTC](https://dietpi.com/forum/t/unbound-log-show-failure-dietpi-package-helper-526-fail-the-anchor-is-not-ok-and-could-not-be-fixed/4859/1 "2021-01-17T21:45:22Z")
I have default dietpi installation for pihole & unbound. when i check unbound log with “journalctl -u unbound” it show me the failure of “DietPi package-helper[526]: fail: the anchor is NOT ok and could not be fixed” any body having any idea about this error & what is the solution for this & what is the bad effect of this.
`root@DietPi:~# journalctl -u unbound -- Logs begin at Wed 2021-01-13 11:56:30 MST, end at Sun 2021-01-17 14:31:45 MST. -- Jan 13 11:56:31 DietPi systemd[1]: Starting Unbound DNS server... Jan 13 11:56:31 DietPi package-helper[526]: /var/lib/unbound/root.key has content Jan 13 11:56:31 DietPi package-helper[526]: fail: the anchor is NOT ok and could not be fixed Jan 13 11:56:31 DietPi unbound[547]: [1610564191] unbound[547:0] info: start of service (unbound 1.9.0). Jan 13 11:56:31 DietPi systemd[1]: Started Unbound DNS server`
also i have plex installed on same device. i want to add {private-domain: “plex.direct” } in “/etc/unbound/unbound.conf.d/pi-hole.conf” is it allowed in dietpi default installation to edit this file or not? as in past in Ubantu installation i have added this line in unbound configuration. is this thing required in dietpi installation or Not?
---
### Author:  [@Joulinar](https://dietpi.com/forum/u/Joulinar)
#### Post date: [17 January 2021 22:01 UTC](https://dietpi.com/forum/t/unbound-log-show-failure-dietpi-package-helper-526-fail-the-anchor-is-not-ok-and-could-not-be-fixed/4859/2 "2021-01-17T22:01:03Z")
Hi,
many thanks for your message. I searched the web and found something fitting your issue. [https://www.mail-archive.com/unbound-users@lists.nlnetlabs.nl/msg00442.html](https://www.mail-archive.com/unbound-users@lists.nlnetlabs.nl/msg00442.html)
Can you check if restarting the service will remove the anchor error message.
```nohighlight
systemctl restart unbound
systemctl status unbound
```
Btw can you post cat /etc/resolv.conf
---
### Author:  [@mail2rst](https://dietpi.com/forum/u/mail2rst)
#### Post date: [17 January 2021 22:30 UTC](https://dietpi.com/forum/t/unbound-log-show-failure-dietpi-package-helper-526-fail-the-anchor-is-not-ok-and-could-not-be-fixed/4859/3 "2021-01-17T22:30:09Z")
Thanks Joulinar,
After restarting a unbound that error gone & i got correct log
`Jan 17 15:10:22 DietPi package-helper[11221]: /var/lib/unbound/root.key has content Jan 17 15:10:22 DietPi package-helper[11221]: success: the anchor is ok`
the result of your recommended command is
``
root@DietPi:~# cat /etc/resolv.conf
nameserver 1.1.1.1
nameserver 1.0.0.1
``
I think this dns server come from dietpi-config. i am using cloudflare for this(as mentioned in guideline to put external ip there).
please tell me in my dietpi-config i have to use my gateway/router ip (192.168.1.254) or cloudflare ip address. this time pihole machine(192.168.1.90) not using itself for dns resolve. in dietpi query pihole machine only resolve PTR queries for itself. in my router where is dns server address written i have option to add secondary dns also ( this time in router it is written primary 192.68.1.90 & secondary 1.1.1.1). what you suggest in dietpi-config i have to write existing DNS (1.1.1.1 & 1.0.0.1) or (only 192.168.1.254) . with second approach pi hole try to resolve dns from gateway/router & router forward to pi-hole. in event of failure of pi hole router start using secondary dns 1.1.1.1 automatically as primary dns server fail
---
### Author:  [@Joulinar](https://dietpi.com/forum/u/Joulinar)
#### Post date: [17 January 2021 22:45 UTC](https://dietpi.com/forum/t/unbound-log-show-failure-dietpi-package-helper-526-fail-the-anchor-is-not-ok-and-could-not-be-fixed/4859/4 "2021-01-17T22:45:57Z")
ok resolv.conf is fine. Nothing to change on this. Looks like unbound is starting to early. That’s why anchor is not able to complete during boot but is running successful on manual restart. Let’s try following
```nohighlight
nano /lib/systemd/system/unbound.service
```
now add dietpi-boot.service to the line After=network.target. It should looks like this now
```nohighlight
After=network.target dietpi-boot.service
```
save the file and do
```nohighlight
systemctl daemon-reload
reboot
```
once system is back, check status of the service
```nohighlight
systemctl status unbound
```
---
### Author:  [@mail2rst](https://dietpi.com/forum/u/mail2rst)
#### Post date: [17 January 2021 23:09 UTC](https://dietpi.com/forum/t/unbound-log-show-failure-dietpi-package-helper-526-fail-the-anchor-is-not-ok-and-could-not-be-fixed/4859/5 "2021-01-17T23:09:59Z")
Thanks Joulinar,
i implement your guidelines & restart the system & after that unbound failure gone, everything normal now.
what you suggest about plex.direct queries to unbound by localhost with plex installation
{private-domain: “plex.direct” } in “/etc/unbound/unbound.conf.d/pi-hole.conf”
as my nuc machine not resolving dns for itself so even if we write "private-domain: “plex.direct” in “/etc/unbound/unbound.conf.d/pi-hole.conf” it will not useful as localhost not using it. so it means for plex local files try to resolve it ip through cloudflare service. any thing i can do to eliminate this and facilitate local machine to resolve local data by itself.
---
### Author:  [@Joulinar](https://dietpi.com/forum/u/Joulinar)
#### Post date: [17 January 2021 23:22 UTC](https://dietpi.com/forum/t/unbound-log-show-failure-dietpi-package-helper-526-fail-the-anchor-is-not-ok-and-could-not-be-fixed/4859/6 "2021-01-17T23:22:18Z")
better to create your own plex.conf inside /etc/unbound/unbound.conf.d. This way you can avoid your config get overwritten if pi-hole.conf will be removed/updated or what ever 🙂 Because on next DietPi version 6.35, pi-hole.conf is gone, at least on new installations. There we will have dietpi.conf only
---
### Author:  [@mail2rst](https://dietpi.com/forum/u/mail2rst)
#### Post date: [17 January 2021 23:38 UTC](https://dietpi.com/forum/t/unbound-log-show-failure-dietpi-package-helper-526-fail-the-anchor-is-not-ok-and-could-not-be-fixed/4859/7 "2021-01-17T23:38:22Z")
So i have to open this folder. which having these files present time
# ============================ root@DietPi:/etc/unbound/unbound.conf.d# dir dietpi.conf qname-minimisation.conf dietpi-pihole.conf root-auto-trust-anchor-file.conf
in this folder i have to create new file “sudo nano plex.conf” & write these two lines & save it
"
server:
private-domain: “plex.direct”
"
and reboot system
any other thing you recommend to do from my end?
---
### Author:  [@Joulinar](https://dietpi.com/forum/u/Joulinar)
#### Post date: [17 January 2021 23:41 UTC](https://dietpi.com/forum/t/unbound-log-show-failure-dietpi-package-helper-526-fail-the-anchor-is-not-ok-and-could-not-be-fixed/4859/8 "2021-01-17T23:41:07Z")
don’t think server is needed. Just add the private-domain and give it a try. Service restart should be fine but server reboot is ok as well
---
### Author:  [@mail2rst](https://dietpi.com/forum/u/mail2rst)
#### Post date: [19 January 2021 15:27 UTC](https://dietpi.com/forum/t/unbound-log-show-failure-dietpi-package-helper-526-fail-the-anchor-is-not-ok-and-could-not-be-fixed/4859/9 "2021-01-19T15:27:38Z")
Thanks Joulinar, everything solved please closed this thread. i try to do from my end but not able to see any option to close thread from user side.
---
### Author:  [@Joulinar](https://dietpi.com/forum/u/Joulinar)
#### Post date: [19 January 2021 15:36 UTC](https://dietpi.com/forum/t/unbound-log-show-failure-dietpi-package-helper-526-fail-the-anchor-is-not-ok-and-could-not-be-fixed/4859/10 "2021-01-19T15:36:18Z")
can you share your final solution for Plex pls. Might be other user are interested as well
---
### Author:  [@rummy](https://dietpi.com/forum/u/rummy)
#### Post date: [15 July 2021 16:25 UTC](https://dietpi.com/forum/t/unbound-log-show-failure-dietpi-package-helper-526-fail-the-anchor-is-not-ok-and-could-not-be-fixed/4859/11 "2021-07-15T16:25:39Z")
Creating a separate file plex.conf in dir & restarting unbound fixed the issue.
```nohighlight
root@DietPi:/etc/unbound/unbound.conf.d# pwd
/etc/unbound/unbound.conf.d
root@DietPi:/etc/unbound/unbound.conf.d# ls
dietpi.conf pi-hole.conf plex.conf qname-minimisation.conf root-auto-trust-anchor-file.conf
root@DietPi:/etc/unbound/unbound.conf.d# cat plex.conf
####################
# MY customizations
####################
server:
# Allow Plex Media Server
private-domain: plex.direct
root@DietPi:/etc/unbound/unbound.conf.d#
```