Fix NETW-2706: Update DNSSEC detection logic for modern resolvectl - #1740

summary

this pr improves the dnssec detection logic in the `netw-2706` test to support newer versions of `systemd-resolved` (systemd 250 and later).

problem

the current implementation relies on `resolvectl --statistics`, which only provides statistical counters and does not reliably indicate whether dnssec is active for the current network interfaces. furthermore, the previous `awk` parsing logic fails on newer output formats like `dnssec=yes/supported`.

changes

• changed `resolve_cmd_param` from `--statistics` to `status` to get the actual operational status.
• updated the parsing logic using `grep` and `cut` to correctly extract the status even when the output includes additional info (e.g., `yes/supported`).
• added `head -n 1` to ensure a consistent single-line result when multiple interfaces are active.

note for maintainers

i am a japanese user and am using a machine translator to write this. i apologize for any unnatural phrasing. i have verified this fix on my local environment, and it now correctly returns `yes`.

verified result

command:

 

resolvectl status | grep -o 'DNSSEC=[^ ]*' | cut -d'=' -f2 | cut -d'/' -f1 | head -n 1

Output:

 

yes