Windows containers on Docker cannot lookup a host on 10.0.20348.3932, earlier unaffected

[doctorpangloss]

Please fill out all the sections below for bug issues, otherwise it'll be closed as it won't be actionable for us to address.

Describe the bug
DNS is broken quite badly in the latest windows update as the host (10.0.20348.3932) even when using powershell, so reopens #216

$ docker run -it mcr.microsoft.com/windows/server:10.0.20348.3566
Microsoft Windows [Version 10.0.20348.3566]
(c) Microsoft Corporation. All rights reserved.

C:\>nslookup github.com
DNS request timed out.
    timeout was 2 seconds.
Server:  UnKnown
Address:  172.20.240.1

DNS request timed out.
    timeout was 2 seconds.
DNS request timed out.
    timeout was 2 seconds.
^C
C:\>powershell
Windows PowerShell
Copyright (C) Microsoft Corporation. All rights reserved.

Install the latest PowerShell for new features and improvements! https://aka.ms/PSWindows

PS C:\> Resolve-DnsName github.com
Resolve-DnsName : github.com : DNS server failure
At line:1 char:1
+ Resolve-DnsName github.com
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : ResourceUnavailable: (github.com:String) [Resolve-DnsName], Win32Exception
    + FullyQualifiedErrorId : RCODE_SERVER_FAILURE,Microsoft.DnsClient.Commands.ResolveDnsName

PS C:\>

$ docker run -it mcr.microsoft.com/windows/server:10.0.20348.3932
Microsoft Windows [Version 10.0.20348.3932]
(c) Microsoft Corporation. All rights reserved.

C:\>powershell
Windows PowerShell
Copyright (C) Microsoft Corporation. All rights reserved.

Install the latest PowerShell for new features and improvements! https://aka.ms/PSWindows

PS C:\> Resolve-DnsName github.com
Resolve-DnsName : github.com : This operation returned because the timeout period expired
At line:1 char:1
+ Resolve-DnsName github.com
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : OperationTimeout: (github.com:String) [Resolve-DnsName], Win32Exception
    + FullyQualifiedErrorId : ERROR_TIMEOUT,Microsoft.DnsClient.Commands.ResolveDnsName

PS C:\>

To Reproduce
(see above)

Expected behavior
You should have an automated test for dns lookups on Docker Desktop

Configuration:

• Edition: Windows Server 2022 10.0.20348.3932
• Container engine: docker
• Container Engine version: 28.3.2

[github-actions]

Thank you for creating an Issue. Please note that GitHub is not an official channel for Microsoft support requests. To create an official support request, please open a ticket here. Microsoft and the GitHub Community strive to provide a best effort in answering questions and supporting Issues on GitHub.

[ntrappe-msft]

Hi, I wasn't able to repro your issue. It looks like everything is working fine for me.

Version 10.0.20348.3566

PS C:\> nslookup github.com
Server:  UnKnown
Address:  172.28.208.1

Non-authoritative answer:
Name:    github.com
Address:  140.82.116.4

PS C:\> Resolve-DnsName github.com

Name                                           Type   TTL   Section    IPAddress
----                                           ----   ---   -------    ---------
github.com                                     A      0     Answer     140.82.116.4

Version 10.0.20348.3932

PS C:\> nslookup github.com
Server:  UnKnown
Address:  172.28.208.1

Non-authoritative answer:
Name:    github.com
Address:  140.82.116.4

PS C:\> Resolve-DnsName github.com

Name                                           Type   TTL   Section    IPAddress
----                                           ----   ---   -------    ---------
github.com                                     A      0     Answer     140.82.116.4

Could you try running the container with explicit DNS settings or check your firewall rules?

[doctorpangloss]

reverting did not resolve the problem, so this may be a docker bug

I still can't really figure out why it has started to occur

Thanks for investigating

[doctorpangloss]

oops, i did not mean to close. did you test on a 2022 10.0.20348.3932 host or only guest container images?

[ntrappe-msft]

I received those results from running the nslookup command inside a container. I just followed your step of doing: docker run -it mcr.microsoft.com/windows/server:10.0.20348.3566. Are you using Docker Desktop too?