Fix DNS setup on new machine

Author: arjunkomath

agent/cmd/agent/main.go

@@ -112,13 +112,13 @@ func main() {
 
 		log.Printf("Loaded config: serverID=%s, subnetId=%d, wireguardIP=%s", config.ServerID, config.SubnetID, config.WireGuardIP)
 
-		if err := dns.SetupLocalDNS(config.SubnetID); err != nil {
-			log.Printf("Warning: Failed to setup local DNS: %v", err)
-		}
-
 		if err := container.EnsureNetwork(config.SubnetID); err != nil {
 			log.Printf("Warning: Failed to ensure container network: %v", err)
 		}
+
+		if err := dns.SetupLocalDNS(config.SubnetID); err != nil {
+			log.Printf("Warning: Failed to setup local DNS: %v", err)
+		}
 	} else {
 		if token == "" {
 			log.Fatal("--token is required for first-time registration")
@@ -186,19 +186,19 @@ func main() {
 
 		log.Println("WireGuard interface is up!")
 
-		log.Println("Setting up local DNS...")
-		if err := dns.SetupLocalDNS(config.SubnetID); err != nil {
-			log.Printf("Warning: Failed to setup local DNS: %v", err)
-		} else {
-			log.Println("Local DNS configured successfully")
-		}
-
 		log.Println("Ensuring container network exists...")
 		if err := container.EnsureNetwork(config.SubnetID); err != nil {
 			log.Printf("Warning: Failed to create container network: %v", err)
 		} else {
 			log.Println("Container network ready")
 		}
+
+		log.Println("Setting up local DNS...")
+		if err := dns.SetupLocalDNS(config.SubnetID); err != nil {
+			log.Printf("Warning: Failed to setup local DNS: %v", err)
+		} else {
+			log.Println("Local DNS configured successfully")
+		}
 	}
 
 	reconciler := reconcile.NewReconciler(config.EncryptionKey, dataDir)

agent/internal/container/runtime_linux.go

@@ -506,5 +506,9 @@ func EnsureNetwork(subnetId int) error {
 		return fmt.Errorf("failed to create network: %s: %w", string(output), err)
 	}
 
+	// Podman only creates the bridge interface when a container uses the network.
+	// Run a throwaway container to force bridge creation so DNS can bind to the gateway IP.
+	exec.Command("podman", "run", "--rm", "--network", NetworkName, "busybox", "true").Run()
+
 	return nil
 }