Before You Rebuild That Service, Query the Resolver: A DNS-First Debugging Routine
When sudo drags, package installs fail, or SSH works on one host but not another, the service is often innocent. This DNS-first troubleshooting ladder walks through resolv.conf, systemd-resolved, search domains, split-horizon zones, caching, and packet captures so you can rule out name resolution before rebuilding anything.