ci: dnsmasq DNS bridge in dind service (LAN blocks container DNS egress)

0d7ddad9408b15d746c370174bfde69c5ea7407e

permissionBRICK <christoph.ambrosch@live.at>

Parents: 6b45c7c6f6bf5f1a842165aa4d55ff01f406979b
1 files changed, +4 -3Ignore whitespace
.gitlab-ci.yml+4 -3
@@ -7,9 +7,10 @@ build-image:
7 services:7 services:
8 - name: docker:dind8 - name: docker:dind
9 alias: docker9 alias: docker
10 # DNS comes from the runner's GITGUD_RUNNER_JOB_DNS; --mtu clamps the10 # dnsmasq bridges inner-container DNS to the outer embedded resolver
11 # inner bridge (double NAT breaks PMTUD -> zero-byte download stalls).11 # (this LAN blocks direct DNS egress from containers); --bip avoids
12 command: ["sh", "-c", "DOCKER_TLS_CERTDIR='' exec dockerd-entrypoint.sh --mtu=1400"]12 # network collisions; --mtu clamps the inner bridge (PMTUD blackhole).
13 command: ["sh", "-c", "apk add --no-cache dnsmasq >/dev/null 2>&1; dnsmasq --listen-address=0.0.0.0 --port=53 --server=127.0.0.11 --no-resolv; DOCKER_TLS_CERTDIR='' exec dockerd-entrypoint.sh --bip=192.168.255.1/24 --dns=192.168.255.1 --mtu=1400"]
13 variables:14 variables:
14 DOCKER_HOST: tcp://docker:237515 DOCKER_HOST: tcp://docker:2375
15 script:16 script: