Skip to content

Commit 1478709

Browse files
committed
Disable dnssec for systemd explicitly
1 parent 0cd4b60 commit 1478709

File tree

1 file changed

+7
-3
lines changed

1 file changed

+7
-3
lines changed

client/internal/dns/systemd_linux.go

Lines changed: 7 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -30,6 +30,7 @@ const (
3030
systemdDbusSetDNSMethodSuffix = systemdDbusLinkInterface + ".SetDNS"
3131
systemdDbusSetDefaultRouteMethodSuffix = systemdDbusLinkInterface + ".SetDefaultRoute"
3232
systemdDbusSetDomainsMethodSuffix = systemdDbusLinkInterface + ".SetDomains"
33+
systemdDbusSetDNSSECMethodSuffix = systemdDbusLinkInterface + ".SetDNSSEC"
3334
systemdDbusResolvConfModeForeign = "foreign"
3435

3536
dbusErrorUnknownObject = "org.freedesktop.DBus.Error.UnknownObject"
@@ -95,9 +96,12 @@ func (s *systemdDbusConfigurator) applyDNSConfig(config HostDNSConfig, stateMana
9596
Family: unix.AF_INET,
9697
Address: ipAs4[:],
9798
}
98-
err = s.callLinkMethod(systemdDbusSetDNSMethodSuffix, []systemdDbusDNSInput{defaultLinkInput})
99-
if err != nil {
100-
return fmt.Errorf("setting the interface DNS server %s:%d failed with error: %w", config.ServerIP, config.ServerPort, err)
99+
if err = s.callLinkMethod(systemdDbusSetDNSMethodSuffix, []systemdDbusDNSInput{defaultLinkInput}); err != nil {
100+
return fmt.Errorf("set interface DNS server %s:%d: %w", config.ServerIP, config.ServerPort, err)
101+
}
102+
103+
if err = s.callLinkMethod(systemdDbusSetDNSSECMethodSuffix, "no"); err != nil {
104+
log.Errorf("set DNSSEC to 'no': %v", err)
101105
}
102106

103107
var (

0 commit comments

Comments
 (0)