So ubuntu force-replaces DNS by systemd-resolved and docker doesn't automatically get new DNS data. I mean a crude workaround is just wacking a few crontab jobs to re-stop resolved periodically