Redacted excerpt; full evidence withheld.

Docker daemon cannot resolve registry-1.docker.io (resolver 127.0.0.53 returns SERVFAIL); daemon does not use the VM's HTTP proxy for name resolution.