systemd-resolved: resolve call failed: DNSSEC validation failed: failed-auxiliary

[Fred]

After I boot Ubuntu 17.04 "Zesty Zapus" (dev)

$ systemd-resolve www.facebook.com
www.facebook.com: resolve call failed: DNSSEC validation failed: failed-auxiliary

But after I have started Mozilla Firefox, and I try again it correctly resolves.

$ systemd-resolve www.facebook.com
www.facebook.com: 31.13.72.36
                  (star-mini.c10r.facebook.com)

-- Information acquired via protocol DNS in 3.6ms.
-- Data is authenticated: no

This does not only apply to the above mentioned www.facebook.com domain.
This seems to be related to a GitHub issue:
https://github.com/systemd/systemd/issues/4003

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Alexander Langanke (alexlanganke)]

I am having real trouble with this error on my 17.04 machine (nightly).

systemd-resolve --service www.google.de
Resolve call failed: DNSSEC validation failed: failed-auxiliary

Then from one moment to the next suddenly everything works again.

[Alexander Langanke (alexlanganke)]

Interstingly I sometimes experience the same as the OP. Starting Firefox seems to "fix" the issue. Chromium does not!

[Malte Cornils (malte)]

Setting
/etc/systemd/resolv.conf entry DNSSEC=no and enacting a sudo service systemd-resolved restart works around the problem for me. However, DNSSEC with the default (i.e. fallback) should still work.

Starting Firefox does not "fix" the problem for me, though.

[humble_coffee (humblecoffee)]

I'm getting this after upgrading to 17.04. Setting DNSSEC=no in /etc/systemd/resolv.conf seems to fix the issue.

[DieterDrewanz (dieterd2005)]

https://bugs.launchpad.net/ubuntu/+source/ubuntu-meta/+bug/1650794/comments/5

[DieterDrewanz (dieterd2005)]

Similar bugs:
https://bugs.launchpad.net/ubuntu/+source/ubuntu-meta/+bug/1650794/comments/5
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1683066
https://bugs.launchpad.net/ubuntu/+source/ubuntu-meta/+bug/1650794
https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1663031

Nearly all 9 search results are similar bug:
https://bugs.launchpad.net/bugs/+bugs?field.searchtext=17.04+fail+to+resolve+DNS&search=Search+Bug+Reports&field.scope=all&field.scope.target=

[Paul Natsuo Kishimoto (khaeru)]

I think this is a consequence of https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1682499 — if so, please mark (also those others listed in #7) as duplicate.