enricobuehler 313f194c63 fix(ci/flatpak): the DNS failures are runner-load packet drops, not nsswitch — widen the retry budget ...

Live-debugged on home-runner-1: confirmed the dnf install in Tooling does
NOT actually rewrite /etc/nsswitch.conf (no authselect trigger fires), so
the nss-resolve sed from 68b5376f/5f687a70 was never the actual fix.
gitea-runner-fleet on this box is a shared, resource-capped fleet (3
replicas, --cpus 5/--memory 7g each, on 16c/24G) serving punktfunk AND
several other orgs' repos concurrently. A push to main fans out ~8
punktfunk workflows at once on top of that other traffic, and the box's
Docker embedded DNS resolver (127.0.0.11) drops UDP lookups under the
combined load — exactly what retry.sh's own header already documented.
Manually dispatching this job while the box was idle succeeded instantly,
with or without the sed. retry.sh's 5-attempt (~100s) budget isn't always
enough to outlast a synchronized multi-org burst; bumped the three
flathub-facing calls (remote-add, install-deps-only, download-only) to 10
attempts (~9min). Verified end-to-end on a live re-run (run 8993) after
this change: full success including publish + OSTree deploy.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-07-11 02:22:17 +02:00

..

android-screenshots.yml

ci: SHA-pin secret-bearing third-party actions + audit the web dep tree

2026-07-06 07:28:45 +02:00

android.yml

ci(android): attach the built APK to the workflow run

2026-07-07 17:01:02 +00:00

apple.yml

fix(security): anti-replay, 0600 client key, open redirect, supply-chain

2026-07-10 10:04:23 +02:00

arch.yml

fix(packaging): vulkan-headers build dep + ship punktfunk-session across desktop packages

2026-07-07 23:41:10 +02:00

audit.yml

ci: SHA-pin secret-bearing third-party actions + audit the web dep tree

2026-07-06 07:28:45 +02:00

bench-gpu.yml

bench(ci): report-only regression harness — Tier-1/2 in CI + Tier-3 GPU runner

2026-06-13 19:24:52 +00:00

ci.yml

build: pin the exact Rust toolchain (1.96.0) to stop rustfmt drift

2026-07-05 19:32:38 +00:00

deb.yml

fix(packaging): vulkan-headers build dep + ship punktfunk-session across desktop packages

2026-07-07 23:41:10 +02:00

decky.yml

ci(release): derive canary version from git tags (single source of truth)

2026-07-03 22:40:25 +00:00

deploy-services.yml

feat(ci): accept deploy_host input so deploy-all can target a fresh box

2026-07-11 01:56:04 +02:00

docker.yml

ci: SHA-pin secret-bearing third-party actions + audit the web dep tree

2026-07-06 07:28:45 +02:00

flatpak.yml

fix(ci/flatpak): the DNS failures are runner-load packet drops, not nsswitch — widen the retry budget

2026-07-11 02:22:17 +02:00

linux-client-screenshots.yml

fix(packaging): vulkan-headers build dep + ship punktfunk-session across desktop packages

2026-07-07 23:41:10 +02:00

release.yml

fix(apple/release): embed Developer ID provisioning profile in the DMG

2026-07-04 15:00:56 +02:00

rpm.yml

fix(packaging): vulkan-headers build dep + ship punktfunk-session across desktop packages

2026-07-07 23:41:10 +02:00

web-screenshots.yml

feat(web): CI screenshot capture for the mgmt console

2026-06-28 15:05:27 +00:00

windows-drivers.yml

fix(security): anti-replay, 0600 client key, open redirect, supply-chain

2026-07-10 10:04:23 +02:00

windows-host.yml

ci(release): derive canary version from git tags (single source of truth)

2026-07-03 22:40:25 +00:00

windows-msix.yml

feat(clients/windows): port the Vulkan session client to Windows — session-always

2026-07-08 23:21:36 +02:00

windows.yml

fix(security): anti-replay, 0600 client key, open redirect, supply-chain

2026-07-10 10:04:23 +02:00