Solved DNS in jail but not for pkg

[jan0sch]

Hi,

I have networking and DNS working from inside a jail (14.1 host and 14.1 jail). But DNS does not work for the pkg command.

# cat /etc/pkg/FreeBSD.conf
FreeBSD: {
  url: "pkg+https://pkg.FreeBSD.org/${ABI}/quarterly",
  mirror_type: "srv",
  signature_type: "fingerprints",
  fingerprints: "/usr/share/keys/pkg",
  enabled: yes
}
# cat /etc/resolv.conf
nameserver 127.0.0.1
options edns0
# # drill pkg.freebsd.org
;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 5303
;; flags: qr rd ra ; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;; pkg.freebsd.org.     IN      A

;; ANSWER SECTION:
pkg.freebsd.org.        1046    IN      CNAME   pkgmir.geo.freebsd.org.
pkgmir.geo.freebsd.org. 1046    IN      A       147.28.184.43

;; AUTHORITY SECTION:

;; ADDITIONAL SECTION:

;; Query time: 0 msec
;; SERVER: 127.0.0.1
;; WHEN: XXX
;; MSG SIZE  rcvd: 74
# pkg update
Updating FreeBSD repository catalogue...
pkg: No SRV record found for the repo 'FreeBSD'
pkg: An error occured while fetching package
pkg: packagesite URL error for pkg+https://pkg.FreeBSD.org/FreeBSD:14:amd64/quarterly/meta.txz -- pkg+://
implies SRV mirror type
repository FreeBSD has no meta file, using default settings
pkg: packagesite URL error for pkg+https://pkg.FreeBSD.org/FreeBSD:14:amd64/quarterly/data.pkg -- pkg+://
implies SRV mirror type
pkg: packagesite URL error for pkg+https://pkg.FreeBSD.org/FreeBSD:14:amd64/quarterly/data.txz -- pkg+://
implies SRV mirror type
pkg: packagesite URL error for pkg+https://pkg.FreeBSD.org/FreeBSD:14:amd64/quarterly/packagesite.pkg -- p
kg+:// implies SRV mirror type
pkg: packagesite URL error for pkg+https://pkg.FreeBSD.org/FreeBSD:14:amd64/quarterly/packagesite.txz -- p
kg+:// implies SRV mirror type
Unable to update repository FreeBSD
Error updating repositories!

Also connecting from inside the jail to the internet is no problem but pkg gets stuck at DNS stage.

Any ideas what this could be?

Kind regards,

 

[jan0sch]

After a reboot even more commands did not work due to DNS trouble, except for drill and host. But I found the solution: changing "127.0.0.1" to "localhost" inside the resolv.conf of the jail makes it work.

Sorry for the noise.