domain:"Configure per-interface search and route-only domains"
flush-caches:"Flushes all DNS resource record caches the service maintains locally"
llmnr:"Configure per-interface llmnr enabled status"
+ log-level:"Get/set logging threshold for systemd-resolved"
mdns:"Configure per-interface mdns enabled status"
+ monitor:"Monitor DNS queries"
nta:"Configure per-interface nta domains"
openpgp:"Retrieve openpgp keys for an email"
query:"Resolve domain names, IPv4 and IPv6 addresses"
revert:"Revert the per-interfce DNS configuration"
service:"Resolve DNS-SD and SRV services"
show-cache:"Show the current cache contents"
+ show-server-state:"Show servers state"
statistics:"Show resolver statistics"
status:"Show the global and per-link DNS settings currently in effect"
tlsa:"Query tlsa public keys stored as TLSA resource records"
'--service-address=[Do not resolve address for services]:BOOL:(yes no)' \
'--service-txt=[Do not resolve TXT records for services]:BOOL:(yes no)' \
'--cname=[Do not follow CNAME redirects]:BOOL:(yes no)' \
+ '--validate=[Do not allow DNSSEC validation]:BOOL:(yes no)' \
+ '--synthesize=[Do not allow synthetic response]:BOOL:(yes no)' \
+ '--cache=[Do not allow response from cache]:BOOL:(yes no)' \
+ '--stale-data=[Do not allow response from cache with stale data]:BOOL:(yes no)' \
+ '--zone=[Do not allow response from locally registered mDNS/LLMNR records]:BOOL:(yes no)' \
+ '--trust-anchor=[Do not allow response from local trust anchor]:BOOL:(yes no)' \
+ '--network=[Do not allow response from network]:BOOL:(yes no)' \
'--search=[Do not use search domains]:BOOL:(yes no)' \
+ '--raw=[Dump the answer as binary data]:RAW:(payload packet)' \
+ '--json=[Output as JSON]:JSON:(pretty short off)' \
'*::default: _resolvectl_commands'