I found this issue after filling in my ticket 2170823, and I'll repeat a question asked there: since there is a dns-root-data package providing the same information in the required format, why don't reuse it in systemd-resolved? Other Ubuntu packages with validating DNS resolvers (unbound, knot, bind9) rely on it. Even if one wouldn't want to rely on the filesystem data early in the boot having an updated source of data later would help the system to keep up-to-date.
-- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2170538 Title: Ubuntu 24.04: systemd-resolved DNSSEC fails after root KSK rollover; built-in trust anchor lacks key 38696 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/2170538/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
