kevinveenbirkenbach 0ff511293e Add a dedicated Docker-in-Docker DNS self-test and integrate it into the ...

sys-svc-docker role as a post-restart validation handler.

This change moves the inner-container DNS validation out of the CI test
suite and into the Docker service lifecycle itself, ensuring that DNS is
verified exactly where it matters: inside the Docker-in-Docker daemon.

Key changes:
- Add roles/sys-svc-docker/files/test-dns.sh:
  - Runs inside the DinD container
  - Waits for dockerd readiness
  - Executes a BusyBox test container with explicit --dns
  - Verifies DOMAIN and subdomain resolve to the expected IP
  - Fails hard if DNS is broken

- Register DNS self-test as a docker restart handler:
  - Runs once per deployment
  - Only executed when DOCKER_IN_CONTAINER and MODE_DEBUG are enabled
  - Uses ansible.builtin.script with role_path for correct resolution

- Remove inner Docker DNS test from scripts/tests/dns.sh:
  - CI test suite now only validates host → CoreDNS → outer container chain
  - DinD DNS validation is now part of the Docker service health lifecycle

This ensures that:
- DNS is validated after every Docker restart
- DinD networking failures are detected immediately
- CI and production share the same DNS validation logic
- Docker-in-Docker DNS becomes a first-class health invariant

https://chatgpt.com/share/696a3dda-5c6c-800f-8a16-47c0c604e1e3

2026-01-16 15:07:17 +01:00

..

build

refactor(ci): move release helper scripts into scripts/release and drop legacy publish helpers

2026-01-13 13:36:17 +01:00

ci

ci: always keep stack on failure in deploy-app workflow

2026-01-14 15:11:23 +01:00

docker

optimized code tests

2026-01-15 02:07:31 +01:00

local-dns

feat(local-dns): add dnsmasq-based infinito.example wildcard + set CI primary domain

2026-01-15 18:38:15 +01:00

release

Test DNS for all distros

2026-01-16 14:38:22 +01:00

tests

Add a dedicated Docker-in-Docker DNS self-test and integrate it into the

2026-01-16 15:07:17 +01:00