[Bug 2056153] [NEW] Removing the systemd-resolved package breaks DNSSEC validation

[Dominic]

Public bug reported:

Removing the systemd-resolved package breaks glibc DNSSEC validation,
because it removes an existing line from the new /etc/resolv.conf file.

This line should be retained so that packages like Exim can continue to
use the AD bit after systemd-resolved is removed.


ubuntu at instance:~$ grep -v '^#' /etc/resolv.conf

nameserver 127.0.0.53
options edns0 trust-ad
search vcn.oraclevcn.com


ubuntu at instance:~$ sudo apt remove systemd-resolved


ubuntu at instance:~$ grep -v '^#' /etc/resolv.conf

nameserver 169.254.169.254
search vcn.oraclevcn.com

** Affects: systemd (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to systemd in Ubuntu.
https://bugs.launchpad.net/bugs/2056153

Title:
  Removing the systemd-resolved package breaks DNSSEC validation

Status in systemd package in Ubuntu:
  New

Bug description:
  Removing the systemd-resolved package breaks glibc DNSSEC validation,
  because it removes an existing line from the new /etc/resolv.conf
  file.

  This line should be retained so that packages like Exim can continue
  to use the AD bit after systemd-resolved is removed.

  
  ubuntu at instance:~$ grep -v '^#' /etc/resolv.conf

  nameserver 127.0.0.53
  options edns0 trust-ad
  search vcn.oraclevcn.com

  
  ubuntu at instance:~$ sudo apt remove systemd-resolved

  
  ubuntu at instance:~$ grep -v '^#' /etc/resolv.conf

  nameserver 169.254.169.254
  search vcn.oraclevcn.com

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/2056153/+subscriptions