jason 541e3398a0 🐛 Fix container DNS: ship resolv.conf without search domain 🐛 ...

Hosts with a search domain (e.g. search casjay.dev) cause containers
to inherit it. When that zone has a wildcard AAAA record, public
hostnames like github.com resolve to the host's own IPv6 address
instead of the real server, breaking all HTTPS (and any other
protocol) from inside the container.
The entrypoint already has a hook: if /usr/local/etc/resolv.conf
exists it replaces /etc/resolv.conf at container startup. Ship a
clean resolv.conf with Cloudflare + Google DNS and no search domain
so container DNS is always correct regardless of host configuration.
- rootfs/usr/local/etc/resolv.conf: new file — clean DNS, no search domain

rootfs/usr/local/etc/resolv.conf

2026-06-05 12:22:20 -04:00

..

root/docker/setup

🐛 Add retry logic to gitea and act_runner downloads 🐛

2026-06-04 17:30:26 -04:00

tmp/etc

🐛 Disable act_runner cache — external_secret required when enabled 🐛

2026-06-04 16:54:06 -04:00

usr/local

🐛 Fix container DNS: ship resolv.conf without search domain 🐛

2026-06-05 12:22:20 -04:00