Comment 3 for bug 2006972

Confirmed the MRE fixed this issue for Jammy:

# lxc launch images:ubuntu/jammy test-bind9
# lxc exec test-bind9 bash

# cat <<EOF >/etc/apt/sources.list.d/ubuntu-$(lsb_release -cs)-proposed.list
# Enable Ubuntu proposed archive
deb http://archive.ubuntu.com/ubuntu/ $(lsb_release -cs)-proposed restricted main multiverse universe
EOF

# apt update && apt dist-upgrade
# apt install bind9

# cat <<EOF >/etc/bind/named.conf.options
options {
        directory "/var/cache/bind";
        dnssec-validation auto;
        listen-on-v6 { any; };
};
plugin query "filter-aaaa.so" {
        filter-aaaa-on-v4 yes;
};
EOF

# named-checkconf

No output - good to go