DNS fails in docker 29.1.0-1 #6684
Description
Description
This morning I updated Docker on my Debian 13 systems from 29.0.4-1 to 29.1.0-1. Once I did so, DNS stopped working in every docker container I have. The containers can still reach the DNS server IP, but DNS lookups with the default resolv.conf fail.
Manually changing /etc/resolv.conf from the default to a hard-coded nameserver allows DNS lookups to start working again.
Reverting docker-ce from 29.1.0-1 back to 29.0.4-1 also fixes the problem.
Adding a manual DNS entry to /etc/docker/daemon.json does not have any effect.
Reproduce
Update Docker (on Debian 13) to 29.1.0-1, then test DNS resolution inside a container.
Expected behavior
nslookup, ping, apt update, etc. should work normally without having to manually override /etc/resolv.conf
docker version
Client: Docker Engine - Community
Version: 29.1.0
API version: 1.52
Go version: go1.25.4
Git commit: 360952c
Built: Thu Nov 27 16:42:45 2025
OS/Arch: linux/amd64
Context: default
Server: Docker Engine - Community
Engine:
Version: 29.1.0
API version: 1.52 (minimum version 1.44)
Go version: go1.25.4
Git commit: 710302e
Built: Thu Nov 27 16:42:45 2025
OS/Arch: linux/amd64
Experimental: false
containerd:
Version: v2.1.5
GitCommit: fcd43222d6b07379a4be9786bda52438f0dd16a1
runc:
Version: 1.3.3
GitCommit: v1.3.3-0-gd842d771
docker-init:
Version: 0.19.0
GitCommit: de40ad0docker info
Client: Docker Engine - Community
Version: 29.1.0
Context: default
Debug Mode: false
Plugins:
buildx: Docker Buildx (Docker Inc.)
Version: v0.30.1
Path: /usr/libexec/docker/cli-plugins/docker-buildx
compose: Docker Compose (Docker Inc.)
Version: v2.40.3
Path: /usr/libexec/docker/cli-plugins/docker-compose
model: Docker Model Runner (Docker Inc.)
Version: v1.0.2
Path: /usr/libexec/docker/cli-plugins/docker-model
Server:
Containers: 1
Running: 1
Paused: 0
Stopped: 0
Images: 1
Server Version: 29.1.0
Storage Driver: overlayfs
driver-type: io.containerd.snapshotter.v1
Logging Driver: json-file
Cgroup Driver: systemd
Cgroup Version: 2
Plugins:
Volume: local
Network: bridge host ipvlan macvlan null overlay
Log: awslogs fluentd gcplogs gelf journald json-file local splunk syslog
CDI spec directories:
/etc/cdi
/var/run/cdi
Swarm: inactive
Runtimes: io.containerd.runc.v2 runc
Default Runtime: runc
Init Binary: docker-init
containerd version: fcd43222d6b07379a4be9786bda52438f0dd16a1
runc version: v1.3.3-0-gd842d771
init version: de40ad0
Security Options:
apparmor
seccomp
Profile: builtin
cgroupns
Kernel Version: 6.12.57+deb13-amd64
Operating System: Debian GNU/Linux 13 (trixie)
OSType: linux
Architecture: x86_64
CPUs: 4
Total Memory: 7.761GiB
Name: dmzhost2
ID: f9a02a16-4a17-4370-b8b8-dbe0c7535bdc
Docker Root Dir: /var/lib/docker
Debug Mode: false
Experimental: false
Insecure Registries:
::1/128
127.0.0.0/8
Live Restore Enabled: false
Default Address Pools:
Base: 172.16.0.0/12, Size: 26
Firewall Backend: iptablesAdditional Info
No response