HowTo setup DNSSEC validation describes use of unbound with root trust anchor. Related links: HowTo general news