It’s registry-1 (typo). Which was nxdomain briefly (copy/paste from error logs onto Google’s online dig tool) and now something on my end is caching and locking on to that.
Holy hell did I catch some terrible timing on migrating over to SCALE. It turned out that the first time that I’d tried to install dockge was indeed docker having a momentary burp in DNS.
But I think the subsequent failures that I bashed my head against for way too long were actually related to catching a bad OPNSense update that was causing kernel panics and other misbehavior, including an odd inability to pull docker images.
Which I promptly blamed on the new hardware that I’d just migrated the firewall to (it was on the TrueNAS machine previously) - reverted back to the VM on the TrueNAS and network performance seemingly reverted to normal (but now just started getting sketchy again and indeed I had the bad update here too).