Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Wed, 31 Aug 2022 10:33:05 -0700
From: Dalton Hubble <>
Subject: musl resolver handling of "search ." in /etc/resolv.conf

Hey folks,

I wanted to flag a possible issue with musl handling of DNS "search ." in
/etc/resolv.conf.The easiest way I have to repro and consume musl is
starting an alpine or busybox musl container image.

podman run -it /bin/ash

Edit /etc/resolv.conf to the following (not the "." at the end of search):

search default.svc.cluster.local .
options ndots:5

wget: bad address ''

Remove the "." from search and wget will work fine again. has some great
details showing DNS packet capture and a malformed packet.

Broader context is that systemd and recently Kubernetes start adding
"search ." to resolv.conf in certain scenarios, which seems to break
musl-based resolvers.

Dalton Hubble

Content of type "text/html" skipped

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.