Temporary failure in name resolution

19 views
Skip to first unread message

Rune Philosof

unread,
Apr 19, 2022, 9:17:58 AM4/19/22
to qubes-users
After upgrading the following, I lost dns functionality in sys-firewall and all vms using sys-firewall.

Using tcpdump on sys-net, it does not seem to receive the dns query.

When I run `systemctl stop systemd-resolved` in an appvm, dns works again.

(I removed some clearly uninteresting packages)
```
================================================================================
 Package                            Arch   Version               Repo      Size
================================================================================
Upgrading:
 babl                               x86_64 0.1.92-1.fc35         updates  533 k
 dhcp-client                        x86_64 12:4.4.3-2.fc35       updates  799 k
 dhcp-common                        noarch 12:4.4.3-2.fc35       updates  126 k
 evolution-data-server              x86_64 3.42.4-2.fc35         updates  2.2 M
 evolution-data-server-langpacks    noarch 3.42.4-2.fc35         updates  1.3 M
 gegl04                             x86_64 0.4.36-1.fc35         updates  3.0 M
 haveged                            x86_64 1.9.18-1.fc35         updates   74 k
 libsolv                            x86_64 0.7.22-1.fc35         updates  403 k
 nspr                               x86_64 4.32.0-6.fc35         updates  137 k
 nss                                x86_64 3.77.0-1.fc35         updates  691 k
 nss-softokn                        x86_64 3.77.0-1.fc35         updates  376 k
 nss-softokn-freebl                 x86_64 3.77.0-1.fc35         updates  323 k
 nss-sysinit                        x86_64 3.77.0-1.fc35         updates   20 k
 nss-util                           x86_64 3.77.0-1.fc35         updates   88 k
 ostree                             x86_64 2022.2-1.fc35         updates  229 k
 ostree-libs                        x86_64 2022.2-1.fc35         updates  424 k
 perl-CPAN                          noarch 2.33-1.fc35           updates  557 k
 pipewire                           x86_64 0.3.50-1.fc35         updates   39 k
 pipewire-alsa                      x86_64 0.3.50-1.fc35         updates   62 k
 pipewire-jack-audio-connection-kit x86_64 0.3.50-1.fc35         updates  135 k
 pipewire-libs                      x86_64 0.3.50-1.fc35         updates  1.5 M
 python3-tqdm                       noarch 4.64.0-1.fc35         updates  132 k
 rsync                              x86_64 3.2.3-9.fc35          updates  388 k
 systemd                            x86_64 249.11-1.fc35         updates  4.1 M
 systemd-libs                       x86_64 249.11-1.fc35         updates  603 k
 systemd-networkd                   x86_64 249.11-1.fc35         updates  523 k
 systemd-pam                        x86_64 249.11-1.fc35         updates  323 k
 systemd-resolved                   x86_64 249.11-1.fc35         updates  266 k
 systemd-udev                       x86_64 249.11-1.fc35         updates  1.8 M
 tzdata                             noarch 2022a-2.fc35          updates  432 k
 xorg-x11-xinit                     x86_64 1.4.0-14.fc35         updates   55 k
Installing dependencies:
 botan2                             x86_64 2.18.2-1.fc35         updates  1.9 M
 minizip                            x86_64 3.0.2-4.fc35          fedora    70 k
 perl-Digest-SHA1                   x86_64 2.13-34.fc35          fedora    52 k
 perl-Module-Signature              noarch 0.87-5.fc35           fedora    82 k
```

Demi Marie Obenour

unread,
Apr 19, 2022, 10:39:32 AM4/19/22
to Rune Philosof, qubes-users
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
This is a known problem with Qubes OS and systemd-resolved. It’s fixed
in the current-testing repository.

- --
Sincerely,
Demi Marie Obenour (she/her/hers)
Invisible Things Lab
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEdodNnxM2uiJZBxxxsoi1X/+cIsEFAmJeyZ4ACgkQsoi1X/+c
IsGzMRAAgFE+70bAIjg0DMDjtJYttAjt8iYvXG7/UKUqHwRk0tFZSAzrHJyqN3mn
bOuXwhV4lCfASiRiop8wuvIabkbtUFzV9fbyganzu2WwWdEphlQVXDGv1SJgyhmG
PW1IwsqABS0FA2vMvjrAgvsObwNB+ITprM8WgMTWLExK/zXnxIlvLC4QzB3B7sDC
XBfj2ARAqKBEh0hUa98tt5E0w6BDpQiTIWMI1nmZxgHzq04+IVZxc+PXAT9V20IY
yoSWX68UG75Jz6O/C1ieiZGzefcK8cL6Of8L0YYs2tDrF0eRfcB/RxUTd3Wx6hK4
0eg0TrNOpUUJXrD+zxyg48sWpkVy2BopUOE1pZnvNm1aNID+PvCDsOUJOqPVfmlC
xm2yZbybO+4Eu8/YAjeoh9/8zJdoor6HLVara6B3G3gx0KWjWRh9FFbNQeJQ6B0p
igQN823F4RI/G3p4WGu7BSF8QvGErW4OiRgCPLp9LTLi8gut9Sg51eLRxvsz+EfC
euMpJziyZyXVSK7ffnF0jDQeiNkbeOeOmXhtdyWxqjNLBXF/OOTUgPFtsbYHn5n0
CaqPut/INo89QfnWxnez5HIoQy9g4+yrCkH4jdc6WeAu+vSgAChT8/IBgB+l0eOl
coWyuITzN1Tt+P07cLfv5D3bzwNFNIh7H02gCdFSFUtLIlhnMyI=
=2S01
-----END PGP SIGNATURE-----

Ludovic

unread,
Apr 20, 2022, 2:37:18 PM4/20/22
to qubes...@googlegroups.com
On 19/04/2022 13:17, 'Rune Philosof' via qubes-users wrote:
> After upgrading the following, I lost dns functionality in
> sys-firewall and all vms using sys-firewall.
>
> Using tcpdump on sys-net, it does not seem to receive the dns query.
>
> When I run `systemctl stop systemd-resolved` in an appvm, dns works again.
>
It's the https://github.com/QubesOS/qubes-issues/issues/7429 solved
issue, but the package is not yet in the stable repository (
https://github.com/QubesOS/updates-status/issues/2901 is in the
current-testing repository).

--

Ludovic

Reply all
Reply to author
Forward
0 new messages