I run docker on mine.
I then run pi-hole, via docker inside there.
She’s a reliable, simple VM that’s been up for 18 months or longer, update her once every few months, update the docker image, done.
Did the most recent update, my docker image stops responding to DNS queries (despite the docker container being up and working)
Some kind of routing / firewall change perhaps? Docker engine update?
I can dig deeper, but for the time being I just rolled back.