Crazy… My employee was filtering dns queries to Cloudflare (1.1.1.1) or Google (8.8.8.8). We are forced to use our internal dns server. If I edit /etc/resolv.conf and configure the dns server manually it works (until next reboot).
Anyway, this is not the real source of the error. libvirt is already running a DNS server (dnsmasq ), and it gives the network conf info to the vm.
journalctl -u NetworkManager.service on vm:
May 21 09:02:25 umbrel NetworkManager[1449]: <info> [1716282145.7461] dhcp4 (enp10s0): address 192.168.100.2
May 21 09:02:25 umbrel NetworkManager[1449]: <info> [1716282145.7461] dhcp4 (enp10s0): plen 24 (255.255.255.0)
May 21 09:02:25 umbrel NetworkManager[1449]: <info> [1716282145.7461] dhcp4 (enp10s0): gateway 192.168.100.1
May 21 09:02:25 umbrel NetworkManager[1449]: <info> [1716282145.7462] dhcp4 (enp10s0): lease time 3600
May 21 09:02:25 umbrel NetworkManager[1449]: <info> [1716282145.7462] dhcp4 (enp10s0): hostname 'umbrel'
May 21 09:02:25 umbrel NetworkManager[1449]: <info> [1716282145.7462] dhcp4 (enp10s0): nameserver '192.168.100.1'
May 21 09:02:25 umbrel NetworkManager[1449]: <info> [1716282145.7462] dhcp4 (enp10s0): domain name 'redvirtual'
IP and gateway are propperly configured, but nameserver is not updated.
cat /etc/resolv.conf on vm:
# Generated by NetworkManager
nameserver 1.1.1.1
nameserver 1.0.0.1
If I edit /etc/resolv.conf and set nameserver to 192.168.100.1 it works. So it seems that NetworkManager is discarting the dns info received by libvirt .
$ cat /etc/NetworkManager/NetworkManager.conf
[main]
plugins=ifupdown,keyfile
dhcp=dhclient
[ifupdown]
managed=false
# This is important, we use Cloudflare for DNS because some users have routers that provide
# unreliable DNS that results in Docker errors when pulling like:
# Get "https://registry-1.docker.io/v2/tailscale/tailscale/manifests/sha256:d488853664499d792b359ea8c18f9a918b92e805b403733fe1c9aac9006ac8c1": dial tcp [2600:1f18:2148:bc01:571f:e759:a87a:2961]:443: connect: network is unreachable
[global-dns-domain-*]
servers=1.1.1.1,1.0.0.1
dns servers are fixed by default. Commented the last two lines and worked.