OS Manuals

/usr/bin/unbound-host

Unbound is a validating, recursive, and caching DNS resolver.

From unbound 1.25.1-r1 (os), captured 2026-11-05 by running unbound-host --help (exit 1). permalink

/usr/bin/unbound-host: invalid option -- '-'
Usage:	unbound-host [-C configfile] [-vdhr46] [-c class] [-t type]
                     [-y key] [-f keyfile] [-F namedkeyfile] hostname
  Queries the DNS for information.
  The hostname is looked up for IP4, IP6 and mail.
  If an ip-address is given a reverse lookup is done.
  Use the -v option to see DNSSEC security information.
    -t type		what type to look for.
    -c class		what class to look for, if not class IN.
    -y 'keystring'	specify trust anchor, DS or DNSKEY, like
			-y 'example.com DS 31560 5 1 1CFED8478...'
    -D			DNSSEC enable with default root anchor
    			from /etc/unbound/root.key
    -f keyfile		read trust anchors from file, with lines as -y.
    -F keyfile		read named.conf-style trust anchors.
    -C config		use the specified unbound.conf (none read by default)
			pass as first argument if you want to override some
			options with further arguments
    -r			read forwarder information from /etc/resolv.conf
      			breaks validation if the forwarder does not do DNSSEC.
    -v			be more verbose, shows nodata and security.
    -d			debug, traces the action, -d -d shows more.
    -4			use ipv4 network, avoid ipv6.
    -6			use ipv6 network, avoid ipv4.
    -h			show this usage help.
Version 1.25.1
BSD licensed, see LICENSE in source package for details.
Report bugs to unbound-bugs@nlnetlabs.nl or https://github.com/NLnetLabs/unbound/issues
Options (13)
OptionDescriptionSource
-t typeSpecify the type of data to lookup.help + man
-c classSpecify the class to lookup for, the default is IN the internet class.help + man
-y 'keystring'Specify a public key to use as trust anchor.help + man
-DDNSSEC enable with default root anchor from /etc/unbound/root.keyhelp + man
-f keyfileread trust anchors from file, with lines as -y.help + man
-F keyfileReads keys from a BIND-style named.conf file.help + man
-C configuse the specified unbound.conf (none read by default) pass as first argument if you want to override some options with further argumentshelp + man
-rread forwarder information from /etc/resolv.conf breaks validation if the forwarder does not do DNSSEC.help + man
-vEnable verbose output and it shows validation results, on every line.help + man
-ddebug, traces the action, -d -d shows more.help + man
-4Use solely the IPv4 network for sending packets.help + man
-6Use solely the IPv6 network for sending packets.help + man
-hShow the version and commandline option help.help + man
Exit status (2) from the manual page
1error
0no error
Examples (3) from the manual page, untested

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.