Linux: only disable systemd dnssec on Debian bullseye

Debian bookworm and newer should have working DNSSEC with
systemd-resolved.

Author: kenyon

data/kernel/Linux.yaml

@@ -144,9 +144,6 @@ systemd::networks:
       LLDP=yes
       MulticastDNS=yes
 
-# DNSSEC disabled due to bugs. Looks like https://github.com/systemd/systemd/pull/18624 should fix
-# it in systemd 248.
-systemd::dnssec: false
 systemd::domains: "%{trusted.domain}"
 systemd::journald_settings:
   Storage: persistent

data/os/codename/bullseye.yaml

@@ -36,3 +36,7 @@ apt::sources:
     include:
       src: false
     architecture: "%{facts.os.architecture}"
+
+# DNSSEC disabled due to bugs. Looks like https://github.com/systemd/systemd/pull/18624 should fix
+# it in systemd 248.
+systemd::dnssec: false