Cedric was suffering this bug but claims it magically started working for him today. It appears as though libvirtd is starting, and starting dnsmasq, before /etc/resolv.conf is updated. Is updating /etc/resolv.conf included in network.target? Or is there another network service that should be started before libvirtd?