{"action":"created","issue":{"url":"https://api.github.com/repos/systemd/systemd/issues/6426","repository_url":"https://api.github.com/repos/systemd/systemd","labels_url":"https://api.github.com/repos/systemd/systemd/issues/6426/labels{/name}","comments_url":"https://api.github.com/repos/systemd/systemd/issues/6426/comments","events_url":"https://api.github.com/repos/systemd/systemd/issues/6426/events","html_url":"https://github.com/systemd/systemd/issues/6426","id":244845419,"number":6426,"title":"systemd-resolved has issues resolving Netflix hostnames","user":{"login":"devurandom","id":63082,"avatar_url":"https://avatars2.githubusercontent.com/u/63082?v=4","gravatar_id":"","url":"https://api.github.com/users/devurandom","html_url":"https://github.com/devurandom","followers_url":"https://api.github.com/users/devurandom/followers","following_url":"https://api.github.com/users/devurandom/following{/other_user}","gists_url":"https://api.github.com/users/devurandom/gists{/gist_id}","starred_url":"https://api.github.com/users/devurandom/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/devurandom/subscriptions","organizations_url":"https://api.github.com/users/devurandom/orgs","repos_url":"https://api.github.com/users/devurandom/repos","events_url":"https://api.github.com/users/devurandom/events{/privacy}","received_events_url":"https://api.github.com/users/devurandom/received_events","type":"User","site_admin":false},"labels":[{"id":268297924,"url":"https://api.github.com/repos/systemd/systemd/labels/has-pr","name":"has-pr","color":"009800","default":false},{"id":239898671,"url":"https://api.github.com/repos/systemd/systemd/labels/regression","name":"regression","color":"e11d21","default":false},{"id":219550421,"url":"https://api.github.com/repos/systemd/systemd/labels/resolve","name":"resolve","color":"d4c5f9","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":4,"created_at":"2017-07-22T12:49:04Z","updated_at":"2017-07-22T21:00:01Z","closed_at":null,"body":"### Submission type\r\n\r\n - Bug report\r\n\r\n### systemd version the issue has been seen with\r\n\r\n> 234\r\n\r\n### Used distribution\r\n\r\n> Gentoo\r\n\r\n### In case of bug report: Expected behaviour you didn't see\r\n\r\n> `ipv6_1-cxl0-c088.1.lhr004.ix.nflxvideo.net` gets resolved to `37.77.187.142` or `2a00:86c0:5:5::142`.\r\n\r\n### In case of bug report: Unexpected behaviour you saw\r\n\r\n> Primarily, Netflix does not work.\r\n\r\n> Further investigations, hinted at by error messages in the debug console of Chromium and in the network debugger of Firefox, revealed that `getent hosts ipv6_1-cxl0-c088.1.lhr004.ix.nflxvideo.net` has no output and returns error code 2, \"One or more supplied key could not be found in the database.\"\r\n\r\n> Looking at the logs of `systemd-resolved`, I see the following, which might be related:\r\n> ```\r\n> DNSSEC validation failed for question ix.nflxvideo.net IN SOA: failed-auxiliary\r\n> DNSSEC validation failed for question lhr004.ix.nflxvideo.net IN DS: failed-auxiliary\r\n> DNSSEC validation failed for question lhr004.ix.nflxvideo.net IN SOA: failed-auxiliary\r\n> DNSSEC validation failed for question 1.lhr004.ix.nflxvideo.net IN DS: failed-auxiliary\r\n> DNSSEC validation failed for question 1.lhr004.ix.nflxvideo.net IN SOA: failed-auxiliary\r\n> DNSSEC validation failed for question ipv61-cxl0-c088.1.lhr004.ix.nflxvideo.net IN DS: failed-auxiliary\r\n> DNSSEC validation failed for question ipv61-cxl0-c088.1.lhr004.ix.nflxvideo.net IN SOA: failed-auxiliary\r\n> DNSSEC validation failed for question ipv61-cxl0-c088.1.lhr004.ix.nflxvideo.net IN AAAA: failed-auxiliary\r\n> DNSSEC validation failed for question ipv61-cxl0-c088.1.lhr004.ix.nflxvideo.net IN A: failed-auxiliary\r\n> ```\r\n> Please note that the hostname that appears in the logs is not `ipv6_1-cxl0-c088.1.lhr004.ix.nflxvideo.net` but `ipv61-cxl0-c088.1.lhr004.ix.nflxvideo.net`, which might explain why the DNS query fails.\r\n\r\n### In case of bug report: Steps to reproduce the problem\r\n\r\nI enabled the use of systemd-resolved:\r\n\r\n1. `/etc/resolv.conf` is a symlink to `/run/systemd/resolve/resolv.conf`, which also makes NetworkManager feed systemd-resolved with the DNS server information.\r\n2. `resolve` is enabled as a resolver for `hosts` queries in libc's nsswitch:\r\n```\r\n# grep hosts: /etc/nsswitch.conf\r\nhosts:       files mdns_minimal [NOTFOUND=return] mymachines resolve [!UNAVAIL=return] dns myhostname\r\n```\r\n\r\nMy suspicion is that this is related to building systemd with libidn2.\r\n\r\nAny help on how to debug this further would be appreciated.\r\n\r\n```\r\n# emerge --info systemd\r\nPortage 2.3.6 (python 2.7.13-final-42, default/linux/amd64/13.0/desktop/plasma/systemd, gcc-6.3.0, glibc-2.24-r3, 4.12.1-gentoo x86_64)\r\n=================================================================\r\n                         System Settings\r\n=================================================================\r\nSystem uname: Linux-4.12.1-gentoo-x86_64-AMD_A10-7800_Radeon_R7,_12_Compute_Cores_4C+8G-with-gentoo-2.4.1\r\nKiB Mem:    14352856 total,   4036764 free\r\nKiB Swap:          0 total,         0 free\r\nTimestamp of repository gentoo: Sat, 22 Jul 2017 08:45:01 +0000\r\nsh bash 4.4_p12\r\nld GNU ld (Gentoo 2.28 p1.2) 2.28\r\nccache version 3.3.4 [disabled]\r\napp-shells/bash:          4.4_p12::gentoo\r\ndev-java/java-config:     2.2.0-r3::gentoo\r\ndev-lang/perl:            5.24.2::gentoo\r\ndev-lang/python:          2.7.13-r100::sage-on-gentoo, 3.4.6::gentoo, 3.5.3::gentoo\r\ndev-util/ccache:          3.3.4::gentoo\r\ndev-util/cmake:           3.9.0::gentoo\r\ndev-util/pkgconfig:       0.29.2::gentoo\r\nsys-apps/baselayout:      2.4.1::gentoo\r\nsys-apps/sandbox:         2.10-r4::gentoo\r\nsys-devel/autoconf:       2.13::gentoo, 2.69-r3::gentoo\r\nsys-devel/automake:       1.11.6-r2::gentoo, 1.13.4-r1::gentoo, 1.15.1::gentoo\r\nsys-devel/binutils:       2.28-r2::gentoo\r\nsys-devel/gcc:            5.4.0-r3::gentoo, 6.3.0::gentoo\r\nsys-devel/gcc-config:     1.8-r1::gentoo\r\nsys-devel/libtool:        2.4.6-r4::gentoo\r\nsys-devel/make:           4.2.1-r1::gentoo\r\nsys-kernel/linux-headers: 4.10::gentoo (virtual/os-headers)\r\nsys-libs/glibc:           2.24-r3::gentoo\r\nRepositories:\r\n\r\ngentoo\r\n    location: /var/cache/portage/gentoo\r\n    sync-type: rsync\r\n    sync-uri: rsync://rsync.de.gentoo.org/gentoo-portage\r\n    priority: -1000\r\n\r\natom\r\n    location: /var/lib/layman/atom\r\n    sync-type: laymansync\r\n    sync-uri: https://github.com/elprans/atom-overlay.git\r\n    masters: gentoo\r\n    priority: 50\r\n\r\nflatpak-overlay\r\n    location: /var/lib/layman/flatpak-overlay\r\n    sync-type: laymansync\r\n    sync-uri: git://github.com/fosero/flatpak-overlay.git\r\n    masters: gentoo\r\n    priority: 50\r\n\r\nkde\r\n    location: /var/lib/layman/kde\r\n    sync-type: laymansync\r\n    sync-uri: git://anongit.gentoo.org/proj/kde.git\r\n    masters: gentoo\r\n    priority: 50\r\n\r\nsage-on-gentoo\r\n    location: /var/lib/layman/sage-on-gentoo\r\n    sync-type: laymansync\r\n    sync-uri: git://github.com/cschwan/sage-on-gentoo.git\r\n    masters: gentoo science\r\n    priority: 50\r\n\r\nscience\r\n    location: /var/lib/layman/science\r\n    sync-type: laymansync\r\n    sync-uri: git://anongit.gentoo.org/proj/sci.git\r\n    masters: gentoo\r\n    priority: 50\r\n\r\nsteam-overlay\r\n    location: /var/lib/layman/steam-overlay\r\n    sync-type: laymansync\r\n    sync-uri: https://github.com/anyc/steam-overlay.git\r\n    masters: gentoo\r\n    priority: 50\r\n\r\nlocal\r\n    location: /var/cache/portage/local\r\n    masters: gentoo\r\n    priority: 100\r\n\r\nACCEPT_KEYWORDS=\"amd64 ~amd64\"\r\nACCEPT_LICENSE=\"* -@EULA\"\r\nCBUILD=\"x86_64-pc-linux-gnu\"\r\nCFLAGS=\"-pipe -O2 -march=bdver3\"\r\nCHOST=\"x86_64-pc-linux-gnu\"\r\nCONFIG_PROTECT=\"/etc /usr/lib64/libreoffice/program/sofficerc /usr/share/config /usr/share/gnupg/qualified.txt\"\r\nCONFIG_PROTECT_MASK=\"/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php7.1/ext-active/ /etc/php/cgi-php7.1/ext-active/ /etc/php/cli-php7.1/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c\"\r\nCXXFLAGS=\"-pipe -O2 -march=bdver3\"\r\nDISTDIR=\"/var/cache/portage/distfiles\"\r\nEMERGE_DEFAULT_OPTS=\"--keep-going --nospinner --verbose-conflicts\"\r\nFCFLAGS=\"-O2 -pipe\"\r\nFEATURES=\"assume-digests binpkg-logs buildsyspkg cgroup compressdebug config-protect-if-modified distlocks ebuild-locks fixlafiles ipc-sandbox merge-sync network-sandbox news parallel-fetch parallel-install preserve-libs protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync\"\r\nFFLAGS=\"-O2 -pipe\"\r\nGENTOO_MIRRORS=\"http://ftp.spline.inf.fu-berlin.de/mirrors/gentoo/ http://ftp-stud.hs-esslingen.de/pub/Mirrors/gentoo/ http://distfiles.gentoo.org\"\r\nLANG=\"en_GB.UTF-8\"\r\nLDFLAGS=\"-Wl,-O1 -Wl,--as-needed -Wl,--hash-style=gnu\"\r\nMAKEOPTS=\"-j3\"\r\nPKGDIR=\"/var/cache/portage/packages\"\r\nPORTAGE_CONFIGROOT=\"/\"\r\nPORTAGE_RSYNC_OPTS=\"--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git\"\r\nPORTAGE_TMPDIR=\"/var/tmp\"\r\nUSE=\"X a52 aac aacplus aacs acl acpi alsa amd64 appindicator appstream archive audit avahi bash-completion bdplus berkdb bluetooth bluray branding bs2b bzip2 cairo caps cdda cddb cdio cdr celt chromaprint cjk clang cli colord colorio conntrack cracklib crypt cups cxx d3d9 dbus declarative dirac djvu dri dts dvb dvd dvdr egl emboss encode epub exif fam fax fbcon ffmpeg fftw firefox fish-completion fits flac fontconfig fortran fribidi gdbm geoclue geolocation gif git glamor gles gmp google googledrive gpm gstreamer gtk gtk3 harfbuzz ibus iconv icu idn imlib inotify introspection ipv6 jemalloc jpeg jpeg2k kde kipi kwallet ladspa latex lcms ldap libidn2 libinput libnotify libproxy libsecret libsoxr lua_target_lua5-2 lv2 lz4 lzma lzo mad mercurial metis mjpeg mng mobi modemmanager modplug modules mp3 mp4 mpeg mplayer mtp multilib mysql ncurses netlink networkmanager nls nptl office ogg openal opencl opencv openexr opengl openmax openmp opus pam pango pcap pch pcre pcre2 pdf phonon plasma png policykit postscript ppds prison pulseaudio python qml qt3support qt4 qt5 raw readline rtmp samba scanner schroedinger sctp sdl seccomp semantic-desktop session sparse speech speex spell ssl startup-notification svg systemd tbb tcpd teamd telepathy tga theora threads tiff timezone truetype tslib udev udisks unicode unwind upnp upnp-av upower usb v4l v4l2 vaapi vdpau vorbis vpx vulkan wavpack wayland webp widgets x264 x265 xattr xcb xcomposite xinerama xkb xml xmp xrandr xscreensaver xv xvid xz zeroconf zlib\" ABI_X86=\"64\" ALSA_CARDS=\"hda-intel\" APACHE2_MODULES=\"authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias\" CALLIGRA_EXPERIMENTAL_FEATURES=\"stage\" CALLIGRA_FEATURES=\"words sheets karbon plan\" CAMERAS=\"ptp2\" COLLECTD_PLUGINS=\"df interface irq load memory rrdtool swap syslog\" CPU_FLAGS_X86=\"aes avx f16c fma3 fma4 mmx mmxext popcnt sse sse2 sse3 sse4_1 sse4_2 sse4a ssse3 xop\" ELIBC=\"glibc\" ENLIGHTENMENT_MODULES=\"*\" GPSD_PROTOCOLS=\"ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock isync itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf skytraq superstar2 timing tsip tripmate tnt ublox ubx\" GRUB_PLATFORMS=\"efi-64\" INPUT_DEVICES=\"joystick libinput\" KERNEL=\"linux\" L10N=\"de en en-GB ar fa tr ja ko zh zh-CN zh-TW\" LCD_DEVICES=\"bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text\" LIBREOFFICE_EXTENSIONS=\"presenter-console presenter-minimizer\" LINGUAS=\"de en en_GB ar fa tr\" LIRC_DEVICES=\"devinput\" OFFICE_IMPLEMENTATION=\"libreoffice\" PHP_TARGETS=\"php5-6\" POSTGRES_TARGETS=\"postgres9_5\" PYTHON_SINGLE_TARGET=\"python3_4\" PYTHON_TARGETS=\"python2_7 python3_4 python3_5 pypy pypy3\" RUBY_TARGETS=\"ruby21 ruby22\" STEAMGAMES=\"dirt_rally dont_starve portal source_engine te120 trine2 witcher2\" USERLAND=\"GNU\" VIDEO_CARDS=\"amdgpu\" XTABLES_ADDONS=\"quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account\"\r\nUnset:  CC, CPPFLAGS, CTARGET, CXX, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, USE_PYTHON\r\n\r\n=================================================================\r\n                        Package Settings\r\n=================================================================\r\n\r\nsys-apps/systemd-234-r2::gentoo was built with the following:\r\nUSE=\"acl audit elfutils gcrypt gnuefi idn kmod libidn2 lz4 lzma pam (policykit) seccomp ssl sysv-utils xkb -apparmor -build -cryptsetup -curl -http -importd -nat -qrcode (-selinux) -test -vanilla\" ABI_X86=\"32 (64) (-x32)\"\r\nCFLAGS=\"-pipe -O2 -march=bdver3 -g\"\r\nCXXFLAGS=\"-pipe -O2 -march=bdver3 -g\"\r\n\r\n\r\nnet-dns/libidn2-2.0.2::gentoo was built with the following:                                \r\nUSE=\"-static-libs\" ABI_X86=\"32 (64) (-x32)\"                                                \r\n\r\n\r\nnet-dns/libidn-1.33::gentoo was built with the following:                                  \r\nUSE=\"nls -doc -emacs -java -mono -static-libs\" ABI_X86=\"32 (64) (-x32)\"\r\n```"},"comment":{"url":"https://api.github.com/repos/systemd/systemd/issues/comments/317210148","html_url":"https://github.com/systemd/systemd/issues/6426#issuecomment-317210148","issue_url":"https://api.github.com/repos/systemd/systemd/issues/6426","id":317210148,"user":{"login":"devurandom","id":63082,"avatar_url":"https://avatars2.githubusercontent.com/u/63082?v=4","gravatar_id":"","url":"https://api.github.com/users/devurandom","html_url":"https://github.com/devurandom","followers_url":"https://api.github.com/users/devurandom/followers","following_url":"https://api.github.com/users/devurandom/following{/other_user}","gists_url":"https://api.github.com/users/devurandom/gists{/gist_id}","starred_url":"https://api.github.com/users/devurandom/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/devurandom/subscriptions","organizations_url":"https://api.github.com/users/devurandom/orgs","repos_url":"https://api.github.com/users/devurandom/repos","events_url":"https://api.github.com/users/devurandom/events{/privacy}","received_events_url":"https://api.github.com/users/devurandom/received_events","type":"User","site_admin":false},"created_at":"2017-07-22T21:00:01Z","updated_at":"2017-07-22T21:00:01Z","body":"What exactly shall I test? The three commits in #6420 (keszybz/systemd@0926f3489dbc93a2e91ec8607a0ceb5d4d8a53e3, keszybz/systemd@ba97fcbf75d4bfff93a2a3f937280720c6d4f778, keszybz/systemd@3f1e415abd0fe0b4008e6228933d2a36b2b72282), or the [patch to libidn2 fixing behaviour with underscores](https://gitlab.com/libidn/libidn2/commit/05d753ea69e2308cd02436d0511f4b844071dc79) from [libidn2 issue #30](https://gitlab.com/libidn/libidn2/issues/30), or both?"}}
{"actor":{"display_login":"devurandom"}}