Lösung: systemd-resolved abschalten sudo systemctl disable systemd-resolved sudo systemctl stop systemd-resolved sudo rm /etc/resolv.conf In /etc/NetworkManager/NetworkManager.conf in der [main] -Sektion: dns=default NetworkManager neu starten: sudo systemctl restart NetworkManager cat /etc/resolv.conf # Generated by NetworkManager search kernel-error.local nameserver 10.10.88.1 nameserver fd00:424e:6eff:f525:454e:6eff:f525:4241 DNS-Auflösung geht. Aber SSH sagt weiterhin „insecure“.