<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hi list.</p>
<p>I'm not 100% sure, but I wonder if disabling systemd-resolved may
create issues if, for example, you are using netplan with
systemd-networkd as the renderer? E.g. Will it still be possible
to pick up DNS servers from IPv6 router advertisements?<br>
</p>
<p>A lower impact (and IMHO more future-proof) alternative to
disabling systemd-resolved completely, is to simply turn off the
stub resolver? That can be achieved by creating a file under
/etc/systemd/resolved.conf.d (e.g. 00-local.conf) containing:</p>
<blockquote>
<pre>[Resolve]
DNSStubListener=no
</pre>
</blockquote>
<p>BTW There are some other useful settings that can be configured
here. Check out "man resolved.conf" for details. FWIW The
configuration that I use contains:<br>
</p>
<blockquote>
<pre>[Resolve]
FallbackDNS=<i><list IPv4 DNS servers because I don't want it to fall-back to Google DNS servers></i>
DNSSEC=yes
DNSStubListener=no
</pre>
</blockquote>
<p>NB: After making changes to the configuration run "systemctl
restart systemd-resolved". Use "resolvectl status" to see current
settings.<br>
</p>
<p>Thanks,</p>
<p>Nick.<br>
</p>
<p><br>
</p>
<div class="moz-cite-prefix">On 23/04/22 03:50, Ondřej Surý wrote:<br>
</div>
<blockquote type="cite"
cite="mid:27EA3EA5-0A7C-4B21-A1E1-9944EF1798C4@isc.org">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
I think you also might want to mask the service:
<div><br>
</div>
<div><a href="https://fedoramagazine.org/systemd-masking-units/"
moz-do-not-send="true" class="moz-txt-link-freetext">https://fedoramagazine.org/systemd-masking-units/</a><br>
<br>
<div dir="ltr">
<div>--</div>
Ondřej Surý — ISC (He/Him)
<div><br>
</div>
<div>My working hours and your working hours may be different.
Please do not feel obligated to reply outside your normal
working hours.</div>
</div>
<div dir="ltr"><br>
<blockquote type="cite">On 22. 4. 2022, at 17:20, Randy Bush
<a class="moz-txt-link-rfc2396E" href="mailto:randy@psg.com"><randy@psg.com></a> wrote:<br>
<br>
</blockquote>
</div>
<blockquote type="cite">
<div dir="ltr"><span> sudo systemctl disable
systemd-resolved.service</span><br>
<span> sudo service systemd-resolved stop</span><br>
<span>-- </span><br>
<span>Visit
<a class="moz-txt-link-freetext" href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a> to
unsubscribe from this list</span><br>
<span></span><br>
<span>ISC funds the development of this software with paid
support subscriptions. Contact us at
<a class="moz-txt-link-freetext" href="https://www.isc.org/contact/">https://www.isc.org/contact/</a> for more information.</span><br>
<span></span><br>
<span></span><br>
<span>bind-users mailing list</span><br>
<span><a class="moz-txt-link-abbreviated" href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a></span><br>
<span><a class="moz-txt-link-freetext" href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a></span><br>
</div>
</blockquote>
</div>
<br>
<fieldset class="moz-mime-attachment-header"></fieldset>
</blockquote>
</body>
</html>