dnscrypt/unbound w/ wicked

English Network/Internet
1

How do I get dnscrypt and unbound to work with wicked service in opensuse 13.2?
I tried editing /etc/resolv.conf to point to 127.0.0.2 and ::2
it only works with the unencrypted opendns servers

then what do I have to do to setup unbound as a DNS cache?

2

here’s my resolv.conf
**### /etc/resolv.conf file autogenerated by netconfig!

Before you change this file manually, consider to define the

static DNS configuration using the following variables in the

/etc/sysconfig/network/config file:

NETCONFIG_DNS_STATIC_SEARCHLIST

NETCONFIG_DNS_STATIC_SERVERS

NETCONFIG_DNS_FORWARDER

or disable DNS configuration updates via netconfig by setting:

NETCONFIG_DNS_POLICY=’’

See also the netconfig(8) manual page and other documentation.

Note: Manual change of this file disables netconfig too, but

may get lost when this file contains comments or empty lines

only, the netconfig settings are same with settings in this

file and in case of a “netconfig update -f” call.

Please remove (at least) this line when you modify the file!

search hsd1.ca.comcast.net site
nameserver 208.67.222.222
nameserver 2620:0:ccc::2**

and here’s my wicked config from wicked show-config
<interface origin=“compat:/etc/sysconfig/network/ifcfg-wls1” uuid=“05080000-3d0e-1400-6303-0000d58b5155”>
<name>wls1</name>
<control>
<mode>ifplugd</mode>
</control>
<wireless>
<ap-scan>1</ap-scan>
<network>
<essid>Linksys08757</essid>
<scan-ssid>true</scan-ssid>
<priority>1</priority>
<mode>infrastructure</mode>
<key-management>wpa-psk</key-management>
<wpa-psk>
<passphrase>95yvdv0znp</passphrase>
<auth-proto>default</auth-proto>
<pairwise-cipher>none</pairwise-cipher>
<group-cipher>none</group-cipher>
</wpa-psk>
</network>
</wireless>
<link/>
<ipv4>
<enabled>true</enabled>
<arp-verify>true</arp-verify>
</ipv4>
<ipv4:dhcp>
<enabled>true</enabled>
<flags>group</flags>
<update>default-route,dns,nis,ntp,smb,nds,slp,log,mtu</update>
<hostname>linux-wz5h.site</hostname>
<defer-timeout>15</defer-timeout>
<recover-lease>true</recover-lease>
<release-lease>false</release-lease>
</ipv4:dhcp>
<ipv6>
<enabled>true</enabled>
</ipv6>
<ipv6:dhcp>
<enabled>true</enabled>
<flags>group</flags>
<update>dns,ntp</update>
<mode>auto</mode>
<rapid-commit>true</rapid-commit>
<hostname>linux-wz5h.site</hostname>
<defer-timeout>15</defer-timeout>
<recover-lease>true</recover-lease>
<release-lease>false</release-lease>
</ipv6:dhcp>
</interface>
<interface origin=“compat:/etc/sysconfig/network/ifcfg-lo” uuid=“05080000-2611-1400-af00-000077ab5355”>
<name>lo</name>
<control>
<mode>boot</mode>
<boot-stage>localfs</boot-stage>
<persistent>true</persistent>
</control>
<link/>
<ipv4>
<enabled>true</enabled>
</ipv4>
<ipv4:static>
<address>
<local>127.0.0.1/8</local>
<broadcast>127.255.255.255</broadcast>
</address>
</ipv4:static>
<ipv6>
<enabled>true</enabled>
</ipv6>
<ipv6:static>
<address>
<local>::1/128</local>
</address>
</ipv6:static>
</interface>

are there any other config files I have to edit or a command line argument to set?