X-Git-Url: http://git.ipfire.org/?a=blobdiff_plain;f=man%2Fresolvectl.xml;h=e2d00b9cf08c250598bb6138606c61b96ce50c2f;hb=38b38500c6011d6bc59171ee23d92fba46bd131e;hp=d4c04a1e32497f018974cf5e85de65752c21a5a6;hpb=9725f1a10f80f5e0ae7d9b60547458622aeb322f;p=thirdparty%2Fsystemd.git diff --git a/man/resolvectl.xml b/man/resolvectl.xml index d4c04a1e324..e2d00b9cf08 100644 --- a/man/resolvectl.xml +++ b/man/resolvectl.xml @@ -45,7 +45,138 @@ interface the data was discovered. It also contains information on whether the information could be authenticated. All data for which local DNSSEC validation succeeds is considered authenticated. Moreover all data originating from local, trusted sources is also reported authenticated, including resolution of the local host - name, the localhost host name or all data from /etc/hosts. + name, the localhost hostname or all data from /etc/hosts. + + + + Commands + + + + query HOSTNAME|ADDRESS… + + Resolve domain names, IPv4 and IPv6 addresses. + + + + service + [[NAME] TYPE] + DOMAIN + + Resolve DNS-SD and + SRV services, depending on the specified list of parameters. + If three parameters are passed the first is assumed to be the DNS-SD service name, the second the SRV service type, + and the third the domain to search in. In this case a full DNS-SD style SRV and TXT lookup is executed. If only two + parameters are specified, the first is assumed to be the SRV service type, and the second the domain to look in. In + this case no TXT RR is requested. Finally, if only one parameter is specified, it is assumed to be a domain name, + that is already prefixed with an SRV type, and an SRV lookup is done (no TXT). + + + + openpgp EMAIL@DOMAIN… + + Query PGP keys stored as OPENPGPKEY + resource records. Specified e-mail addresses are converted to the corresponding DNS domain name, and any + OPENPGPKEY keys are printed. + + + + tlsa + [FAMILY] + DOMAIN[:PORT]… + + Query TLS public keys stored as TLSA + resource records. A query will be performed for each of the specified names prefixed with the port and family + (_port._family.domain). + The port number may be specified after a colon (:), otherwise 443 will be used + by default. The family may be specified as the first argument, otherwise tcp will be used. + + + + status [LINK…] + + Shows the global and per-link DNS settings currently in effect. If no command is specified, + this is the implied default. + + + + statistics + + Shows general resolver statistics, including information whether DNSSEC is + enabled and available, as well as resolution and validation statistics. + + + + reset-statistics + + Resets the statistics counters shown in statistics to zero. + This operation requires root privileges. + + + + flush-caches + + Flushes all DNS resource record caches the service maintains locally. This is mostly equivalent + to sending the SIGUSR2 to the systemd-resolved + service. + + + + reset-server-features + + Flushes all feature level information the resolver learnt about specific servers, and ensures + that the server feature probing logic is started from the beginning with the next look-up request. This is + mostly equivalent to sending the SIGRTMIN+1 to the systemd-resolved + service. + + + + dns [LINK [SERVER…]] + domain [LINK [DOMAIN…]] + default-route [LINK [BOOL…]] + llmnr [LINK [MODE]] + mdns [LINK [MODE]] + dnssec [LINK [MODE]] + dnsovertls [LINK [MODE]] + nta [LINK [DOMAIN…]] + + + Get/set per-interface DNS configuration. These commands may be used to configure various DNS + settings for network interfaces. These commands may be used to inform + systemd-resolved or systemd-networkd about per-interface DNS + configuration determined through external means. The dns command expects IPv4 or + IPv6 address specifications of DNS servers to use. The domain command expects + valid DNS domains, possibly prefixed with ~, and configures a per-interface + search or route-only domain. The default-route command expects a boolean + parameter, and configures whether the link may be used as default route for DNS lookups, i.e. if it + is suitable for lookups on domains no other link explicitly is configured for. The + llmnr, mdns, dnssec and + dnsovertls commands may be used to configure the per-interface LLMNR, + MulticastDNS, DNSSEC and DNSOverTLS settings. Finally, nta command may be used + to configure additional per-interface DNSSEC NTA domains. + + Commands dns, domain and nta can take + a single empty string argument to clear their respective value lists. + + For details about these settings, their possible values and their effect, see the + corresponding settings in + systemd.network5. + + + + + revert LINK + + Revert the per-interface DNS configuration. If the DNS configuration is reverted all + per-interface DNS setting are reset to their defaults, undoing all effects of dns, + domain, default-route, llmnr, + mdns, dnssec, dnsovertls, + nta. Note that when a network interface disappears all configuration is lost + automatically, an explicit reverting is not necessary in that case. + + + + @@ -158,144 +289,27 @@ - Commands - - - - - - Resolve domain names, IPv4 and IPv6 addresses. - - - - - - Resolve DNS-SD and - SRV services, depending on the specified list of parameters. - If three parameters are passed the first is assumed to be the DNS-SD service name, the second the SRV service type, - and the third the domain to search in. In this case a full DNS-SD style SRV and TXT lookup is executed. If only two - parameters are specified, the first is assumed to be the SRV service type, and the second the domain to look in. In - this case no TXT RR is requested. Finally, if only one parameter is specified, it is assumed to be a domain name, - that is already prefixed with an SRV type, and an SRV lookup is done (no TXT). - - - - - - Query PGP keys stored as OPENPGPKEY - resource records. Specified e-mail addresses are converted to the corresponding DNS domain name, and any - OPENPGPKEY keys are printed. - - - - - - Query TLS public keys stored as TLSA - resource records. A query will be performed for each of the specified names prefixed with the port and family - (_port._family.domain). - The port number may be specified after a colon (:), otherwise 443 will be used - by default. The family may be specified as the first argument, otherwise tcp will be used. - - - - - - Shows the global and per-link DNS settings in currently in effect. If no command is specified, - this is the implied default. - - - - - - Shows general resolver statistics, including information whether DNSSEC is - enabled and available, as well as resolution and validation statistics. - - - - - - Resets the statistics counters shown in to zero. - This operation requires root privileges. - - - - - - Flushes all DNS resource record caches the service maintains locally. This is mostly equivalent - to sending the SIGUSR2 to the systemd-resolved - service. - - - - - - Flushes all feature level information the resolver learnt about specific servers, and ensures - that the server feature probing logic is started from the beginning with the next look-up request. This is - mostly equivalent to sending the SIGRTMIN+1 to the systemd-resolved - service. - - - - - - - - - - - - - - Get/set per-interface DNS configuration. These commands may be used to configure various DNS settings - for network interfaces that aren't managed by - systemd-networkd.service8. (These - commands will fail when used on interfaces that are managed by systemd-networkd, please - configure their DNS settings directly inside the .network files instead.) These commands - may be used to inform systemd-resolved about per-interface DNS configuration determined - through external means. The command expects IPv4 or IPv6 address specifications of DNS - servers to use. The command expects valid DNS domains, possibly prefixed with - ~, and configures a per-interface search or route-only domain. The - command expects a boolean parameter, and configures whether the link may be - used as default route for DNS lookups, i.e. if it is suitable for lookups on domains no other link explicitly - is configured for. The , , and - commands may be used to configure the per-interface LLMNR, MulticastDNS, DNSSEC - and DNSOverTLS settings. Finally, command may be used to configure additional - per-interface DNSSEC NTA domains. - - Options , and can take - a single empty string argument to clear their respective value lists. - - For details about these settings, their possible values and their effect, see the corresponding options in - systemd.network5. - - - - - - - Revert the per-interface DNS configuration. If the DNS configuration is reverted all - per-interface DNS setting are reset to their defaults, undoing all effects of , - , , , , - , , . Note that when a network interface - disappears all configuration is lost automatically, an explicit reverting is not necessary in that - case. - - - - - - - Compatibility with <citerefentry><refentrytitle>resolvconf</refentrytitle><manvolnum>8</manvolnum></citerefentry> + Compatibility with + <citerefentry project="debian"><refentrytitle>resolvconf</refentrytitle><manvolnum>8</manvolnum></citerefentry> resolvectl is a multi-call binary. When invoked as resolvconf (generally achieved by means of a symbolic link of this name to the resolvectl binary) it - is run in a limited resolvconf8 + is run in a limited + resolvconf8 compatibility mode. It accepts mostly the same arguments and pushes all data into systemd-resolved.service8, similar to how and commands operate. Note that systemd-resolved.service is the only supported backend, which is different from other - implementations of this command. Note that not all operations supported by other implementations are supported - natively. Specifically: + implementations of this command. + + /etc/resolv.conf will only be updated with servers added with this command + when /etc/resolv.conf is a symlink to + /run/systemd/resolve/resolv.conf, and not a static file. See the discussion of + /etc/resolv.conf handling in + systemd-resolved.service8. + + + Not all operations supported by other implementations are supported natively. Specifically: @@ -356,7 +370,9 @@ - See resolvconf8 for details on this command line options. + See + resolvconf8 + for details on those command line options.