systemd-resolved stops resolving .local names #5048
Description
Submission type
- Bug report
systemd version the issue has been seen with
231-10.fc25
Used distribution
Fedora 25, fully updated as of today
In case of bug report: Expected behaviour you didn't see
In case of bug report: Unexpected behaviour you saw
Some time after (re)starting systemd-resolved service names in .local domain stop being resolved successfully. Below there's a log from systemd-resolved with two successful resolutions for news.sfx.local and subsequent unsuccessful resolution for the same name. In between there are some entries in the cache of systemd-resolved removed.
In case of bug report: Steps to reproduce the problem
$ ll /etc/resolv.conf
lrwxrwxrwx 1 root root 28 Jan 2 11:06 /etc/resolv.conf -> /usr/lib/systemd/resolv.conf
$ cat /etc/resolv.conf
nameserver 127.0.0.53
$ cat /etc/systemd/resolved.conf
[Resolve]
DNS=10.92.2.1
Domains=biuro.sfx.local sfx.local sfx.com.pl sfx.pl
$ cat /etc/systemd/system/systemd-resolved.service.d/override.conf
[Service]
Environment=SYSTEMD_LOG_LEVEL=debug
Log from journalctl -u systemd-resolved:
-- Logs begin at Tue 2014-12-16 17:36:30 CET, end at Mon 2017-01-09 12:02:15 CET. --
Jan 09 11:55:24 demon.sfx.local systemd-resolved[791]: Got DNS stub UDP query packet for id 39921
Jan 09 11:55:24 demon.sfx.local systemd-resolved[791]: Looking up RR for news.sfx.local IN A.
Jan 09 11:55:24 demon.sfx.local systemd-resolved[791]: Positive cache hit for news.sfx.local IN A
Jan 09 11:55:24 demon.sfx.local systemd-resolved[791]: Transaction 9228 for <news.sfx.local IN A> on scope dns on */* now complete with <success> from cache (unsigned).
Jan 09 11:55:24 demon.sfx.local systemd-resolved[791]: Freeing transaction 9228.
Jan 09 11:55:24 demon.sfx.local systemd-resolved[791]: Sending response packet with id 39921 on interface 1/AF_INET.
Jan 09 11:55:24 demon.sfx.local systemd-resolved[791]: Processing query...
Jan 09 11:55:29 demon.sfx.local systemd-resolved[791]: Got DNS stub UDP query packet for id 56578
Jan 09 11:55:29 demon.sfx.local systemd-resolved[791]: Looking up RR for news.sfx.local IN A.
Jan 09 11:55:29 demon.sfx.local systemd-resolved[791]: Positive cache hit for news.sfx.local IN A
Jan 09 11:55:29 demon.sfx.local systemd-resolved[791]: Transaction 53997 for <news.sfx.local IN A> on scope dns on */* now complete with <success> from cache (unsigned).
Jan 09 11:55:29 demon.sfx.local systemd-resolved[791]: Freeing transaction 53997.
Jan 09 11:55:29 demon.sfx.local systemd-resolved[791]: Sending response packet with id 56578 on interface 1/AF_INET.
Jan 09 11:55:29 demon.sfx.local systemd-resolved[791]: Processing query...
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Got DNS stub UDP query packet for id 7281
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Looking up RR for news.sfx.local IN A.
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Removing cache entry for news.sfx.local IN A (expired 0s ago)
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Removing cache entry for com.pl IN DNSKEY (expired 0s ago)
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Removing cache entry for c32g2ehu9g9i2njqqqbvq32ul45jonkq.com.pl IN NSEC3 (expired 0s ago)
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Removing cache entry for com.pl IN SOA (expired 0s ago)
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Removing cache entry for sfx.com.pl IN DS (expired 0s ago)
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Removing cache entry for sfx.com.pl IN SOA (expired 0s ago)
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Removing cache entry for bozon.sfx.com.pl IN A (expired 0s ago)
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Cache miss for news.sfx.local IN A
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Transaction 11904 for <news.sfx.local IN A> scope dns on */*.
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Using feature level UDP+EDNS0+DO+LARGE for transaction 11904.
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Using DNS server 10.92.2.1 for transaction 11904.
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Sending query packet with id 11904.
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Processing query...
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Processing incoming packet on transaction 11904.
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Requesting SOA to validate transaction 11904 (news.sfx.local, unsigned non-SOA/NS RRset <news.sfx.local IN A 16.193.144.205>).
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Cache miss for news.sfx.local IN SOA
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Transaction 58183 for <news.sfx.local IN SOA> scope dns on */*.
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Using feature level UDP+EDNS0+DO+LARGE for transaction 58183.
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Using DNS server 10.92.2.1 for transaction 58183.
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Sending query packet with id 58183.
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Processing incoming packet on transaction 58183.
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Requesting DS to validate transaction 58183 (news.sfx.local, unsigned empty SOA/NS response).
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Cache miss for news.sfx.local IN DS
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Transaction 44144 for <news.sfx.local IN DS> scope dns on */*.
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Using feature level UDP+EDNS0+DO+LARGE for transaction 44144.
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Using DNS server 10.92.2.1 for transaction 44144.
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Sending query packet with id 44144.
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Processing incoming packet on transaction 44144.
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Requesting parent SOA to validate transaction 44144 (news.sfx.local, unsigned empty DS response).
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: NXDOMAIN cache hit for sfx.local IN SOA
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Transaction 50084 for <sfx.local IN SOA> on scope dns on */* now complete with <rcode-failure> from cache (authenticated).
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Validating response from transaction 44144 (news.sfx.local IN DS).
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Looking at sfx.local IN SOA atlas.sfx.local root.atlas.sfx.local 2017010502 3600 600 605000 3600: no-signature
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Found verdict for lookup news.sfx.local IN DS: bogus
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: DNSSEC validation failed for question news.sfx.local IN DS: no-signature
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Transaction 44144 for <news.sfx.local IN DS> on scope dns on */* now complete with <dnssec-failed> from network (unsigned).
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Auxiliary DNSSEC RR query failed validation: no-signature
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: DNSSEC validation failed for question news.sfx.local IN SOA: no-signature
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Transaction 58183 for <news.sfx.local IN SOA> on scope dns on */* now complete with <dnssec-failed> from network (unsigned).
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Auxiliary DNSSEC RR query failed validation: no-signature
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: DNSSEC validation failed for question news.sfx.local IN A: no-signature
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Transaction 11904 for <news.sfx.local IN A> on scope dns on */* now complete with <dnssec-failed> from network (unsigned).
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Sending response packet with id 7281 on interface 1/AF_INET.
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Freeing transaction 11904.
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Freeing transaction 58183.
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Freeing transaction 44144.
Jan 09 11:55:34 demon.sfx.local systemd-resolved[791]: Freeing transaction 50084.