feat: add DNS server to guest boot args

[slash-init]

Description

This adds DNS server handling for guests that support configuring DNS through boot/runtime arguments.

The DNS server is read from the OCI /etc/resolv.conf mount and passed through NetDevParams to the guest-specific network configuration.

Currently this adds DNS handling for:

• Mirage
• Hermit
• Mewz

Tests have also been added for the new DNS handling.

Rumprun is left out for now based on the discussion in #1039, since it does not appear to support configuring DNS through boot arguments.

Related issues

• Fixes Read and set the DNS server for every guest #1039

How was this tested?

• Added unit tests for Mirage and Mewz DNS handling.
• Ran the relevant Go tests locally.
• The OCI /etc/resolv.conf -> NetDevParams.DNSServer path still needs end-to-end verification.

LLM usage

GPT 5.6 Luna was used to assist with implementation. All generated code was reviewed.

Checklist

• I have read the [contribution guide](https://urunc.io/developer-guide/contribute/).
• The linter passes locally (make lint).
• The e2e tests of at least one tool pass locally (make test_ctr, make test_nerdctl, make test_docker, make test_crictl).
• If LLMs were used: I have read the [llm policy](https://urunc.io/developer-guide/llm-policy/).

[netlify]

✅ Deploy Preview for urunc ready!

Name	Link
🔨 Latest commit	475ea94
🔍 Latest deploy log	https://app.netlify.com/projects/urunc/deploys/6ac4cc266a1c1100081e004c
😎 Deploy Preview	https://deploy-preview-1051--urunc.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[slash-init]

hey @cmainas , just following up on this PR since it's been a couple weeks.
the current changes implement DNS boot-arg handling for Mirage, Hermit and Mewz, with tests for the new behavior. Rumprun is left out based on the discussion in the issue.
happy to address any feedback or changes needed.

[cmainas]

Hello @slash-init ,

please sign your commits.

[cmainas]

The commit is still unsigned.

[slash-init]

@cmainas thanks for pointing that out
i’ve added the DCO sign-off to the commit and force-pushed the updated commit.

[cmainas]

Thank you @slash-init for the updates. I have added some comments. Also, please do not forget to add yourself in https://github.com/urunc-dev/urunc/blob/main/.github/contributors.yaml

[slash-init]

@cmainas thanks!
addressed the review feedback and added myself to the contributors list.

[cmainas]

Hello @slash-init ,

I tested out the changes and unfortunately they do not work.

• For mirage the format is wrong. It should have a udp or tcp prefix. See https://github.com/mirage/mirage/blob/dccd7db3c3358587f52350cd7f4d412f6cec82bf/lib/devices/dns.ml#L34-L41
• For mirage again the dns client must be present in the unikernel, otherwise there cli option can not be consumed. This is the reason that the tests fail.
• In case of hermit-rs, networking does not work at all. That is a separate bug.

So focusing on mirage, we need to use an annotation and let users set it at build time to see if the unikernel actually has a dns client.

[slash-init]

hi! @cmainas
Pushed the latest fixes for the review feedback: Mirage DNS client gating and udp: prefix handling, along with the redundant test cleanup and updated coverage.

[cmainas]

Thank you @slash-init for the changes. They are in the right direction. I just added some comments. Overall:

• Just a naming comment
• we do not need to pass the new annotation value to the unikernel implementatios, we cna simply set the DNS value to empty in case the new annotation (renamed as :advertiseDNS") is false.

[cmainas]

Also, a few more comments:

• We should also add the tcp, along with udp for MirageOS with the same IP
• We should document the new annotation.

[slash-init]

hi! @cmainas, pushed the latest changes. take a look when you get a chance.

[cmainas]

Hello @slash-init ,

there is a regression for Unikraft with the last commit. We should limit the check only for Mirage (for the time being, we need to update the images). Let;s also add a TODO comment for that.

[slash-init]

hi @cmainas, pushed the latest changes. Scoped the gate to Mirage only for the time being, added error handling for ParseBool, and updated the tests and docs.