Public bug reported:

Failing bind9 version: 1:9.10.3.dfsg.P4-8ubuntu1.9
Recovers when downgrading to: 1:9.10.3.dfsg.P4-8ubuntu1.8

After running a dist-upgrade on 16.04.3 LTS, bind9 was upgraded in the
process and failed to start with a "crypto failure" after that. Rolling
bind9 and its dependencies back to 1:9.10.3.dfsg.P4-8ubuntu1.8 solved
the problem. Until this morning I have never had this problem with
previous versions after a dist-upgrade.

To get bind9 running again, I had to downgrade all of the following packages 
with the following command:
apt-get install bind9=1:9.10.3.dfsg.P4-8ubuntu1.8 
bind9utils=1:9.10.3.dfsg.P4-8ubuntu1.8  
libbind9-140=1:9.10.3.dfsg.P4-8ubuntu1.8 libdns162=1:9.10.3.dfsg.P4-8ubuntu1.8 
libisc160=1:9.10.3.dfsg.P4-8ubuntu1.8 libisccc140=1:9.10.3.dfsg.P4-8ubuntu1.8 
libisccfg140=1:9.10.3.dfsg.P4-8ubuntu1.8 liblwres141=1:9.10.3.dfsg.P4-8ubuntu1.8

Host info:
# lsb_release -rd
Description:    Ubuntu 16.04.3 LTS
Release:        16.04

amd64

# apt-cache policy bind9
bind9:
  Installed: 1:9.10.3.dfsg.P4-8ubuntu1.8
  Candidate: 1:9.10.3.dfsg.P4-8ubuntu1.9
  Version table:
     1:9.10.3.dfsg.P4-8ubuntu1.9 500
        500 http://mirrors.linode.com/ubuntu xenial-updates/main amd64 Packages
 *** 1:9.10.3.dfsg.P4-8ubuntu1.8 500
        500 http://security.ubuntu.com/ubuntu xenial-security/main amd64 
Packages
        100 /var/lib/dpkg/status
     1:9.10.3.dfsg.P4-8 500
        500 http://mirrors.linode.com/ubuntu xenial/main amd64 Packages

(was failing on 1:9.10.3.dfsg.P4-8ubuntu1.9, so you are seeing the
rolled back policy result)

dpkg.log showing upgrade to 1:9.10.3.dfsg.P4-8ubuntu1.9:
2017-12-14 09:10:27 upgrade bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.8 
1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:27 status half-configured bind9:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 09:10:27 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 09:10:27 status half-installed bind9:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 09:10:27 status half-installed bind9:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 09:10:27 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:27 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:28 upgrade bind9-host:amd64 1:9.10.3.dfsg.P4-8ubuntu1.8 
1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:28 status half-configured bind9-host:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 09:10:28 status unpacked bind9-host:amd64 1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 09:10:28 status half-installed bind9-host:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 09:10:28 status half-installed bind9-host:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 09:10:28 status unpacked bind9-host:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:28 status unpacked bind9-host:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:28 upgrade bind9utils:amd64 1:9.10.3.dfsg.P4-8ubuntu1.8 
1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:28 status half-configured bind9utils:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 09:10:28 status unpacked bind9utils:amd64 1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 09:10:28 status half-installed bind9utils:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 09:10:28 status half-installed bind9utils:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 09:10:28 status unpacked bind9utils:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:28 status unpacked bind9utils:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:28 upgrade libbind9-140:amd64 1:9.10.3.dfsg.P4-8ubuntu1.8 
1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:28 status half-configured libbind9-140:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 09:10:28 status unpacked libbind9-140:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 09:10:28 status half-installed libbind9-140:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 09:10:28 status half-installed libbind9-140:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 09:10:28 status unpacked libbind9-140:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:28 status unpacked libbind9-140:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:30 upgrade bind9-doc:all 1:9.10.3.dfsg.P4-8ubuntu1.8 
1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:30 status half-configured bind9-doc:all 
1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 09:10:30 status unpacked bind9-doc:all 1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 09:10:30 status half-installed bind9-doc:all 
1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 09:10:30 status half-installed bind9-doc:all 
1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 09:10:30 status unpacked bind9-doc:all 1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:30 status unpacked bind9-doc:all 1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:45 configure libbind9-140:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9 
<none>
2017-12-14 09:10:45 status unpacked libbind9-140:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:45 status half-configured libbind9-140:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:45 status installed libbind9-140:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:45 configure bind9utils:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9 
<none>
2017-12-14 09:10:45 status unpacked bind9utils:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:45 status half-configured bind9utils:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:45 status installed bind9utils:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:45 configure bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9 <none>
2017-12-14 09:10:45 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:45 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:45 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:45 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:45 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:45 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:45 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:45 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:45 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:45 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:45 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:45 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:45 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:45 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:45 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:45 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:45 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:45 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:45 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:45 status half-configured bind9:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:47 status installed bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:47 configure bind9-host:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9 
<none>
2017-12-14 09:10:47 status unpacked bind9-host:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:47 status half-configured bind9-host:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:47 status installed bind9-host:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:47 configure bind9-doc:all 1:9.10.3.dfsg.P4-8ubuntu1.9 <none>
2017-12-14 09:10:47 status unpacked bind9-doc:all 1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:47 status half-configured bind9-doc:all 
1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 09:10:47 status installed bind9-doc:all 1:9.10.3.dfsg.P4-8ubuntu1.9

syslog showing the failure to start bind9 after the uprade:
Dec 14 09:10:46 [REDACTED] systemd[1]: Stopping BIND Domain Name Server...
Dec 14 09:10:46 [REDACTED] systemd[1]: Stopped BIND Domain Name Server.
Dec 14 09:10:46 [REDACTED] systemd[1]: Started BIND Domain Name Server.
Dec 14 09:10:46 [REDACTED] named[5117]: starting BIND 9.10.3-P4-Ubuntu 
<id:ebd72b3> -f -u bind -t /chroot/named -c /etc/named.conf
Dec 14 09:10:46 [REDACTED] named[5117]: built with '--prefix=/usr' 
'--mandir=/usr/share/man' '--libdir=/usr/lib/x86_64-linux-gnu' 
'--infodir=/usr/share/info' '--sysconfdir=/etc/bind' '--localstatedir=/' 
'--enable-threads' '--enable-largefile' '--with-libtool' '--enable-shared' 
'--enable-static' '--with-openssl=/usr' '--with-gssapi=/usr' '--with-gnu-ld' 
'--with-geoip=/usr' '--with-atf=no' '--enable-ipv6' '--enable-rrl' 
'--enable-filter-aaaa' '--enable-native-pkcs11' 
'--with-pkcs11=/usr/lib/x86_64-linux-gnu/softhsm/libsofthsm2.so' 'CFLAGS=-g -O2 
-fPIE -fstack-protector-strong -Wformat -Werror=format-security 
-fno-strict-aliasing -fno-delete-null-pointer-checks -DNO_VERSION_DATE' 
'LDFLAGS=-Wl,-Bsymbolic-functions -fPIE -pie -Wl,-z,relro -Wl,-z,now' 
'CPPFLAGS=-Wdate-time -D_FORTIFY_SOURCE=2 -DDIG_SIGCHASE'
Dec 14 09:10:46 [REDACTED] named[5117]: 
----------------------------------------------------
Dec 14 09:10:46 [REDACTED] named[5117]: BIND 9 is maintained by Internet 
Systems Consortium,
Dec 14 09:10:46 [REDACTED] named[5117]: Inc. (ISC), a non-profit 501(c)(3) 
public-benefit
Dec 14 09:10:46 [REDACTED] named[5117]: corporation.  Support and training for 
BIND 9 are
Dec 14 09:10:46 [REDACTED] named[5117]: available at https://www.isc.org/support
Dec 14 09:10:46 [REDACTED] named[5117]: 
----------------------------------------------------
Dec 14 09:10:46 [REDACTED] named[5117]: adjusted limit on open files from 4096 
to 1048576
Dec 14 09:10:46 [REDACTED] named[5117]: found 1 CPU, using 1 worker thread
Dec 14 09:10:46 [REDACTED] named[5117]: using 1 UDP listener per interface
Dec 14 09:10:46 [REDACTED] named[5117]: using up to 4096 sockets
Dec 14 09:10:46 [REDACTED] named[5117]: ENGINE_by_id failed (crypto failure)
Dec 14 09:10:46 [REDACTED] named[5117]: error:25070067:DSO support 
routines:DSO_load:could not load the shared library:dso_lib.c:233:
Dec 14 09:10:46 [REDACTED] named[5117]: error:260B6084:engine 
routines:DYNAMIC_LOAD:dso not found:eng_dyn.c:467:
Dec 14 09:10:46 [REDACTED] named[5117]: error:2606A074:engine 
routines:ENGINE_by_id:no such engine:eng_list.c:390:id=gost
Dec 14 09:10:46 [REDACTED] named[5117]: initializing DST: crypto failure
Dec 14 09:10:46 [REDACTED] named[5117]: exiting (due to fatal error)
Dec 14 09:10:46 [REDACTED] systemd[1]: bind9.service: Main process exited, 
code=exited, status=1/FAILURE
Dec 14 09:10:46 [REDACTED] rndc[5123]: rndc: connect failed: 127.0.0.1#953: 
connection refused
Dec 14 09:10:46 [REDACTED] systemd[1]: bind9.service: Control process exited, 
code=exited status=1
Dec 14 09:10:46 [REDACTED] systemd[1]: bind9.service: Unit entered failed state.
Dec 14 09:10:46 [REDACTED] systemd[1]: bind9.service: Failed with result 
'exit-code'.
Dec 14 09:10:47 [REDACTED] systemd[1]: Reloading.
Dec 14 09:10:47 [REDACTED] systemd[1]: message repeated 2 times: [ Reloading.]

dpkg.log showing the downgrade back to 1:9.10.3.dfsg.P4-8ubuntu1.8:
2017-12-14 10:07:06 status installed bind9-host:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 10:07:06 remove bind9-host:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9 <none>
2017-12-14 10:07:06 status half-configured bind9-host:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 10:07:06 status half-installed bind9-host:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 10:07:06 status config-files bind9-host:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 10:07:06 status config-files bind9-host:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 10:07:06 status config-files bind9-host:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 10:07:06 status not-installed bind9-host:amd64 <none>
2017-12-14 10:07:07 upgrade bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9 
1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 10:07:07 status half-configured bind9:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 10:07:07 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 10:07:07 status half-installed bind9:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 10:07:07 status half-installed bind9:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 10:07:08 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 10:07:08 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 10:07:08 upgrade bind9utils:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9 
1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 10:07:08 status half-configured bind9utils:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 10:07:08 status unpacked bind9utils:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 10:07:08 status half-installed bind9utils:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 10:07:08 status half-installed bind9utils:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 10:07:08 status unpacked bind9utils:amd64 1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 10:07:08 status unpacked bind9utils:amd64 1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 10:07:08 upgrade libbind9-140:amd64 1:9.10.3.dfsg.P4-8ubuntu1.9 
1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 10:07:08 status half-configured libbind9-140:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 10:07:08 status unpacked libbind9-140:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 10:07:08 status half-installed libbind9-140:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 10:07:08 status half-installed libbind9-140:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.9
2017-12-14 10:07:08 status unpacked libbind9-140:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 10:07:08 status unpacked libbind9-140:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 10:07:10 configure libbind9-140:amd64 1:9.10.3.dfsg.P4-8ubuntu1.8 
<none>
2017-12-14 10:07:10 status unpacked libbind9-140:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 10:07:10 status half-configured libbind9-140:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 10:07:10 status installed libbind9-140:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 10:07:10 configure bind9utils:amd64 1:9.10.3.dfsg.P4-8ubuntu1.8 
<none>
2017-12-14 10:07:10 status unpacked bind9utils:amd64 1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 10:07:10 status half-configured bind9utils:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 10:07:10 status installed bind9utils:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 10:07:10 configure bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.8 <none>
2017-12-14 10:07:10 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 10:07:10 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 10:07:10 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 10:07:10 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 10:07:10 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 10:07:10 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 10:07:10 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 10:07:10 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 10:07:10 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 10:07:10 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 10:07:10 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 10:07:10 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 10:07:10 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 10:07:10 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 10:07:10 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 10:07:10 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 10:07:10 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 10:07:10 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 10:07:10 status unpacked bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 10:07:10 status half-configured bind9:amd64 
1:9.10.3.dfsg.P4-8ubuntu1.8
2017-12-14 10:07:13 status installed bind9:amd64 1:9.10.3.dfsg.P4-8ubuntu1.8

syslog showing bind9 successfully starting up again after the downgrade:
Dec 14 10:07:10 [REDACTED] systemd[1]: Started BIND Domain Name Server.
Dec 14 10:07:10 [REDACTED] named[8598]: starting BIND 9.10.3-P4-Ubuntu 
<id:ebd72b3> -f -u bind
Dec 14 10:07:10 [REDACTED] named[8598]: built with '--prefix=/usr' 
'--mandir=/usr/share/man' '--libdir=/usr/lib/x86_64-linux-gnu' 
'--infodir=/usr/share/info' '--sysconfdir=/etc/bind' '--localstatedir=/' 
'--enable-threads' '--enable-largefile' '--with-libtool' '--enable-shared' 
'--enable-static' '--with-openssl=/usr' '--with-gssapi=/usr' '--with-gnu-ld' 
'--with-geoip=/usr' '--with-atf=no' '--enable-ipv6' '--enable-rrl' 
'--enable-filter-aaaa' '--enable-native-pkcs11' 
'--with-pkcs11=/usr/lib/x86_64-linux-gnu/softhsm/libsofthsm2.so' 'CFLAGS=-g -O2 
-fPIE -fstack-protector-strong -Wformat -Werror=format-security 
-fno-strict-aliasing -fno-delete-null-pointer-checks -DNO_VERSION_DATE' 
'LDFLAGS=-Wl,-Bsymbolic-functions -fPIE -pie -Wl,-z,relro -Wl,-z,now' 
'CPPFLAGS=-Wdate-time -D_FORTIFY_SOURCE=2 -DDIG_SIGCHASE'
Dec 14 10:07:10 [REDACTED] named[8598]: 
----------------------------------------------------
Dec 14 10:07:10 [REDACTED] named[8598]: BIND 9 is maintained by Internet 
Systems Consortium,
Dec 14 10:07:10 [REDACTED] named[8598]: Inc. (ISC), a non-profit 501(c)(3) 
public-benefit
Dec 14 10:07:10 [REDACTED] named[8598]: corporation.  Support and training for 
BIND 9 are
Dec 14 10:07:10 [REDACTED] named[8598]: available at https://www.isc.org/support
Dec 14 10:07:10 [REDACTED] named[8598]: 
----------------------------------------------------
Dec 14 10:07:10 [REDACTED] named[8598]: adjusted limit on open files from 4096 
to 1048576
Dec 14 10:07:10 [REDACTED] named[8598]: found 1 CPU, using 1 worker thread
Dec 14 10:07:10 [REDACTED] named[8598]: using 1 UDP listener per interface
Dec 14 10:07:10 [REDACTED] named[8598]: using up to 4096 sockets
Dec 14 10:07:10 [REDACTED] named[8598]: loading configuration from 
'/etc/bind/named.conf'
Dec 14 10:07:12 [REDACTED] named[8598]: initializing GeoIP Country (IPv4) (type 
1) DB
Dec 14 10:07:12 [REDACTED] named[8598]: GEO-106FREE 20160408 Bu
Dec 14 10:07:12 [REDACTED] named[8598]: initializing GeoIP Country (IPv6) (type 
12) DB
Dec 14 10:07:12 [REDACTED] named[8598]: GEO-106FREE 20160408 Bu
Dec 14 10:07:12 [REDACTED] named[8598]: GeoIP City (IPv4) (type 2) DB not 
available
Dec 14 10:07:12 [REDACTED] named[8598]: GeoIP City (IPv4) (type 6) DB not 
available
Dec 14 10:07:12 [REDACTED] named[8598]: GeoIP City (IPv6) (type 30) DB not 
available
Dec 14 10:07:12 [REDACTED] named[8598]: GeoIP City (IPv6) (type 31) DB not 
available
Dec 14 10:07:12 [REDACTED] named[8598]: GeoIP Region (type 3) DB not available
Dec 14 10:07:12 [REDACTED] named[8598]: GeoIP Region (type 7) DB not available
Dec 14 10:07:12 [REDACTED] named[8598]: GeoIP ISP (type 4) DB not available
Dec 14 10:07:12 [REDACTED] named[8598]: GeoIP Org (type 5) DB not available
Dec 14 10:07:12 [REDACTED] named[8598]: GeoIP AS (type 9) DB not available
Dec 14 10:07:12 [REDACTED] named[8598]: GeoIP Domain (type 11) DB not available
Dec 14 10:07:12 [REDACTED] named[8598]: GeoIP NetSpeed (type 10) DB not 
available
Dec 14 10:07:12 [REDACTED] named[8598]: using default UDP/IPv4 port range: 
[32768, 60999]
Dec 14 10:07:12 [REDACTED] named[8598]: using default UDP/IPv6 port range: 
[32768, 60999]
Dec 14 10:07:12 [REDACTED] named[8598]: listening on IPv4 interface lo, 
127.0.0.1#53
Dec 14 10:07:12 [REDACTED] named[8598]: listening on IPv4 interface eth0, 
[REDACTED]#53
Dec 14 10:07:12 [REDACTED] named[8598]: listening on IPv4 interface eth0:1, 
[REDACTED]#53
Dec 14 10:07:12 [REDACTED] named[8598]: listening on IPv6 interface lo, ::1#53
Dec 14 10:07:12 [REDACTED] named[8598]: listening on IPv6 interface eth0, 
[REDACTED]#53
Dec 14 10:07:12 [REDACTED] named[8598]: listening on IPv6 interface eth0, 
[REDACTED]#53
Dec 14 10:07:12 [REDACTED] named[8598]: generating session key for dynamic DNS
Dec 14 10:07:12 [REDACTED] named[8598]: sizing zone task pool based on 46 zones
Dec 14 10:07:12 [REDACTED] named[8598]: set up managed keys zone for view 
_default, file 'managed-keys.bind'
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 10.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
16.172.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
17.172.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
18.172.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
19.172.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
20.172.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
21.172.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
22.172.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
23.172.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
24.172.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
25.172.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
26.172.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
27.172.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
28.172.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
29.172.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
30.172.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
31.172.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
168.192.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
64.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
65.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
66.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
67.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
68.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
69.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
70.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
71.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
72.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
73.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
74.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
75.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
76.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
77.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
78.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
79.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
80.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
81.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
82.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
83.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
84.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
85.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
86.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
87.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
88.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
89.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
90.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
91.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
92.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
93.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
94.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
95.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
96.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
97.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
98.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
99.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
100.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
101.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
102.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
103.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
104.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
105.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
106.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
107.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
108.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
109.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
110.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
111.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
112.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
113.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
114.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
115.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
116.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
117.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
118.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
119.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
120.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
121.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
122.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
123.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
124.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
125.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
126.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
127.100.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 0.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
254.169.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
2.0.192.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
100.51.198.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
113.0.203.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
255.255.255.255.IN-ADDR.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: D.F.IP6.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 8.E.F.IP6.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 9.E.F.IP6.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: A.E.F.IP6.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: B.E.F.IP6.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: 
8.B.D.0.1.0.0.2.IP6.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: automatic empty zone: EMPTY.AS112.ARPA
Dec 14 10:07:12 [REDACTED] named[8598]: command channel listening on 0.0.0.0#953
Dec 14 10:07:12 [REDACTED] named[8598]: the working directory is not writable
Dec 14 10:07:12 [REDACTED] named[8598]: 14-Dec-2017 10:07:12.506 general: all 
zones loaded
Dec 14 10:07:12 [REDACTED] named[8598]: 14-Dec-2017 10:07:12.508 general: 
running


I had to get the host recovered, as I have only one other master available 
right now and I am in the middle of a lot of overhauling of my infrastructure. 
If you want more debugging details, I could snapshot the same host and clone it 
to a new host, then do the upgrade again and get it back into the same bad 
state so as to gather more info for you.

** Affects: bind9 (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: bind9 crypto

** Attachment added: "bind_failure_after_upgrade.tar.gz"
   
https://bugs.launchpad.net/bugs/1738179/+attachment/5022587/+files/bind_failure_after_upgrade.tar.gz

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1738179

Title:
  bind9 fails to start after dist-upgrade

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/1738179/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to