There's a closed pull request on the void-packages repository dnsmasq: enable dnssec build option by default https://github.com/void-linux/void-packages/pull/41786 Description: #### Testing the changes - I tested the changes in this PR: **YES** #### Local build testing - I built this PR locally for my native architecture, x86_64-musl #### Notes I uncommented these lines in `/etc/dnsmasq.conf`; ``` conf-file=/usr/share/dnsmasq/trust-anchors.conf dnssec ``` Logs show it worked: ``` DNSSEC validation enabled configured with trust anchor for keytag 20326 ```