1 <?xml version='
1.0'
?> <!--*- Mode: nxml; nxml-child-indent: 2; indent-tabs-mode: nil -*-->
2 <!DOCTYPE refentry PUBLIC
"-//OASIS//DTD DocBook XML V4.2//EN"
3 "http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd">
6 SPDX-License-Identifier: LGPL-2.1+
8 Copyright © 2013 Tom Gundersen
11 <refentry id=
"nss-resolve" conditional='ENABLE_RESOLVE'
>
14 <title>nss-resolve
</title>
15 <productname>systemd
</productname>
19 <contrib>Developer
</contrib>
20 <firstname>Lennart
</firstname>
21 <surname>Poettering
</surname>
22 <email>lennart@poettering.net
</email>
28 <refentrytitle>nss-resolve
</refentrytitle>
29 <manvolnum>8</manvolnum>
33 <refname>nss-resolve
</refname>
34 <refname>libnss_resolve.so
.2</refname>
35 <refpurpose>Provide hostname resolution via
<filename>systemd-resolved.service
</filename></refpurpose>
39 <para><filename>libnss_resolve.so
.2</filename></para>
43 <title>Description
</title>
45 <para><command>nss-resolve
</command> is a plug-in module for the GNU Name Service Switch (NSS) functionality of the
46 GNU C Library (
<command>glibc
</command>) enabling it to resolve host names via the
47 <citerefentry><refentrytitle>systemd-resolved
</refentrytitle><manvolnum>8</manvolnum></citerefentry> local network
48 name resolution service. It replaces the
<command>nss-dns
</command> plug-in module that traditionally resolves
49 hostnames via DNS.
</para>
51 <para>To activate the NSS module, add
<literal>resolve
</literal> to the line starting with
52 <literal>hosts:
</literal> in
<filename>/etc/nsswitch.conf
</filename>. Specifically, it is recommended to place
53 <literal>resolve
</literal> early in
<filename>/etc/nsswitch.conf
</filename>'s
<literal>hosts:
</literal> line (but
54 after the
<literal>files
</literal> or
<literal>mymachines
</literal> entries), right before the
55 <literal>dns
</literal> entry if it exists, followed by
<literal>[!UNAVAIL=return]
</literal>, to ensure DNS queries
57 <citerefentry><refentrytitle>systemd-resolved
</refentrytitle><manvolnum>8</manvolnum></citerefentry> if it is
58 running, but are routed to
<command>nss-dns
</command> if this service is not available.
</para>
60 <para>Note that
<command>systemd-resolved
</command> will synthesize DNS resource
61 records in a few cases, for example for
<literal>localhost
</literal> and the
63 <citerefentry><refentrytitle>systemd-resolved
</refentrytitle><manvolnum>8</manvolnum></citerefentry>
64 for the full list. This duplicates the functionality of
65 <citerefentry><refentrytitle>nss-myhostname
</refentrytitle><manvolnum>8</manvolnum></citerefentry>,
66 but it is still recommended (see examples below) to keep
67 <command>nss-myhostname
</command> configured in
68 <filename>/etc/nsswitch.conf
</filename>, to keep those names resolveable if
69 <command>systemd-resolved
</command> is not running.
</para>
73 <title>Example
</title>
75 <para>Here is an example
<filename>/etc/nsswitch.conf
</filename> file that enables
<command>nss-resolve
</command>
78 <programlisting>passwd: compat mymachines systemd
79 group: compat mymachines systemd
82 hosts: files mymachines
<command>resolve [!UNAVAIL=return]
</command> dns myhostname
90 netgroup: nis
</programlisting>
94 <title>See Also
</title>
96 <citerefentry><refentrytitle>systemd
</refentrytitle><manvolnum>1</manvolnum></citerefentry>,
97 <citerefentry><refentrytitle>systemd-resolved
</refentrytitle><manvolnum>8</manvolnum></citerefentry>,
98 <citerefentry><refentrytitle>nss-systemd
</refentrytitle><manvolnum>8</manvolnum></citerefentry>,
99 <citerefentry><refentrytitle>nss-myhostname
</refentrytitle><manvolnum>8</manvolnum></citerefentry>,
100 <citerefentry><refentrytitle>nss-mymachines
</refentrytitle><manvolnum>8</manvolnum></citerefentry>,
101 <citerefentry project='man-pages'
><refentrytitle>nsswitch.conf
</refentrytitle><manvolnum>5</manvolnum></citerefentry>