Merge #160096

craig[bot] · yuzefovich · craig[bot] · commit 939076d551da · 2025-12-24T01:38:51.000Z
160096: scripts/gceworker: use dig for update-firewall r=yuzefovich a=yuzefovich

Claude suggests that using dig is more reliable since it uses DNS rather than HTTPS, avoiding the TLS handshake issues.

Epic: None
Release note: None

Co-authored-by: Yahor Yuzefovich &lt;yahor@cockroachlabs.com&gt;
diff --git a/scripts/gceworker.sh b/scripts/gceworker.sh
@@ -78,7 +78,7 @@ function refresh_ssh_config() {
 }
 
 function update_firewall() {
-	MY_IP="$(curl -4 -s https://icanhazip.com/)"
+	MY_IP="$(dig +short myip.opendns.com @resolver1.opendns.com)"
 	RULE="$(whoami)-home-ssh-rule"
 	gcloud compute firewall-rules delete --quiet "$RULE" || true
 	gcloud compute firewall-rules create --quiet "$RULE" \

Original file line number	Diff line number	Diff line change
`@@ -78,7 +78,7 @@ function refresh_ssh_config() {`
`78`	`78`	`}`
`79`	`79`
`80`	`80`	`function update_firewall() {`
`81`		`- MY_IP="$(curl -4 -s https://icanhazip.com/)"`
	`81`	`+ MY_IP="$(dig +short myip.opendns.com @resolver1.opendns.com)"`
`82`	`82`	`RULE="$(whoami)-home-ssh-rule"`
`83`	`83`	`gcloud compute firewall-rules delete --quiet "$RULE" \|\| true`
`84`	`84`	`gcloud compute firewall-rules create --quiet "$RULE" \`