@User the general reason was because we are binding to port 53 on the host machine for CoreDNS which screws up resolvectl.