MarshallOfSound

#54827: ci: use Cloudflare DNS directly on macOS runners

Merged
Created: Oct 10, 2026, 5:55:59 AM
Merged: Oct 13, 2026, 1:28:41 AM
5 comments
Target: main

Description of Change

The macOS runner VMs get 192.168.64.1 from DHCP as their only resolver. That is a caching, UDP-only DNS proxy on the VM host which forwards to Google Public DNS, so TCP DNS fails and answers are re-synthesized by the proxy.

This makes the first step of every macOS job (build, publish, test, gn-check, clang-tidy, pgo-collect and macos-disk-cleanup) point the system resolver at 1.1.1.1/1.0.0.1 and flush the DNS cache, before checkout. No restart is needed. It is an inline run: step rather than a composite action because a local action is not available until after checkout.

Probed on macos-15-large and macos-15-xlarge in this run: after the switch, lookups go to Cloudflare (AS13335), TCP DNS works and the setting persists.

Checklist

  • PR description included

🤖 Generated with Claude Code

Notes: none

Backports

42-x-y
Pending
Waiting for a manual backport
43-x-y
Pending
Waiting for a manual backport
44-x-y
In-flight
PR Number
#54875
Waiting to be merged
45-x-y
In-flight
PR Number
#54876
Waiting to be merged

Semver Impact

Major
Breaking changes
Minor
New features
Patch
Bug fixes
None
Docs, tests, etc.

Semantic Versioning helps users understand the impact of updates:

  • Major (X.y.z): Breaking changes that may require code modifications
  • Minor (x.Y.z): New features that maintain backward compatibility
  • Patch (x.y.Z): Bug fixes that don't change the API
  • None: Changes that don't affect using facing parts of Electron