Skip to content

fix(dns): avoid global resolver search domains - #2242

Open
stephenlclarke wants to merge 1 commit into
apple:mainfrom
stephenlclarke:upstream/dns-search-domain-pollution
Open

stephenlclarke wants to merge 1 commit into
apple:mainfrom
stephenlclarke:upstream/dns-search-domain-pollution

Conversation

@stephenlclarke

Copy link
Copy Markdown

Important

The commit is signed and verified.

Type of Change

  • Bug fix
  • New feature
  • Breaking change
  • Documentation update

Motivation and Context

Closes #1917.

Scoped files under /etc/resolver only need the domain, nameserver, and port. Removing the search directive prevents unrelated single-label hostnames from being expanded through a stopped container DNS server.

This supersedes #2129, which was closed after its fork branch was deleted; it is refreshed as one signed commit on current main (eee7ad097079cc3b02d5309ec10160143f2d0c6a).

Testing

  • Tested locally

  • Added/updated tests

  • Added/updated docs

  • swift test --filter HostDNSResolverTest: 5 tests passed.

  • git diff --check: passed.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Bug]: leftover /etc/resolver/containerization.* 'search' directive hangs ALL bare-hostname DNS lookups system-wide once apiserver stops

1 participant