ci: dnsmasq DNS bridge in dind service (LAN blocks container DNS egress)

0d7ddad9408b15d746c370174bfde69c5ea7407e

permissionBRICK <christoph.ambrosch@live.at>

Parents: 6b45c7c6f6bf5f1a842165aa4d55ff01f406979b
1 files changed, +4 -3Ignore whitespace
.gitlab-ci.yml+4 -3
@@ -7,9 +7,10 @@ build-image:
77 services:
88 - name: docker:dind
99 alias: docker
10- # DNS comes from the runner's GITGUD_RUNNER_JOB_DNS; --mtu clamps the
10+ # dnsmasq bridges inner-container DNS to the outer embedded resolver
11- # inner bridge (double NAT breaks PMTUD -> zero-byte download stalls).
11+ # (this LAN blocks direct DNS egress from containers); --bip avoids
12- command: ["sh", "-c", "DOCKER_TLS_CERTDIR='' exec dockerd-entrypoint.sh --mtu=1400"]
12+ # network collisions; --mtu clamps the inner bridge (PMTUD blackhole).
13+ command: ["sh", "-c", "apk add --no-cache dnsmasq >/dev/null 2>&1; dnsmasq --listen-address=0.0.0.0 --port=53 --server=127.0.0.11 --no-resolv; DOCKER_TLS_CERTDIR='' exec dockerd-entrypoint.sh --bip=192.168.255.1/24 --dns=192.168.255.1 --mtu=1400"]
1314 variables:
1415 DOCKER_HOST: tcp://docker:2375
1516 script: