Kirill A. Korinsky

> `ci` workflow is triggered by push to `main` but also by pull_requests, and this doesn't make sense to build this src archive for PRs `merge` workflow is used for...

> > Regarding the way: as soon as I know go mod vendor respects checksums inside go.mod that should prevent from packing bad things. Or, let me say it that...

just a ping

On Mon, 06 May 2024 13:54:21 +0100, Nicolas De loof ***@***.***> wrote: > > Can you look into https://docs.github.com/en/actions/security-guides/using-artifact-attestations-to-establish-provenance-for-builds#generating-build-provenance-for-binaries so this additional artifact gets provenance attestation and you can safely...

Yes, I can. Right now I need to pack vedors folder as dedicated archive to make an offline build. Without it build of `docker-compose` needs an internet to download everything....

Right now I host such artifacts on my host for OpenBSD artifacts for example, see: https://github.com/openbsd/ports/blob/master/sysutils/docker-compose/Makefile Maybe it isn't so bad idea to prepare one more release artifcat via githib...

Unbound-1.18.0 from OpenBSD. Config: ``` domain-insecure: "sa31-home.catap.net." stub-zone: name: "sa31-home.catap.net." stub-addr: 172.31.2.1 ``` after reboot it does't work. After restart of unbound it works for some time, after that it...

@wcawijngaards thanks for suggesting option `log-servfail: yes`, it allows to dig deper. Here the results: ``` ~ $ host diskstation.sa31-home.catap.net 172.31.2.1 Using domain server: Name: 172.31.2.1 Address: 172.31.2.1#53 Aliases: diskstation.sa31-home.catap.net...

I doubt that the remove host is an issue because it is reproduced each reboot, and restart after everything is booted fixes an issue. Before I thought about remote host...

@wcawijngaards well, on another end DNS is Unifi GW which runs Dnsmaq which is configured as forward DNS proxy to upstream provider and announces local network DNS records from its...