From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-1.1 required=5.0 tests=DKIM_INVALID,DKIM_SIGNED, HTML_MESSAGE,HTML_SINGLET_MANY,MAILING_LIST_MULTI,RCVD_IN_DNSWL_MED, RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL,T_KAM_HTML_FONT_INVALID, T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.4 Received: (qmail 15393 invoked from network); 24 Jun 2022 10:37:29 -0000 Received: from mother.openwall.net (195.42.179.200) by inbox.vuxu.org with ESMTPUTF8; 24 Jun 2022 10:37:29 -0000 Received: (qmail 32400 invoked by uid 550); 24 Jun 2022 10:37:25 -0000 Mailing-List: contact musl-help@lists.openwall.com; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-ID: Reply-To: musl@lists.openwall.com Received: (qmail 28346 invoked from network); 24 Jun 2022 10:28:48 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nielsen.com; s=dkim-gsuite-connect; h=mime-version:from:date:message-id:subject:to; bh=LbMvuHE9td8z2m1usawrosXMudmhy2TaGKTrAZPBuX8=; b=K43nkXBLRf20gzOUKkoSKLtGuCnJpHfTGkRCwGldPuMrK0LJPsclaKqx+n1pKRxj/3 Zn0CVK5jGQIrSdLh8FaElqEULb7dKgkpz3ja8l4NR+aRlITUulX8pq21DH64wKAktqb2 ZjQnjlxH/J2ELkJONpoVAb6mSv2bFGfa9D0bI= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=LbMvuHE9td8z2m1usawrosXMudmhy2TaGKTrAZPBuX8=; b=XBjpuZTergIvH5nRAOS07BEUuB4lSKn6IjHlkVeaHC3E3Ce6a2u4BtK0eQ+U+dd9q4 eKViJ6NenM9pR83Mo+HFayGoSHUwlJlIJxrz3lChrXnsaaKrrlwRO1Q+dEuGot7n8t1I 3NTAM7SfFZDbJT/S7r5zJLQ0pjGBYu9PRL9J37mDrXrjTJ/nVst88QZvIUiz7bpE/fXU VuKhNZhpUArC1t+jMcnRcPuxSmTLuP8xL/Wccy9WfBJ6TY7W2zOyPGxAIw4lHq5J85Gy p81r/2oDY5p/9+sppoA4CpLHVE7F18aQZfnKQm+abcuCmhIDyuB78wgNHwYCZJqEs4cu sJVw== X-Gm-Message-State: AJIora893tC0odyQ2upVzHr3yKVrcqpn8DAXqgS1HQdh0oB0YwPMNIwV 79pzrgREu9NUXjVn+k+8Tcdv+LYpNnr/knoRzruYjqaaRZV4fQ== X-Google-Smtp-Source: AGRyM1u3W3eaMB00dzI4DJMI2vTASkyUyVZpWBHnIPhwiT8QZxanQhjiHXlfNBiJfGhMx3H+Letnl3ZU6aM0yakXSLw= X-Received: by 2002:a17:906:3f94:b0:722:fb52:5a24 with SMTP id b20-20020a1709063f9400b00722fb525a24mr10089261ejj.604.1656066516278; Fri, 24 Jun 2022 03:28:36 -0700 (PDT) MIME-Version: 1.0 From: Markus Geiger Date: Fri, 24 Jun 2022 12:28:24 +0200 Message-ID: To: musl@lists.openwall.com Content-Type: multipart/alternative; boundary="0000000000006ddcd105e22f08ae" Subject: [musl] [BUG] Non-FQDN domain resolving failure on musl-1.2.x --0000000000006ddcd105e22f08ae Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hej! First, I love MUSL (and alpine linux). Great project! We encountered a bug in our CI pipeline using alpine images in conjunction with AWS DNS servers - and it seems to be related to MUSL: $ curl -fsSL https://slack.com curl: (6) Could not resolve host: slack.com Usually that should return some HTML. It seems to affect only non-FQDN domains. As a workaround we use now full FQDN api.slack.com. But there is a bug in resolvement! It seems if an AAAA domain is queried over an IPV4 IP/DNS and doesn=E2=80=99t not return a record the overall resolvement of t= he domain fails. *DEBUG LOG* We try several alpine images and musl libs on an EC2 host with docker and AWS DNS exclusivly: - alpine 3.12 with musl-1.1.24-r10 is last known to work - alpine 3.13 with musl-1.2.2-r1 starts failing (something introduced in musl-1.2 ?) - current alpine 3.16 with current musl-1.2.3-r0 still fails alpine 3.12 with musl-1.1.24-r10 is last known to work (see string =E2=80=9Csuccess=E2=80=9D) docker run -it --rm --dns=3D10.204.109.209 alpine:3.12 ash -c 'apk add curl bind-tools;set -x;curl -fsSL https://slack.com 1>/dev/null && echo success;host -4 -AAAA slack.com;apk list | grep musl' =E2=9C=93 ns-watch-attribution-nonprod 12:13 fetch http://dl-cdn.alpinelinux.org/alpine/v3.12/main/x86_64/APKINDEX.tar.g= z fetch http://dl-cdn.alpinelinux.org/alpine/v3.12/community/x86_64/APKINDEX.= tar.gz (1/21) Installing fstrm (0.6.0-r1) (2/21) Installing krb5-conf (1.0-r2) (3/21) Installing libcom_err (1.45.6-r0) (4/21) Installing keyutils-libs (1.6.1-r1) (5/21) Installing libverto (0.3.1-r1) (6/21) Installing krb5-libs (1.18.5-r0) (7/21) Installing json-c (0.14-r1) (8/21) Installing libgcc (9.3.0-r2) (9/21) Installing libstdc++ (9.3.0-r2) (10/21) Installing libprotobuf (3.12.2-r0) (11/21) Installing libprotoc (3.12.2-r0) (12/21) Installing protobuf-c (1.3.3-r1) (13/21) Installing libuv (1.38.1-r0) (14/21) Installing xz-libs (5.2.5-r1) (15/21) Installing libxml2 (2.9.14-r0) (16/21) Installing bind-libs (9.16.27-r1) (17/21) Installing bind-tools (9.16.27-r1) (18/21) Installing ca-certificates (20211220-r0) (19/21) Installing nghttp2-libs (1.41.0-r0) (20/21) Installing libcurl (7.79.1-r1) (21/21) Installing curl (7.79.1-r1) Executing busybox-1.31.1-r22.trigger Executing ca-certificates-20211220-r0.trigger OK: 20 MiB in 35 packages + curl -fsSL https://slack.com + echo success success + host -4 -AAAA slack.com Trying "slack.com" ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55308 ;; flags: qr rd ra; QUERY: 1, ANSWER: 9, AUTHORITY: 13, ADDITIONAL: 8 ;; QUESTION SECTION: ;slack.com. IN ANY ;; ANSWER SECTION: slack.com. 38 IN A 34.203.97.10 slack.com. 38 IN A 34.193.255.5 slack.com. 38 IN A 54.147.59.169 slack.com. 38 IN A 34.231.24.224 slack.com. 38 IN A 34.225.62.185 slack.com. 38 IN A 3.95.117.96 slack.com. 38 IN A 54.163.235.119 slack.com. 38 IN A 34.204.109.226 slack.com. 38 IN A 54.92.199.186 ;; AUTHORITY SECTION: . 208510 IN NS j.root-servers.net. . 208510 IN NS a.root-servers.net. . 208510 IN NS b.root-servers.net. . 208510 IN NS g.root-servers.net. . 208510 IN NS l.root-servers.net. . 208510 IN NS d.root-servers.net. . 208510 IN NS i.root-servers.net. . 208510 IN NS h.root-servers.net. . 208510 IN NS k.root-servers.net. . 208510 IN NS f.root-servers.net. . 208510 IN NS m.root-servers.net. . 208510 IN NS e.root-servers.net. . 208510 IN NS c.root-servers.net. ;; ADDITIONAL SECTION: b.root-servers.net. 415251 IN A 199.9.14.201 l.root-servers.net. 357447 IN A 199.7.83.42 h.root-servers.net. 417397 IN A 198.97.190.53 g.root-servers.net. 403642 IN A 192.112.36.4 j.root-servers.net. 365003 IN A 192.58.128.30 i.root-servers.net. 376774 IN A 192.36.148.17 e.root-servers.net. 415445 IN A 192.203.230.10 f.root-servers.net. 406658 IN A 192.5.5.241 Received 510 bytes from 10.204.109.209#53 in 286 ms + apk list + grep musl musl-dbg-1.1.24-r10 x86_64 {musl} (MIT) musl-1.1.24-r10 x86_64 {musl} (MIT) [installed] musl-locales-lang-0_git20200319-r0 x86_64 {musl-locales} (MIT) musl-obstack-1.1-r1 x86_64 {musl-obstack} (GPL-2.0-or-later) libc6-compat-1.1.24-r10 x86_64 {musl} (MIT) musl-utils-1.1.24-r10 x86_64 {musl} (MIT BSD GPL2+) [installed] musl-nscd-dev-1.0.3-r0 x86_64 {musl-nscd} (MIT) musl-dev-1.1.24-r10 x86_64 {musl} (MIT) musl-nscd-1.0.3-r0 x86_64 {musl-nscd} (MIT) musl-locales-0_git20200319-r0 x86_64 {musl-locales} (LGPL-3.0-only) musl-nscd-doc-1.0.3-r0 x86_64 {musl-nscd} (MIT) musl-obstack-dev-1.1-r1 x86_64 {musl-obstack} (GPL-2.0-or-later) musl-libintl-1.1.24-r10 x86_64 {musl} (MIT) Things change with alpine 3.12 and musl-1.2.2-r1 (now it spits ou =E2=80=9C= curl: (6) Could not resolve host: slack.com=E2=80=9D) docker run -it --rm --dns=3D10.204.109.209 alpine:3.13 ash -c 'apk add curl bind-tools;set -x;curl -fsSL https://slack.com 1>/dev/null && echo success;host -4 -AAAA slack.com;apk list | grep musl' =E2=9C=93 ns-watch-attribution-nonprod 12:14 fetch https://dl-cdn.alpinelinux.org/alpine/v3.13/main/x86_64/APKINDEX.tar.= gz fetch https://dl-cdn.alpinelinux.org/alpine/v3.13/community/x86_64/APKINDEX= .tar.gz (1/22) Installing fstrm (0.6.0-r1) (2/22) Installing krb5-conf (1.0-r2) (3/22) Installing libcom_err (1.45.7-r0) (4/22) Installing keyutils-libs (1.6.3-r0) (5/22) Installing libverto (0.3.1-r1) (6/22) Installing krb5-libs (1.18.5-r0) (7/22) Installing json-c (0.15-r1) (8/22) Installing libgcc (10.2.1_pre1-r3) (9/22) Installing libstdc++ (10.2.1_pre1-r3) (10/22) Installing libprotobuf (3.13.0-r2) (11/22) Installing libprotoc (3.13.0-r2) (12/22) Installing protobuf-c (1.3.3-r4) (13/22) Installing libuv (1.40.0-r0) (14/22) Installing xz-libs (5.2.5-r1) (15/22) Installing libxml2 (2.9.14-r0) (16/22) Installing bind-libs (9.16.27-r0) (17/22) Installing bind-tools (9.16.27-r0) (18/22) Installing ca-certificates (20211220-r0) (19/22) Installing brotli-libs (1.0.9-r3) (20/22) Installing nghttp2-libs (1.42.0-r1) (21/22) Installing libcurl (7.79.1-r1) (22/22) Installing curl (7.79.1-r1) Executing busybox-1.32.1-r8.trigger Executing ca-certificates-20211220-r0.trigger OK: 21 MiB in 36 packages + curl -fsSL https://slack.com curl: (6) Could not resolve host: slack.com + host -4 -AAAA slack.com Trying "slack.com" ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55471 ;; flags: qr rd ra; QUERY: 1, ANSWER: 9, AUTHORITY: 13, ADDITIONAL: 8 ;; QUESTION SECTION: ;slack.com. IN ANY ;; ANSWER SECTION: slack.com. 23 IN A 34.231.24.224 slack.com. 23 IN A 54.163.235.119 slack.com. 23 IN A 34.225.62.185 slack.com. 23 IN A 34.203.97.10 slack.com. 23 IN A 3.95.117.96 slack.com. 23 IN A 34.193.255.5 slack.com. 23 IN A 34.204.109.226 slack.com. 23 IN A 54.92.199.186 slack.com. 23 IN A 54.147.59.169 ;; AUTHORITY SECTION: . 208436 IN NS j.root-servers.net. . 208436 IN NS a.root-servers.net. . 208436 IN NS h.root-servers.net. . 208436 IN NS m.root-servers.net. . 208436 IN NS k.root-servers.net. . 208436 IN NS l.root-servers.net. . 208436 IN NS g.root-servers.net. . 208436 IN NS f.root-servers.net. . 208436 IN NS c.root-servers.net. . 208436 IN NS b.root-servers.net. . 208436 IN NS e.root-servers.net. . 208436 IN NS d.root-servers.net. . 208436 IN NS i.root-servers.net. ;; ADDITIONAL SECTION: b.root-servers.net. 415177 IN A 199.9.14.201 l.root-servers.net. 357373 IN A 199.7.83.42 h.root-servers.net. 417323 IN A 198.97.190.53 g.root-servers.net. 403568 IN A 192.112.36.4 j.root-servers.net. 364929 IN A 192.58.128.30 i.root-servers.net. 376700 IN A 192.36.148.17 e.root-servers.net. 415371 IN A 192.203.230.10 f.root-servers.net. 406584 IN A 192.5.5.241 Received 510 bytes from 10.204.109.209#53 in 381 ms + apk list + grep musl musl-dbg-1.2.2-r1 x86_64 {musl} (MIT) musl-1.2.2-r1 x86_64 {musl} (MIT) [installed] musl-locales-lang-0_git20200319-r1 x86_64 {musl-locales} (MIT) musl-obstack-1.1-r1 x86_64 {musl-obstack} (GPL-2.0-or-later) libc6-compat-1.2.2-r1 x86_64 {musl} (MIT) musl-utils-1.2.2-r1 x86_64 {musl} (MIT BSD GPL2+) [installed] musl-nscd-dev-1.0.3-r1 x86_64 {musl-nscd} (MIT) musl-dev-1.2.2-r1 x86_64 {musl} (MIT) musl-nscd-1.0.3-r1 x86_64 {musl-nscd} (MIT) musl-locales-0_git20200319-r1 x86_64 {musl-locales} (LGPL-3.0-only) musl-nscd-doc-1.0.3-r1 x86_64 {musl-nscd} (MIT) musl-obstack-dev-1.1-r1 x86_64 {musl-obstack} (GPL-2.0-or-later) musl-libintl-1.2.2-r1 x86_64 {musl} (MIT) Still alpine 3.16 with musl-1.2.3-r0 fails: docker run -it --rm --dns=3D10.204.109.209 alpine:3.16 ash -c 'apk add curl bind-tools;set -x;curl -fsSL https://slack.com 1>/dev/null && echo success;host -4 -AAAA slack.com;apk list | grep musl' =E2=9C=93 ns-watch-attribution-nonprod 12:15 Unable to find image 'alpine:3.16' locally 3.16: Pulling from library/alpine Digest: sha256:686d8c9dfa6f3ccfc8230bc3178d23f84eeaf7e457f36f271ab1acc53015= 037c Status: Downloaded newer image for alpine:3.16 fetch https://dl-cdn.alpinelinux.org/alpine/v3.16/main/x86_64/APKINDEX.tar.= gz fetch https://dl-cdn.alpinelinux.org/alpine/v3.16/community/x86_64/APKINDEX= .tar.gz (1/18) Installing fstrm (0.6.1-r0) (2/18) Installing krb5-conf (1.0-r2) (3/18) Installing libcom_err (1.46.5-r0) (4/18) Installing keyutils-libs (1.6.3-r1) (5/18) Installing libverto (0.3.2-r0) (6/18) Installing krb5-libs (1.19.3-r0) (7/18) Installing json-c (0.16-r0) (8/18) Installing protobuf-c (1.4.0-r0) (9/18) Installing libuv (1.44.1-r0) (10/18) Installing xz-libs (5.2.5-r1) (11/18) Installing libxml2 (2.9.14-r0) (12/18) Installing bind-libs (9.16.29-r0) (13/18) Installing bind-tools (9.16.29-r0) (14/18) Installing ca-certificates (20211220-r0) (15/18) Installing brotli-libs (1.0.9-r6) (16/18) Installing nghttp2-libs (1.47.0-r0) (17/18) Installing libcurl (7.83.1-r1) (18/18) Installing curl (7.83.1-r1) Executing busybox-1.35.0-r13.trigger Executing ca-certificates-20211220-r0.trigger OK: 15 MiB in 32 packages + curl -fsSL https://slack.com curl: (6) Could not resolve host: slack.com + host -4 -AAAA slack.com Trying "slack.com" ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 60635 ;; flags: qr rd ra; QUERY: 1, ANSWER: 9, AUTHORITY: 13, ADDITIONAL: 8 ;; QUESTION SECTION: ;slack.com. IN ANY ;; ANSWER SECTION: slack.com. 5 IN A 3.95.117.96 slack.com. 5 IN A 54.92.199.186 slack.com. 5 IN A 34.225.62.185 slack.com. 5 IN A 34.203.97.10 slack.com. 5 IN A 34.193.255.5 slack.com. 5 IN A 54.163.235.119 slack.com. 5 IN A 34.204.109.226 slack.com. 5 IN A 34.231.24.224 slack.com. 5 IN A 54.147.59.169 ;; AUTHORITY SECTION: . 208128 IN NS m.root-servers.net. . 208128 IN NS a.root-servers.net. . 208128 IN NS j.root-servers.net. . 208128 IN NS f.root-servers.net. . 208128 IN NS d.root-servers.net. . 208128 IN NS h.root-servers.net. . 208128 IN NS k.root-servers.net. . 208128 IN NS b.root-servers.net. . 208128 IN NS g.root-servers.net. . 208128 IN NS i.root-servers.net. . 208128 IN NS c.root-servers.net. . 208128 IN NS l.root-servers.net. . 208128 IN NS e.root-servers.net. ;; ADDITIONAL SECTION: b.root-servers.net. 414869 IN A 199.9.14.201 l.root-servers.net. 357065 IN A 199.7.83.42 h.root-servers.net. 417015 IN A 198.97.190.53 g.root-servers.net. 403260 IN A 192.112.36.4 j.root-servers.net. 364621 IN A 192.58.128.30 i.root-servers.net. 376392 IN A 192.36.148.17 e.root-servers.net. 415063 IN A 192.203.230.10 f.root-servers.net. 406276 IN A 192.5.5.241 Received 510 bytes from 10.204.109.209#53 in 407 ms + apk list + grep musl musl-dbg-1.2.3-r0 x86_64 {musl} (MIT) musl-1.2.3-r0 x86_64 {musl} (MIT) [installed] musl-locales-lang-0.1.0-r0 x86_64 {musl-locales} (MIT) musl-obstack-1.2.3-r0 x86_64 {musl-obstack} (LGPL-2.1-or-later) libc6-compat-1.2.3-r0 x86_64 {musl} (MIT) musl-utils-1.2.3-r0 x86_64 {musl} (MIT BSD GPL2+) [installed] musl-nscd-dev-1.1.1-r0 x86_64 {musl-nscd} (MIT) musl-dev-1.2.3-r0 x86_64 {musl} (MIT) musl-nscd-1.1.1-r0 x86_64 {musl-nscd} (MIT) musl-locales-0.1.0-r0 x86_64 {musl-locales} (LGPL-3.0-only) musl-nscd-doc-1.1.1-r0 x86_64 {musl-nscd} (MIT) musl-legacy-error-0.5-r0 x86_64 {musl-legacy-error} (BSD-2-Clause) musl-obstack-dev-1.2.3-r0 x86_64 {musl-obstack} (LGPL-2.1-or-later) musl-libintl-1.2.3-r0 x86_64 {musl} (MIT) Greetings, Markus --=20 Markus Geiger Protean Linux | Cloud | DevOps Engineer RefinedLabs - A Nielsen Company www.nielsen.com Refined Labs GmbH - A Nielsen Company Herzog-Wilhelm-Stra=C3=9Fe 26, 80331 M=C3=BCnchen Gesch=C3=A4ftsf=C3=BChrer: Dietmar Krauss, Robert Moor Sitz M=C3=BCnchen, Amtsgericht M=C3=BCnchen HRB 166589 *This e-mail may contain confidential and/or privileged information. * *If you are not the intended recipient or have received this e-mail in error please be kind and notify the sender immediately and delete this mail and all its attachments subsequently. Please improve communication in the workplace by not using emails at all since they are not secure, anti-social, bring confusion, often destroy focus and lack transparency. Use encrypted group chats, social media or directly talk to people and use an agile task board for your daily planning. By reading this you agree to stop agreeing to useless disclaimers and learn about security and securing your communication.* --0000000000006ddcd105e22f08ae Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

Hej!=

First, I love MUS= L (and alpine linux). Great project!

We encount= ered a bug in our CI pipeline using alpine images in conjunction with AWS D= NS servers - and it seems to be related to MUSL:

$ curl -fsSL https://slack.com
curl: (6) Could not resolve host:=
 slack.com

Usually that should return some HTML. It= seems to affect only non-FQDN domains. As a workaround we use now full FQD= N api.slack.com. But there is a bug in= resolvement! It seems if an AAAA domain is queried over an IPV4 IP/DNS and= doesn=E2=80=99t not return a record the overall resolvement of the domain = fails.

DEBUG LOG

We try several alpine images and musl libs on an= EC2 host with docker and AWS DNS exclusivly:

    alpine 3.12 with musl-1.1.= 24-r10 is last known to work

  • alpine 3.13 with musl-1.2.2-r1 starts failing (somet= hing introduced in musl-1.2 ?)

  • current alpine 3.16 with current musl-1.2.3-r0 still= fails

alpin= e 3.12 with musl-1.1.24-r10 is last known to work (see string =E2=80=9Csucc= ess=E2=80=9D)

docker run -it --rm --dns=3D10.204.109.209 alpine:3.12 ash -c 'apk ad=
d curl bind-tools;set -x;curl -fsSL https://s=
lack.com 1>/dev/null && echo success;host -4 -AAAA slack.com;apk list | grep musl'       =E2=9C=
=93 ns-watch-attribution-nonprod 12:13
fetch http://=
dl-cdn.alpinelinux.org/alpine/v3.12/main/x86_64/APKINDEX.tar.gz<=
br>fetch http://dl-cdn.alpinelinux.org/alpine/v3.12/commu=
nity/x86_64/APKINDEX.tar.gz
(1/21) Installing fstrm (0.6=
.0-r1)
(2/21) Installing krb5-conf (1.0-r2)
(=
3/21) Installing libcom_err (1.45.6-r0)
(4/21) Installing ke=
yutils-libs (1.6.1-r1)
(5/21) Installing libverto (0.3.1-r1)=

(6/21) Installing krb5-libs (1.18.5-r0)
(7/2=
1) Installing json-c (0.14-r1)
(8/21) Installing libgcc (9.=
3.0-r2)
(9/21) Installing libstdc++ (9.3.0-r2)
(10/21) Installing libprotobuf (3.12.2-r0)
(11/21) Install=
ing libprotoc (3.12.2-r0)
(12/21) Installing protobuf-c (1.3=
.3-r1)
(13/21) Installing libuv (1.38.1-r0)
(=
14/21) Installing xz-libs (5.2.5-r1)
(15/21) Installing libx=
ml2 (2.9.14-r0)
(16/21) Installing bind-libs (9.16.27-r1)
(17/21) Installing bind-tools (9.16.27-r1)
(18/=
21) Installing ca-certificates (20211220-r0)
(19/21) Install=
ing nghttp2-libs (1.41.0-r0)
(20/21) Installing libcurl (7.7=
9.1-r1)
(21/21) Installing curl (7.79.1-r1)
E=
xecuting busybox-1.31.1-r22.trigger
Executing ca-certificate=
s-20211220-r0.trigger
OK: 20 MiB in 35 packages
+ curl -fsSL https://slack.com<=
br>+ echo success
success
+ host -4 -AAA=
A slack.com
Trying "slack.com"
;; ->>H=
EADER<<- opcode: QUERY, status: NOERROR, id: 55308
;; =
flags: qr rd ra; QUERY: 1, ANSWER: 9, AUTHORITY: 13, ADDITIONAL: 8
;; QU=
ESTION SECTION:
;slack.com.=
         IN  =
ANY

;; ANSWER SECTION:
slack.com.      38  IN  A   34.203.97.10=

slack.com.      38  IN  A   34.193.255.5
slack.com.      38  IN  A   54.147.59.169
slack.com.      38  IN  <=
/span>A   34.231.24.224
=
slack.com.  <=
/span>    38  IN  A   34.225.62.185
slack.com.      38  IN  A   3.95.117.96<=
/span>
slack.com.      38  IN  A   54.163.235.119
slack.com.      38  IN=
  A   34.204.109.226
slack.com=
.      38  IN=
  A   54.92.199.186

;; AUTHORIT=
Y SECTION:
.           2085=
10  IN  NS  j.root-servers.net.
.           208510  IN  NS  a.root-servers.net.
.       =
    208510=
  IN  NS  b.root-servers.net.=

.           208510  IN  NS<=
span class=3D"gmail-cm-tab" role=3D"presentation" style=3D"box-sizing:borde=
r-box;display:inline-block">  =
g.root-servers.net.
.   <=
/span>    =
    208510  IN  NS  l.root-servers.net.
.           208510  IN  NS  d.root-servers.net.
.           208510  IN  NS  i.ro=
ot-servers.net.
.   =
        =
208510  IN  NS  h.root-servers.net.
.           208510  IN=
  NS  k.root-servers.net..           208510  IN  NS  f.root-ser=
vers.net.
.           2=
08510  IN =
 NS  m.root-servers.net.
.           208510  IN  NS  e.root-servers.net.
.           208510  IN  NS  c.root-servers.net=
.

;; ADDITIONAL SECTION:
b.root-servers.net. 415251  IN  A<=
span class=3D"gmail-cm-tab" role=3D"presentation" style=3D"box-sizing:borde=
r-box;display:inline-block">   199.9.14.201
l.root-servers.net. 357447  IN  A   199.7.83=
.42
h.root-servers.net=
. 417397  IN  A   198.97.190.53
g.root-servers.net. 40364=
2  IN  A   192.112.36.4
j.root-servers.net. 365003  IN  A   192.5=
8.128.30
i.root-server=
s.net. 376774  IN  A   192.36.148.17
e.root-servers.net. 4=
15445  IN =
 A   192.203.230.10
f.root-servers.net. 406658  IN  A   =
192.5.5.241

Received 510 bytes from 10.204.109.209#53 in 286 ms
=
+ apk list
+ grep musl
musl-dbg-1.1.24-r=
10 x86_64 {musl} (MIT)
musl-1.1.24-r10 x86_64 {musl} (MIT) [=
installed]
musl-locales-lang-0_git20200319-r0 x86_64 {musl-l=
ocales} (MIT)
musl-obstack-1.1-r1 x86_64 {musl-obstack} (GPL=
-2.0-or-later)
libc6-compat-1.1.24-r10 x86_64 {musl} (MIT)
musl-utils-1.1.24-r10 x86_64 {musl} (MIT BSD GPL2+) [installe=
d]
musl-nscd-dev-1.0.3-r0 x86_64 {musl-nscd} (MIT)musl-dev-1.1.24-r10 x86_64 {musl} (MIT)
musl-nscd-1.0.=
3-r0 x86_64 {musl-nscd} (MIT)
musl-locales-0_git20200319-r=
0 x86_64 {musl-locales} (LGPL-3.0-only)
musl-nscd-doc-1.0.3-=
r0 x86_64 {musl-nscd} (MIT)
musl-obstack-dev-1.1-r1 x86_64 {=
musl-obstack} (GPL-2.0-or-later)
musl-libintl-1.1.24-r10 x86=
_64 {musl} (MIT)

Things change with al= pine 3.12 and musl-1.2.2-r1 (now it spits ou =E2=80=9Ccurl: (6) Could not r= esolve host: slack.com=E2=80=9D)

docker run -it --rm -=
-dns=3D10.204.109.209 alpine:3.13 ash -c 'apk add curl bind-tools;set -=
x;curl -fsSL https://slack.com 1>/dev/=
null && echo success;host -4 -AAAA sla=
ck.com;apk list | grep musl'       =E2=9C=93 ns-watch-attribution-n=
onprod 12:14
fetch https://dl-cdn.alpinelinux.org/a=
lpine/v3.13/main/x86_64/APKINDEX.tar.gz
fetch https://dl-cdn.alpinelinux.org/alpine/v3.13/community/x86_64/APKINDEX.t=
ar.gz
(1/22) Installing fstrm (0.6.0-r1)
=
(2/22) Installing krb5-conf (1.0-r2)
(3/22) Installing libco=
m_err (1.45.7-r0)
(4/22) Installing keyutils-libs (1.6.3-r0)=

(5/22) Installing libverto (0.3.1-r1)
(6/22=
) Installing krb5-libs (1.18.5-r0)
(7/22) Installing json-c =
(0.15-r1)
(8/22) Installing libgcc (10.2.1_pre1-r3)(9/22) Installing libstdc++ (10.2.1_pre1-r3)
(10/22) =
Installing libprotobuf (3.13.0-r2)
(11/22) Installing libpro=
toc (3.13.0-r2)
(12/22) Installing protobuf-c (1.3.3-r4)
(13/22) Installing libuv (1.40.0-r0)
(14/22) Ins=
talling xz-libs (5.2.5-r1)
(15/22) Installing libxml2 (2.9.1=
4-r0)
(16/22) Installing bind-libs (9.16.27-r0)
(17/22) Installing bind-tools (9.16.27-r0)
(18/22) Instal=
ling ca-certificates (20211220-r0)
(19/22) Installing brotli=
-libs (1.0.9-r3)
(20/22) Installing nghttp2-libs (1.42.0-r1)=

(21/22) Installing libcurl (7.79.1-r1)
(22/2=
2) Installing curl (7.79.1-r1)
Executing busybox-1.32.1-r8.=
trigger
Executing ca-certificates-20211220-r0.trigger=

OK: 21 MiB in 36 packages
+ curl -fsSL https://slack.com
curl: (6) Could not =
resolve host: slack.com
+ h=
ost -4 -AAAA slack.com
Tryi=
ng "slack.com"
;;=
 ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55471<=
br>;; flags: qr rd ra; QUERY: 1, ANSWER: 9, AUTHORITY: 13, ADDITIONAL:=
 8

<=
span role=3D"presentation" style=3D"box-sizing:border-box;padding-right:0.1=
px">;; QUESTION SECTION:
;slack=
.com. =
        IN  ANY

;; ANSWER SECTION:
slack.com.      23  IN  A   34.2=
31.24.224
slack.com.      23  IN  A   54.163.235.119
slack.com.      23  =
IN  A   34.225.62.185
slack=
.com.      23  IN  A   34.203.97.10
slack.com.      23  IN  A   3.95.117.96
slack.com.      23  IN  A   3=
4.193.255.5
slack.com.      23=
  IN  A   34.204.109.226
=
slack.com.  <=
/span>    23  IN  A   54.92.199.186
slack.com.      23  IN  A   54.147.59.16=
9

;; AUTHORITY SECTION:
.   <=
/span>    =
    208436  IN  NS  j.root-servers.net.
.           208436  IN  NS  a.root-servers.net.
.           208436  IN  NS  h.ro=
ot-servers.net.
.   =
        =
208436  IN  NS  m.root-servers.net.
.           208436  IN=
  NS  k.root-servers.net..           208436  IN  NS  l.root-ser=
vers.net.
.           2=
08436  IN =
 NS  g.root-servers.net.
.           208436  IN  NS  f.root-servers.net.
.           208436  IN  NS  c.root-servers.net=
.
.           208436  IN  NS<=
span class=3D"gmail-cm-tab" role=3D"presentation" style=3D"box-sizing:borde=
r-box;display:inline-block">  =
b.root-servers.net.
.   <=
/span>    =
    208436  IN  NS  e.root-servers.net.
.           208436  IN  NS  d.root-servers.net.
.           208436  IN  NS  i.ro=
ot-servers.net.

;; ADDITIONAL SECTION:
b.root-servers.net. =
415177  IN  A   199.9.14.201
l.root-servers.net. 357373  IN  A=
   199.7.83.42
=
h.root-servers.net. 417323  IN  A   198.97.190.53
g.root-servers.net. 403568  IN  A   192.112.36.4<=
/span>
j.root-servers.net=
. 364929  =
IN  A   192.58.128.30
i.root-servers.net. 376700  IN  A<=
span class=3D"gmail-cm-tab" role=3D"presentation" style=3D"box-sizing:borde=
r-box;display:inline-block">   192.36.148.17
e.root-servers.net. 415371  IN  A   192.203.=
230.10
f.root-servers.=
net. 406584  IN  A   192.5.5.241

Received 510 bytes from 10.204.109.209#53 =
in 381 ms
+ apk list
+ grep musl
musl-dbg-1.2.2-r1 x86_64 {musl} (MIT)
musl-1.2.2-r1 x86_6=
4 {musl} (MIT) [installed]
musl-locales-lang-0_git20200319-r=
1 x86_64 {musl-locales} (MIT)
musl-obstack-1.1-r1 x86_64 {=
musl-obstack} (GPL-2.0-or-later)
libc6-compat-1.2.2-r1 x86_6=
4 {musl} (MIT)
musl-utils-1.2.2-r1 x86_64 {musl} (MIT BSD GP=
L2+) [installed]
musl-nscd-dev-1.0.3-r1 x86_64 {musl-nscd} (=
MIT)
musl-dev-1.2.2-r1 x86_64 {musl} (MIT)
mu=
sl-nscd-1.0.3-r1 x86_64 {musl-nscd} (MIT)
musl-locales-0_git=
20200319-r1 x86_64 {musl-locales} (LGPL-3.0-only)
musl-nscd-=
doc-1.0.3-r1 x86_64 {musl-nscd} (MIT)
musl-obstack-dev-1.1-r=
1 x86_64 {musl-obstack} (GPL-2.0-or-later)
musl-libintl-1.2.=
2-r1 x86_64 {musl} (MIT)

Still alpi= ne 3.16 with musl-1.2.3-r0 fails:

docker run -it --rm --dns=3D10.204.109.209 alpine:3.1=
6 ash -c 'apk add curl bind-tools;set -x;curl -fsSL https://slack.com 1>/dev/null && echo success;hos=
t -4 -AAAA slack.com;apk list | grep musl&=
#39;       =E2=9C=93 ns-watch-attribution-nonprod 12:15
Unab=
le to find image 'alpine:3.16' locally
3.16: Pulling=
 from library/alpine
Digest: sha256:686d8c9dfa6f3ccfc8230bc3=
178d23f84eeaf7e457f36f271ab1acc53015037c
Status: Downloaded =
newer image for alpine:3.16
fetch https://dl-cdn.al=
pinelinux.org/alpine/v3.16/main/x86_64/APKINDEX.tar.gz
f=
etch https://dl-cdn.alpinelinux.org/alpine/v3.16/community/x8=
6_64/APKINDEX.tar.gz
(1/18) Installing fstrm (0.6.1-r0)<=
/span>
(2/18) Installing krb5-conf (1.0-r2)
(3/18) I=
nstalling libcom_err (1.46.5-r0)
(4/18) Installing keyutils-=
libs (1.6.3-r1)
(5/18) Installing libverto (0.3.2-r0)=

(6/18) Installing krb5-libs (1.19.3-r0)
(7/18) Inst=
alling json-c (0.16-r0)
(8/18) Installing protobuf-c (1.4.0-=
r0)
(9/18) Installing libuv (1.44.1-r0)
(10/1=
8) Installing xz-libs (5.2.5-r1)
(11/18) Installing libxml2 =
(2.9.14-r0)
(12/18) Installing bind-libs (9.16.29-r0)=

(13/18) Installing bind-tools (9.16.29-r0)
(14/18) =
Installing ca-certificates (20211220-r0)
(15/18) Installing =
brotli-libs (1.0.9-r6)
(16/18) Installing nghttp2-libs (1.47=
.0-r0)
(17/18) Installing libcurl (7.83.1-r1)
(18/18) Installing curl (7.83.1-r1)
Executing busybox-1.35.=
0-r13.trigger
Executing ca-certificates-20211220-r0.trigger<=
/span>
OK: 15 MiB in 32 packages
+ curl -fsSL https://slack.com
curl: (6) Coul=
d not resolve host: slack.com
+ host -4 -AAAA slack.com
Trying "slack.com"
<=
span role=3D"presentation" style=3D"box-sizing:border-box;padding-right:0.1=
px">;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 60635
;; flags: qr rd ra; QUERY: 1, ANSWER: 9, AUTHORITY: 13, ADDIT=
IONAL: 8

;; QUESTION SECTION:
;slack.com.         IN  ANY

;; ANSWER SECTION:
slack.com.      5   I=
N  A   <=
/span>3.95.117.96
slack.com=
.      5   IN=
  A   54.92.199.186
slack.com.=
      5   IN  A   34.225.62.185
slack.com.      5   IN  A   34.203.97.1=
0
slack.com.      5   IN  A   34.193.255.5
slack.com.      5   IN<=
span class=3D"gmail-cm-tab" role=3D"presentation" style=3D"box-sizing:borde=
r-box;display:inline-block">  A   54.163.235.119
slack.com.=
      5   IN =
 A   34.204.109.226
slack.com.=
      5   IN  A   34.231.24.224
slack.com.      5   IN  A   54.147.59.1=
69

<=
span role=3D"presentation" style=3D"box-sizing:border-box;padding-right:0.1=
px">;; AUTHORITY SECTION:
.   <=
/span>    =
    208128  IN  NS  m.root-servers.net.
.           208128  IN  NS  a.root-servers.net.
.           208128  IN  NS  j.ro=
ot-servers.net.
.   =
        =
208128  IN  NS  f.root-servers.net.
.           208128  IN=
  NS  d.root-servers.net..           208128  IN  NS  h.root-ser=
vers.net.
.           2=
08128  IN =
 NS  k.root-servers.net.
.           208128  IN  NS  b.root-servers.net.
.           208128  IN  NS  g.root-servers.net=
.
.           208128  IN  NS<=
span class=3D"gmail-cm-tab" role=3D"presentation" style=3D"box-sizing:borde=
r-box;display:inline-block">  =
i.root-servers.net.
.   <=
/span>    =
    208128  IN  NS  c.root-servers.net.
.           208128  IN  NS  l.root-servers.net.
.           208128  IN  NS  e.ro=
ot-servers.net.

;; ADDITIONAL SECTION:
b.root-servers.net. =
414869  IN  A   199.9.14.201
l.root-servers.net. 357065  IN  A=
   199.7.83.42
=
h.root-servers.net. 417015  IN  A   198.97.190.53
g.root-servers.net. 403260  IN  A   192.112.36.4<=
/span>
j.root-servers.net=
. 364621  =
IN  A   192.58.128.30
i.root-servers.net. 376392  IN  A<=
span class=3D"gmail-cm-tab" role=3D"presentation" style=3D"box-sizing:borde=
r-box;display:inline-block">   192.36.148.17
e.root-servers.net. 415063  IN  A   192.203.=
230.10
f.root-servers.=
net. 406276  IN  A   192.5.5.241

Received 510 bytes from 10.204.109.209#53 =
in 407 ms
+ apk list
+ grep musl
musl-dbg-1.2.3-r0 x86_64 {musl} (MIT)
musl-1.2.3-r0 x86_6=
4 {musl} (MIT) [installed]
musl-locales-lang-0.1.0-r0 x86_64=
 {musl-locales} (MIT)
musl-obstack-1.2.3-r0 x86_64 {musl-obs=
tack} (LGPL-2.1-or-later)
libc6-compat-1.2.3-r0 x86_64 {musl=
} (MIT)
musl-utils-1.2.3-r0 x86_64 {musl} (MIT BSD GPL2+) [i=
nstalled]
musl-nscd-dev-1.1.1-r0 x86_64 {musl-nscd} (MIT)
musl-dev-1.2.3-r0 x86_64 {musl} (MIT)
musl-nscd=
-1.1.1-r0 x86_64 {musl-nscd} (MIT)
musl-locales-0.1.0-r0 x86=
_64 {musl-locales} (LGPL-3.0-only)
musl-nscd-doc-1.1.1-r0 x8=
6_64 {musl-nscd} (MIT)
musl-legacy-error-0.5-r0 x86_64 {musl=
-legacy-error} (BSD-2-Clause)
musl-obstack-dev-1.2.3-r0 x8=
6_64 {musl-obstack} (LGPL-2.1-or-later)
musl-libintl-1.2.3-r=
0 x86_64 {musl} (MIT)


Greetings,Markus

--

Markus Geiger

Protean Linux = | Cloud | DevOps Engineer

RefinedLabs - A = Nielsen Company

www.nielsen.c= om


= <= /a>


--0000000000006ddcd105e22f08ae--