Micah R Ledbetter /mɹ̩ˈled/
@mrled
I was trying to hold off because I already had the Pi.
The Pi is the DNS server for the network, and gives hostnames to cluster nodes, so its resolv.conf needs to point to itself for DNS.
And if DNSSEC is turned on in BIND, it needs to connect to other DNS servers securely.