Stabilize firewall and DNS tests

test/Dockerfile.server

@@ -77,7 +77,7 @@ RUN chmod +x /entrypoint.sh /opt/test/validate-output.sh /opt/test/local-network
 RUN printf '%s\n' \
     '[Unit]' \
     'Description=OpenVPN Installation Test' \
-    'After=network.target' \
+    'After=network.target firewalld.service nftables.service' \
     '' \
     '[Service]' \
     'Type=oneshot' \

test/client-entrypoint.sh

@@ -131,7 +131,7 @@ wait_for_revoked_reconnect_rejected() {
 
 test_dns_resolution() {
 	local label="$1"
-	local test_name="github.com"
+	local test_name="neverssl.com"
 	local success=false
 	# This verifies recursive DNS connectivity. Use an unsigned zone so the test
 	# does not depend on DNSSEC key retrieval over GitHub runner networks.