summaryrefslogtreecommitdiffstats
path: root/man/systemd-resolved.service.xml (follow)
Commit message (Collapse)AuthorAgeFilesLines
* man: asorted fixesYu Watanabe8 days1-4/+4
| | | | Closes #35307.
* man: drop whitespace from final <programlisting> linesZbigniew Jędrzejewski-Szmek2024-11-081-1/+1
| | | | | | In the troff output, this doesn't seem to make any difference. But in the html output, the whitespace is sometimes preserved, creating an additional gap before the following content. Drop it everywhere to avoid this.
* man: link up D-Bus API docs from daemon man pagesLennart Poettering2024-11-051-0/+1
| | | | | | | | | | Let's systematically make sure that we link up the D-Bus interfaces from the daemon man pages once in prose and once in short form at the bottom ("See Also"), for all daemons. Also, add reverse links at the bottom of the D-Bus API docs. Fixes: #34996
* man: update documents of "_outbound" addressesYu Watanabe2024-10-151-5/+6
| | | | | Follow-up for 4adf2653e2a68d4d593b46734fd9e24721a8d449. Addresses https://github.com/systemd/systemd/issues/34739#issuecomment-2412904739.
* man: reword about default route for DNS trafficYu Watanabe2024-08-261-14/+14
| | | | | | | DefaultRoute is a D-Bus property, not a valid setting name in .network files nor resolved.conf. Whether a link is the default route or not is configured with DNSDefaultRoute= setting in .network files.
* resolved: demote the fallback dns serversRonan Pigott2024-08-211-2/+3
| | | | | | | | | | | This softens the behavior originally introduced in eded61e410df to apply only to the fallback dns servers. The intent is that the global FallbackDNS (instead of DNS) can now be used in conjunction with the per-link dns, providing a fallback behavior without introducing a scope overlap. References: eded61e410df (resolved: demote the global unicast scope, 2024-08-19)
* Revert "resolved: demote the global unicast scope"Ronan Pigott2024-08-211-4/+1
| | | | | | | | This commit may have been a breaking change for sd-resolved foreign resolv.conf mode, where a legacy network management daemon directly modifies resolv.conf and sd-resolved consumes that. This reverts commit eded61e410dfa6c16ae68cb624c58122fb18fd0e.
* resolved: demote the global unicast scopeRonan Pigott2024-08-201-1/+4
| | | | | | | | | | | | This will greatly reduce the number of cases where the global unicast scope overlaps with link scopes configured as default-route, making it feasible to use the global DNS setting in conjunction with per-link dns servers configured by the network. This change is preferred over demoting links to default-route=no where the user prefers to use the network provided DNS servers, and I expect it is non-disruptive in that it should not degrade the efficacy of any existing configuration.
* resolved: support reloading configuration at runtimeLuca Boccassi2024-03-261-0/+10
| | | | | | | | | | | Drop connections and caches and reload config from files, to allow for low-interruptions updates, and hook up to the usual SIGHUP and ExecReload=. Mark servers and services configured directly via D-Bus so that they can be kept around, and only the configuration file settings are dropped and reloaded. Fixes https://github.com/systemd/systemd/issues/17503 Fixes https://github.com/systemd/systemd/issues/20604
* resolved: mention the Varlink interface of resolvedLennart Poettering2024-03-041-1/+6
| | | | This is ready from prime-time, hence mention it.
* man: fix references to systemd.exec(5)Lennart Poettering2024-01-111-1/+1
| | | | | | For some reason the section for the systemd.exec man page was added incorrectly and then copypasted everywhere else incorrectly too. Let's fix that.
* man: use same version in public and system ident.David Tardon2023-12-251-1/+1
|
* man: use <simplelist> for 'See also' sectionsDavid Tardon2023-12-231-11/+11
| | | | | This is just a slight markup improvement; there should be no difference in rendering.
* man: document the order in which we talk to DNS serversLennart Poettering2023-10-201-1/+14
|
* man: add version infoAbderrahim Kitouni2023-08-291-5/+15
| | | | | | | | This tries to add information about when each option was added. It goes back to version 183. The version info is included from a separate file to allow generating it, which would allow more control on the formatting of the final output.
* man: Add xinclude namespaceAbderrahim Kitouni2023-08-281-1/+2
| | | | | This will be used by the next commit to add version information to the nodes.
* man: make sure credentials properly show up in directives indexLennart Poettering2023-07-041-1/+1
|
* creds: Add ImportCredential=Daan De Meyer2023-06-081-2/+2
| | | | | | ImportCredential= takes a credential name and searches for a matching credential in all the credential stores we know about it. It supports globs which are expanded so that all matching credentials are loaded.
* man: document which IP ports resolved listens on, and what forLennart Poettering2023-06-071-0/+21
| | | | Fixes: #23045
* resolved: read DNS conf also from creds and kernel cmdlineLennart Poettering2023-01-051-0/+43
| | | | | | | | | | | Note that this drops ProtectProc=invisible from systemd-resolved.service. This is done because othewise access to the booted "kernel" command line is not necessarily available. That's because in containers we want to read /proc/1/cmdline for that. Fixes: #24103
* resolved: introduce the _localdnsstub and _localdnsproxy special hostnames ↵Lennart Poettering2022-11-251-0/+6
| | | | | | | | | for 127.0.0.54 + 127.0.0.53 Let's give these special IP addresses names. After all name resolution is our job here. Fixes: #23623
* man: Fix typocodefiles2022-07-231-5/+5
|
* resolved: add "proxy-only" stub on 127.0.0.54Lennart Poettering2021-11-221-3/+10
| | | | | | | | | | | | | | | | | | | | This beefs up the DNS stub logic to listen on two IP addresses: 127.0.0.53 (as before) + 127.0.0.54 (new). When the latter is contact our stub will operate in "bypass" mode only, i.e we'll try to pass DNS requests as unmodified upstream as we can (and not do mDNS/LLMNR and such, also no DNSSEC validation – but we'll still do DNS-over-TLS wrapping). This is supposed to be useful for container environments or tethering: this stub could be exposed (via NAT redirect) to clients of this system and we'll try to stay out of the way with doing too much DNS magic ourselves, but still expose whatever the current DNS server is from upstream under a stable address/port. How to use this: # iptables -t nat -I PREROUTING -p udp -i <interface> --dport 53 -j DNAT --to 127.0.0.54:53 # echo 1 > /proc/sys/net/ipv4/conf/<interface>/route_localnet
* man: fix assorted issues reported by the manpage-l10n projectZbigniew Jędrzejewski-Szmek2021-07-271-1/+1
| | | | Fixes #20297.
* Minor typo (#20254)rene2021-07-201-1/+1
| | | Correct resoulution with resolution.
* Update systemd-resolved.service.8 helpplattrap2021-06-181-1/+1
| | | | Text currently refers to `/etc/nsswitch.conf` where it should refer to `/etc/resolv.conf`. This is in the context of defining a nameserver IP and search domains.
* man: clarify that global search domains apply to global servers, not all ↵Zbigniew Jędrzejewski-Szmek2021-06-111-7/+8
| | | | | | interfaces Fixes #19257.
* man: document _outboundLennart Poettering2021-04-231-0/+7
|
* man: add footnote explaining why "localhost" query is sent out to the networkZbigniew Jędrzejewski-Szmek2021-03-011-5/+20
| | | | | | | I tried to make the explanation brief, but this isn't so easy. It seems better to push this out to a footnote instead of the main text. Fixes #16584.
* man: move motivational explanation to footnoteZbigniew Jędrzejewski-Szmek2021-03-011-7/+7
|
* man: fix links to various pagesZbigniew Jędrzejewski-Szmek2021-02-191-4/+4
| | | | nss-dns doesn't have any man page that I could find.
* man: various typos and other small issuesZbigniew Jędrzejewski-Szmek2021-01-291-1/+1
| | | | Fixes #18397.
* man: synthetize(d) -> synthesize(d)Yu Watanabe2020-12-081-4/+4
|
* license: LGPL-2.1+ -> LGPL-2.1-or-laterYu Watanabe2020-11-091-1/+1
|
* tree-wide: fix typos found by Fossies codespell reportYu Watanabe2020-10-241-2/+2
|
* man: document differences between nss-resolve and nss-dnsZbigniew Jędrzejewski-Szmek2020-10-221-2/+60
| | | | | | https://bugzilla.redhat.com/show_bug.cgi?id=1889012 https://serverfault.com/questions/626612/dns-just-started-resolving-my-server-prod-addresses-to-127-0-53-53 https://serverfault.com/questions/649352/what-are-the-security-implications-of-the-allow-dns-suffix-appending-to-unquali
* man/systemd-resolved: reword the description of query a bitZbigniew Jędrzejewski-Szmek2020-10-221-73/+72
| | | | | | | | | | The phrase "routing domains" is used to mean both route-only domains and search domains. Route-only domains are always called like that, and not just "route domains". Some paragraphs are reordered to describe synthetisized records first, then LLMNR, then various ways quries are routed. Fixes #8928, hopefully.
* man,units: link to the new dbus-api man pagesZbigniew Jędrzejewski-Szmek2020-09-301-3/+3
|
* man: document the new optionZbigniew Jędrzejewski-Szmek2020-06-181-8/+10
| | | | Also correct "stub resolver" → "systemd-resolved" in one other option.
* man: add description of org.freedesktop.LogControl1Zbigniew Jędrzejewski-Szmek2020-05-051-0/+2
| | | | | | I'm not sure if the LogTarget property is sufficiently general to be made into a property that can be generally implemented. It is very closely tied to the internal systemd logic. The other two seem fine thoough.
* man: add a description of handling of single-label namesZbigniew Jędrzejewski-Szmek2020-04-231-29/+54
| | | | | | | | | | | | | | | | It turns out that our man page didn't describe the handling of single-label names almost at all. This probably adds to the confusion regarding the subject. So let's first describe what our current implementation is doing. Quoting https://www.iab.org/documents/correspondence-reports-documents/2013-2/iab-statement-dotless-domains-considered-harmful/: > Applications and platforms that apply a suffix search list to a single-label > name are in conformance with IETF standards track RFCs. Furthermore, > applications and platforms that do not query DNS for a TLD are in conformance > with IETF standards track recommendations Current behaviour is in line with that recommendation. For #13763.
* tree-wide: use "hostname" spelling everywhereZbigniew Jędrzejewski-Szmek2020-04-211-3/+3
| | | | | | | | It's not that I think that "hostname" is vastly superior to "host name". Quite the opposite — the difference is small, and in some context the two-word version does fit better. But in the tree, there are ~200 occurrences of the first, and >1600 of the other, and consistent spelling is more important than any particular spelling choice.
* man: reindent nss-resolve(8)Zbigniew Jędrzejewski-Szmek2020-04-201-145/+154
|
* man: import org.freedesktop.resolve1(3) from the wikiZbigniew Jędrzejewski-Szmek2020-04-161-5/+6
|
* codespell: fix spelling errorsBen Boeckel2019-04-291-1/+1
|
* man: use same header for all filesZbigniew Jędrzejewski-Szmek2019-03-141-1/+1
| | | | | | | The "include" files had type "book" for some raeason. I don't think this is meaningful. Let's just use the same everywhere. $ perl -i -0pe 's^..DOCTYPE (book|refentry) PUBLIC "-//OASIS//DTD DocBook XML V4.[25]//EN"\s+"http^<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"\n "http^gms' man/*.xml
* man: standarize on one-line license headerZbigniew Jędrzejewski-Szmek2019-03-141-4/+1
| | | | | | No need to waste space, and uniformity is good. $ perl -i -0pe 's|\n+<!--\s*SPDX-License-Identifier: LGPL-2.1..\s*-->|\n<!-- SPDX-License-Identifier: LGPL-2.1+ -->|gms' man/*.xml
* man: flush-caches and reset-server-features are commands for resolvectl (#11877)Yu, Li-Yu2019-03-031-2/+2
|
* man: document new systemd-resolved.service(8) routing features in more detailLennart Poettering2018-12-211-7/+36
|
* man: split long section in systemd-resolved.service man page into threeLennart Poettering2018-12-211-4/+15
| | | | Also, do some minor updating.