Inspired by discussions on the unbound-users list [1] and what other distros (SLES, Fedora) are doing to keep the root.key current and make it available for other unbound related packages I came up with this merge request [2]. Comments and suggestions are welcome.
Thanks, Simon 1: https://nlnetlabs.nl/pipermail/unbound-users/2018-November/011086.html 2: https://salsa.debian.org/dns-team/unbound/merge_requests/1