No DNS resolution in user (rootless) podman container

I’m trying to run a podman container - not through virtualisation.oci, but by using podman from my user account. Unfortunately, I can’t get nay DNS resolution from within the container.

For example, curl returns output like

{"error":{"code":500,"message":"Get \"https://raw.githubusercontent.com/.../config.yaml\": dial tcp: lookup raw.githubusercontent.com on 10.89.0.1:53: read udp 10.89.0.2:35933-\u003e10.89.0.1:53: i/o timeout","type":""}}

In the syslog I have messages like

aardvark-dns[1173831]: 59974 dns request got empty response

I do have in my config

  virtualisation.podman = {
    enable = true;
    defaultNetwork.settings = { dns_enabled = true; };
  };
  networking.firewall.allowedUDPPorts = [ 53 ];

I see other threads such as Podman containers DNS - #3 by ptman discussing a similar issue, but that’s clearly talking about rootful containers (rootless containers don’t have a podman+ network interface).

Having this one too. Happens whenever a pod is attached to a network with dns_enabled. Works fine if I use default (without that extra config), breaks upon using compose.