-
Cause: Colima networking vs host port conflict
-
Fix: Verified Unbound container was listening on
172.22.0.10:5335- Used
ss -ulninside the container
- Used
-
Cause: Pi-hole wasn’t properly using Unbound as upstream DNS
-
Fix: Corrected
PIHOLE_DNS_environment variable indocker-compose.yml
-
Cause: Tailscale wasn't advertising DNS port
-
Fix: Added firewall rules inside the container using iptables
iptables -A INPUT -s 100.0.0.0/8 -p udp --dport 53 -j ACCEPT
iptables -A INPUT -s 100.0.0.0/8 -p tcp --dport 53 -j ACCEPT
-
Cause: Docker socket not found after restart
-
Fix: Re-exported Docker socket after
colima start:export DOCKER_HOST=unix://$HOME/.colima/default/docker.sock
- Fix: Identified
limactloccupying UDP 5335 using `lsof
-iUDP:5335`, then killed and restarted socat