systemd-resolved support for GlobalProtect Linux

[mickael]

My system is using systemd-resolved to manage name resolution.

my /etc/resolv.conf is a symlink to /run/systemd/resolve/stub-resolv.conf

When I connect to GP, my systemd is not aware that new DNS server and search domains are available.

Is there a way to support this ? (like a post connection hook script)

(note that /opt/paloaltonetworks/globalprotect/network/config/resolv.conf is properly filled)

[BPry]

@mickael,

I'm not actually sure that the Linux application supports the ability for post-connection scripts. This would be a relatively easy script to do though, as you would simply modify the symlink between GlobalProtect's resolv.conf and and stub-resolv.conf. I'm just not sure that the Linux agent actually supports the ability to run scripts like the macOS and Windows agents. 

[smithplatts]

Distribution-specific resolution, but on Ubuntu 17.10 and onwards, the package 'resolvconf' needs to be installed. Work was done between Ubuntu 17.04 and 17.10 to ensure that 'resolvconf' would integrate seamlessly into 'systemd-resolved', as a ancillary process to help integrate applications and configurations with systemd.

I have confirmed this in our environment, with 18.04 and 20.04 working exactly as required once the 'resolvconf' package is installed.