From efa331884324c65c54158d840e6931a7f60132ee Mon Sep 17 00:00:00 2001
From: Stanislas Lange <git@slange.me>
Date: Tue, 4 Aug 2026 12:06:25 +0200
Subject: [PATCH] Stabilize firewall and DNS tests

---
 test/Dockerfile.server    | 2 +-
 test/client-entrypoint.sh | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/test/Dockerfile.server b/test/Dockerfile.server
index 4442a49..7424081 100644
--- a/test/Dockerfile.server
+++ b/test/Dockerfile.server
@@ -77,7 +77,7 @@ RUN chmod +x /entrypoint.sh /opt/test/validate-output.sh /opt/test/local-network
 RUN printf '%s\n' \
     '[Unit]' \
     'Description=OpenVPN Installation Test' \
-    'After=network.target' \
+    'After=network.target firewalld.service nftables.service' \
     '' \
     '[Service]' \
     'Type=oneshot' \
diff --git a/test/client-entrypoint.sh b/test/client-entrypoint.sh
index e4a0b37..354d548 100755
--- a/test/client-entrypoint.sh
+++ b/test/client-entrypoint.sh
@@ -131,7 +131,7 @@ wait_for_revoked_reconnect_rejected() {
 
 test_dns_resolution() {
 	local label="$1"
-	local test_name="github.com"
+	local test_name="neverssl.com"
 	local success=false
 	# This verifies recursive DNS connectivity. Use an unsigned zone so the test
 	# does not depend on DNSSEC key retrieval over GitHub runner networks.