| 16 Jun 2025 |
hexa | I've been in the resolved dnssec issues years ago | 04:26:21 |
hexa | I' | 04:26:28 |
hexa | * I've killed dnssec support locally before it hit nixpkgs | 04:26:37 |
hexa | because it wouldn't properly work and break resolution needlessly | 04:26:53 |
emily | the old DNSSEC issues are pretty depressing yeah | 04:27:15 |
hexa | systemd sometimes does to much and the developers are spread to thin | 04:27:19 |
emily | I think they have mostly been fixed by now but systemd upstream attitude to bug reports is depressing | 04:27:29 |
hexa | so resolved was built and remained broken for years | 04:27:33 |
emily | yeah I've also followed it | 04:27:45 |
emily | it doesn't seem like great software | 04:27:50 |
hexa | I like resolved for its DoT capability | 04:28:13 |
emily | a good modern API for DNS for the Linux platform is something that we do need though, which is why I expect the NSS/D-Bus parts of it to be used increasingly | 04:28:18 |
emily | for better or worse | 04:28:24 |
hexa | and for its per interface dns resolution | 04:28:30 |
emily | unless the Flatpak people make some xdg-dns-portal or something that people adopt instead | 04:28:39 |
emily | (which would be its own headache…) | 04:28:43 |
hexa | * and for its per interface dns resolution scoping | 04:28:46 |
hexa | yeah, glibc is a poor API, I agree | 04:29:04 |
emily | (I wish it could do DoQ/DoH3, then I wouldn't need a separate proxy…) | 04:29:17 |
hexa | I have no doubts that the recursor will follow | 04:29:22 |
hexa | * I have no doubts that the recursors will follow | 04:29:37 |
hexa | so to get back to the root of the problem | 04:30:31 |
hexa | should systemd.network.enable also enable resolved when useLocalResolver is set? | 04:31:11 |
@emma:rory.gay | one of my previous matrix servers made resolved crash outright | 04:31:42 |
hexa | every local resolver uses 127.0.0.1 / ::1, resolved uses 127.0.0.53 | 04:31:44 |
hexa | should resolved maybe just assert on useLocalResolver? | 04:32:22 |
emily | it already asserts on resolvconf | 04:32:56 |
emily | do you actually see fighting over resolv.conf? | 04:33:13 |
emily | or just the local one being ignored entirely | 04:33:17 |
hexa | one being ignored | 04:33:28 |