diff options
| author | Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> | 2020-04-15 18:05:39 +0200 |
|---|---|---|
| committer | Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> | 2020-04-16 12:13:39 +0200 |
| commit | 44b7aedbde8b30825ee1dbf47346d21007a1a417 (patch) | |
| tree | 48e2a6d1ea898a30de9633cedf3746dcf29cf7a3 /man/nss-resolve.xml | |
| parent | 3cfb7cc50771ca6ee579217c1194534313f03d8d (diff) | |
| download | systemd-44b7aedbde8b30825ee1dbf47346d21007a1a417.tar.gz | |
man: move "files" after "resolve" in the suggested configuration
resolved caches files, so we should move nss-files after nss-resolve
to speed up local access (and yes, people like to have thousands of
lines in /etc/hosts).
See https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/LCX6YXLM62QEYJSOLJBWXXVXTZVL73GI/
for the background.
Diffstat (limited to 'man/nss-resolve.xml')
| -rw-r--r-- | man/nss-resolve.xml | 19 |
1 files changed, 10 insertions, 9 deletions
diff --git a/man/nss-resolve.xml b/man/nss-resolve.xml index e4ea4e1898..5c8b745881 100644 --- a/man/nss-resolve.xml +++ b/man/nss-resolve.xml @@ -34,14 +34,15 @@ name resolution service. It replaces the <command>nss-dns</command> plug-in module that traditionally resolves hostnames via DNS.</para> - <para>To activate the NSS module, add <literal>resolve</literal> to the line starting with - <literal>hosts:</literal> in <filename>/etc/nsswitch.conf</filename>. Specifically, it is recommended to place - <literal>resolve</literal> early in <filename>/etc/nsswitch.conf</filename>'s <literal>hosts:</literal> line (but - after the <literal>files</literal> or <literal>mymachines</literal> entries), right before the - <literal>dns</literal> entry if it exists, followed by <literal>[!UNAVAIL=return]</literal>, to ensure DNS queries - are always routed via - <citerefentry><refentrytitle>systemd-resolved</refentrytitle><manvolnum>8</manvolnum></citerefentry> if it is - running, but are routed to <command>nss-dns</command> if this service is not available.</para> + <para>To activate the NSS module, add <literal>resolve [!UNAVAIL=return]</literal> to the line starting + with <literal>hosts:</literal> in <filename>/etc/nsswitch.conf</filename>. Specifically, it is + recommended to place <literal>resolve</literal> early in <filename>/etc/nsswitch.conf</filename>'s + <literal>hosts:</literal> line. It should be before the <literal>files</literal> entry, since + <filename>systemd-resolved</filename> supports <filename>/etc/hosts</filename> internally, but with + caching. To the contrary, it should be after <literal>mymachines</literal>, to give hostnames given to + local VMs and containers precedence over names received over DNS. Finally, we recommend placing + <literal>dns</literal> somewhere after <literal>resolve</literal>, to fall back to + <command>nss-dns</command> if <filename>systemd-resolved.service</filename> is not available.</para> <para>Note that <command>systemd-resolved</command> will synthesize DNS resource records in a few cases, for example for <literal>localhost</literal> and the @@ -66,7 +67,7 @@ group: compat mymachines systemd shadow: compat -hosts: files mymachines <command>resolve [!UNAVAIL=return]</command> dns myhostname +hosts: mymachines <command>resolve [!UNAVAIL=return]</command> files dns myhostname networks: files protocols: db files |