diff --git a/man/nss-resolve.xml b/man/nss-resolve.xml index 9f24f65019..4e102cec26 100644 --- a/man/nss-resolve.xml +++ b/man/nss-resolve.xml @@ -63,16 +63,13 @@ hostnames via DNS. To activate the NSS module, add resolve to the line starting with - hosts: in /etc/nsswitch.conf. - - It is recommended to place resolve early in /etc/nsswitch.conf' - hosts: line (but after the files or mymachines entries), - replacing the dns entry if it exists, to ensure DNS queries are always routed via - systemd-resolved8. - - Note that nss-resolve will chain-load nss-dns if - systemd-resolved.service is not running, ensuring that basic DNS resolution continues to work - if the service is down. + hosts: in /etc/nsswitch.conf. Specifcally, it is recommended to place + resolve early in /etc/nsswitch.conf' hosts: line (but + after the files or mymachines entries), right before the + dns entry if it exists, followed by [!UNAVAIL=return], to ensure DNS queries + are always routed via + systemd-resolved8 if it is + running, but are routed to nss-dns if this service is not available. @@ -94,9 +91,6 @@ ethers: db files rpc: db files netgroup: nis - - This keeps the dns module as a fallback for cases where the nss-resolve - module is not installed.