I generally embrace systemd and have been pretty happy with it but there's one component which simply doesn't work correctly and that's systemd-resolved in comb

I generally embrace systemd and have been pretty happy with it but there's one component which simply doesn't work correctly and that's systemd-resolved in combination with DNSSEC. I eventually had to replace it with Knot Resolver which works flawlessly on the same machine / network. https://github.com/systemd/systemd/issues/9867 https://github.com/systemd/systemd/issues/9867 https://www.knot-resolver.cz/ https://www.knot-resolver.cz/