this post was submitted on 20 Oct 2023
145 points (89.6% liked)

Linux

48136 readers
1038 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 5 years ago
MODERATORS
AgreeableLandscape@lemmy.ml
nooter692@lemmy.ml
MarcellusDrum@lemmy.ml
cypherpunks@lemmy.ml
cyclohexane@lemmy.ml
d3Xt3r@lemmy.nz
145
Linux DNS settings is a total mess (lemdro.id)
submitted 1 year ago by mfat@lemdro.id to c/linux@lemmy.ml
68 comments fedilink hide all child comments
 

I recently tried to enable system-wide DNS over https on Fedora. To do so I had to to some research and found out how comfusing it is for the average user (and even experienced users) to change the settings. In fact there are multiple backends messing with system DNS at the same time.

Most major Linux distributions use systemd-resolved for DNS but there is no utility for changing its configuration.

The average user would still try to change DNS settings by editing /etc/relov.conf (which is overwritten and will not survive reboots) or changing settings in Network Manager.

Based on documentation of systemd-resolved, the standard way of adding custom DNS servers is putting so-called 'drop-in' files in /etc/systemd/resolved.conf.d directory, especially when you want to use DNS-over-TLS or DNS-over-https.

Modern browsers use their buit-in DNS settings which adds to the confusion.

I think this is one area that Linux needs more work and more standardization.

How do you think it should be fixed?

you are viewing a single comment's thread
view the rest of the comments
[–] WindowsEnjoyer@sh.itjust.works 55 points 1 year ago (1 children)

The average user would still try to change DNS settings by editing /etc/relov.conf (which is overwritten and will not survive reboots) or changing settings in Network Manager.

No. The average user would use NetworkManager GUI integrated into DE.

[–] mfat@lemdro.id -1 points 1 year ago (1 children)

Network Manager doesn't support DOH.

[–] NanoooK@sh.itjust.works 5 points 1 year ago (1 children)

The average user barely know what is DNS, so DoH...

[–] netchami@sh.itjust.works 2 points 1 year ago

Android supports DoT, and it can be easily configured by the user. They call it 'Private DNS' though, in order to not confuse users with terminology like 'DNS-over-TLS'. Also most browsers support DoH, Chromium just calls it 'Secure DNS', again, in order not to confuse users. NetworkManager could definitely implement DNSCrypt, DoT and DoH, maybe even DoQ and just call it 'Encrypted DNS' and add a toggle to choose the protocol.