Quoting wirelessduck--- via Dng (dng@???):

> Au contraire, I’m running unbound right now on my laptop. There are
> some situations though where it’s not feasible to run one's own
> recursive DNS resolver, such as a home router for non-technical people
> that doesn’t support ddwrt/openwrt.

On the basis of decades of experience, I deny the premise.

> Unfortunately the current version of unbound packaged in Debian/Devuan
> has an annoying bug when running under non-systemd+apparmor.
> https://bugs.debian.org/947771

I'm minutely familiar with this fact.

Fortunately for Devuan admins, they can either hotfix Unbound or use any
of several other commodity recursive-only DNS nameservers, all of which
I catalogue at http://linuxmafia.com/faq/Network_Other/dns-servers.html .

Nota bene: I accept zero responsibility for ensuring that any or all of
those recursive-only nameservers is binary-packaged for the current,
past, or future releases of Devuan. I note in passing the fact that, if
necessary, "./configure; make; make install" is not broken.

> I attempted to install knot-resolver as an alternative but it appears
> that the upstream packages have gained a hard dependency on systemd.

Case in point.

> MaraDNS/Deadwood packages in Debian are still using a release from
> 2015

_Second_ case in point.

> ...so I guess I’ll be trying powerdns-recursor next as that package
> appears to be reasonably up to date.

Whatever works for you. But local packages/compiles are also a thing.

As the guy who wasted a metric lot of time futilely hating me on the
Internet, Prof. Daniel J. Bernstein, memorably observed: "This is
Unix. Stop acting so helpless."