The following pull request was submitted through Github. It can be accessed and reviewed at: https://github.com/lxc/lxd/pull/8231
This e-mail was sent by the LXC bot, direct replies will not reach the author unless they happen to be subscribed to this list. === Description (from pull-request) === Closes #8230 Signed-off-by: Stéphane Graber <stgra...@ubuntu.com>
From db9c2eeeb56da9d393412ba4f2ffbb744ad6752b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Graber?= <stgra...@ubuntu.com> Date: Wed, 9 Dec 2020 10:25:59 -0500 Subject: [PATCH] doc/networks: Mention DNSSEC setting MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Closes #8230 Signed-off-by: Stéphane Graber <stgra...@ubuntu.com> --- doc/networks.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/doc/networks.md b/doc/networks.md index 3b7b268843..87f9fb5bb2 100644 --- a/doc/networks.md +++ b/doc/networks.md @@ -118,7 +118,6 @@ lxc network set <network> <key> <value> ``` ### Integration with systemd-resolved - If the system running LXD uses systemd-resolved to perform DNS lookups, it's possible to notify resolved of the domain(s) that LXD is able to resolve. This requires telling resolved the @@ -159,6 +158,10 @@ exists, so you must repeat this command each reboot and after LXD is restarted. Also note this only works if the bridge `dns.mode` is not `none`. +Note that depending on the `dns.domain` used, you may need to disable +DNSSEC in resolved to allow for DNS resolution. This can be done through +the `DNSSEC` option in `resolved.conf`. + ### IPv6 prefix size For optimal operation, a prefix size of 64 is preferred. Larger subnets (prefix smaller than 64) should work properly too but
_______________________________________________ lxc-devel mailing list lxc-devel@lists.linuxcontainers.org http://lists.linuxcontainers.org/listinfo/lxc-devel
