Comment 4 for bug 988513

@Simon: that impossible, because the /etc/default/unbound file is part of the package. You can only set this after the package is installed, and DNS resolving is broken at the moment the package is installed (Unbound is started automatically during post-install).

Anyway, the puppet issue only illustrates the problem with the default settings in the unbound package. This ticket isn't about puppet config, it's about a less than optimal default setting for unbound in ubuntu.