Using systemd-resolved opens up some options that may be easier to configure then in the past. Enabling DNSSEC: systemd-resolve –status look for “DNSSEC setting: no” sudo mkdir -p /etc/systemd/resolved.conf.d sudo nano /etc/systemd/resolved.conf.d/dnssec.conf enter: [Resolve] DNSSEC=true sudo systemctl restart systemd-resolved systemd-resolve –status look for “DNSSEC setting: yes”
It’s not so simple as “cat /etc/resolv.conf” anymore. DNS is now handled by systemd-resolved in Ubuntu and Debian and their derivatives. This is easy to spot if you do check resolv.conf and it contains “nameserver 127.0.0.53”. The correct command now is “systemd-resolve –status”.