The patch "resolved-Mitigate-DVE-2018-0001-by-retrying-NXDOMAIN-with.patch" for bug #1727237 seems to be the root cause of my problems (now reported separately in bug #1785383.)
As the patch changes the transaction restart logic it may be worth the OP rebuilding without that patch and retesting.
@xnox: my understanding is still that upstream recommendation is to use libnss-resolve, it is still there in the latest man pages. The handling of resolv.conf is to a certain extent orthogonal, as that file is only used by systemd to exchange nameserver info with "legacy" code..
The patch "resolved- Mitigate- DVE-2018- 0001-by- retrying- NXDOMAIN- with.patch" for bug #1727237 seems to be the root cause of my problems (now reported separately in bug #1785383.)
As the patch changes the transaction restart logic it may be worth the OP rebuilding without that patch and retesting.
@xnox: my understanding is still that upstream recommendation is to use libnss-resolve, it is still there in the latest man pages. The handling of resolv.conf is to a certain extent orthogonal, as that file is only used by systemd to exchange nameserver info with "legacy" code..