[freeipa PR#5939][opened] ipaserver: disable resolved' stub resolver
by fcami
URL: https://github.com/freeipa/freeipa/pull/5939
Author: fcami
Title: #5939: ipaserver: disable resolved' stub resolver
Action: opened
PR body:
"""
Disable systemd-resolved stub resolver at install time.
Use systemd-resolved' maintained list of upstream DNS servers instead.
Rationale: systemd-resolved always resolves the FQDN to the local IP
and vice-versa. This breaks DNS zone detection and especially reverse
zone detection. This results in --auto-reverse being broken.
On systemd-resolved enabled systems, there are four ways to
configure resolv.conf:
* a symlink to /run/systemd/resolve/stub-resolv.conf
This is the default and uses both the 127.0.0.53 DNS stub plus
the search domains.
* a symlink to /usr/lib/systemd/resolv.conf
This only contains the 127.0.0.53 DNS stub.
* a symlink to /run/systemd/resolve/resolv.conf
This contains the upstream DNS IPs and bypasses systemd-resolved.
* Create and maintain /etc/resolv.conf directly.
Solutions #1 and #2 break DNS zone detection.
Solution #4 is not straightforward.
Combine Solution3 and 4: copy the file containing the upstream DNS IPs
so that it is properly maintained by NetworkManager after installation.
Fixes: https://pagure.io/freeipa/issue/8700
Signed-off-by: François Cami <fcami(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5939/head:pr5939
git checkout pr5939
1 year, 6 months