---
# SPDX-License-Identifier: GPL-3.0-or-later
- name: dnssec_test rhybar.cz. +cd returns NOERROR
  tags:
    - test
  shell: kdig +cd @127.0.0.1 rhybar.cz.
  register: res
  failed_when: '"status: NOERROR" not in res.stdout'

- name: dnssec_test rhybar.cz. returns SERVFAIL
  tags:
    - test
  shell: kdig +timeout=16 @127.0.0.1 rhybar.cz.
  register: res
  failed_when: '"status: SERVFAIL" not in res.stdout'