From 5939525faf2fd392909c4e46768d152f25590df2 Mon Sep 17 00:00:00 2001
From: Zsombor Welker <fedora@zdeqb.com>
Date: Sun, 25 Apr 2021 17:57:39 +0200
Subject: [PATCH] Explicitly disable DNSSEC in systemd-resolved

---
 src/systemd_resolved_docker/dockerdnsconnector.py | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/src/systemd_resolved_docker/dockerdnsconnector.py b/src/systemd_resolved_docker/dockerdnsconnector.py
index 70aa2fb..5cfb002 100644
--- a/src/systemd_resolved_docker/dockerdnsconnector.py
+++ b/src/systemd_resolved_docker/dockerdnsconnector.py
@@ -37,6 +37,7 @@ class DockerDNSConnector:
 
         for address in listen_addresses:
             server = DNSServer(resolver, address=address, port=listen_port)
+            server.thread_name = "%s:%s" % (address, listen_port)
             self.servers.append(server)
             self.handler.log("DNS server listening on %s:%s" % (address, listen_port))
 
@@ -46,7 +47,7 @@ class DockerDNSConnector:
         self.watcher.start()
 
         for server in self.servers:
-            server.thread = threading.Thread(target=server.server.serve_forever)
+            server.thread = threading.Thread(target=server.server.serve_forever, name=server.thread_name)
             server.thread.start()
 
         self.handler.on_start()
@@ -89,10 +90,11 @@ class DockerDNSConnector:
 
                 manager.SetLinkDomains(ifindex, domains)
                 manager.SetLinkDNS(ifindex, ips)
+                manager.SetLinkDNSSEC(ifindex, "no")
             else:
                 manager.RevertLink(ifindex)
 
-        self.resolved_registered = enabled
+            self.resolved_registered = enabled
 
     def handle_hosts(self, hosts):
         zone = []
-- 
GitLab