Most current Linux distributions, including Ubuntu and Fedora, resolve names through systemd-resolved, which supports DNS over TLS. On Debian, install it first with sudo apt install systemd-resolved. Point it at Blokada Cloud, and ads and trackers are blocked for every app on the computer.
This is a companion discussion topic for the original entry at https://blokada.org/guides/linux-dns-over-tls/