i give up on dealing with VMs and pihole. i have just paid $20 for a year of NextDNS for network-wide ad-blocking