by summers » Sat Jan 11, 2020 1:48 pm
hirtdasi - are you have the same DNS problems as others? Not clear from your post.
Many people on arm boards have been having DNS problems recently. It isn't yet completely clear why, but many of the problems seem to be because the recent release of systemd has the default DNSSEC setting as "allow-downgrade". You can see this by:
$this->bbcode_second_pass_code('', 'resolvectl status
Link 3 (wlp3s0)
Current Scopes: DNS LLMNR/IPv4 LLMNR/IPv6
DefaultRoute setting: yes
LLMNR setting: yes
MulticastDNS setting: no
DNSOverTLS setting: no
DNSSEC setting: allow-downgrade
DNSSEC supported: yes
Current DNS Server: 192.168.2.1
DNS Servers: 192.168.2.1
fd84:32c:ad2f::1
')
So it only seems to be a problem if you are using a recent systemd, and systemd-resolved - resolvectl will confirm.
Now the problem only seems to affect some, I don't have any problems on any of my machine, but they all as above have DNS point to 192.168.2.1 which is my router. What the theory is, is that machines that don't have a RTC, on first boot come up with a wrong time. Usually this is solved via NTP to remote host, but DNSSEC look up when clocks aren't aligned, seems to fail hard. This means the name of the NTP server can't be looked up, and so time can't be syncronised. This may be why my set up works - my router will have my NTP server in its cache, so probably always gets the IP address to syncronise to.
So, hirtdasi, does this apply to you? Is it the problem you are having?