fix: resolve GH_REGISTRY to IP in before_script

We're seeing a lot more unknown blob errors on pushing to ghcr.io (and only there; the missing blobs are missing on the server). One possible explanation is load-balancing and geo-location causing ghcr.io to resolve to different domains for multiple layer pushes in a container push, so some layers end up getting pushed to a server that doesn't have the underlying layers (yet). Normally, DNS caching should make sure that ghcr.io resolves to the same destination for subsequent calls. So, a hypothesis is that something changed in the DNS caching on eicweb (or DNS server we pull from), or caching never worked and GitHub added some servers that we now start picking up with some regularity.

This MR does our own version of DNS caching :-)

.gitlab-ci.yml

@@ -114,7 +114,6 @@ version:
         NIGHTLY_TAG="${VERSION}-nightly"
         EXPORT_TAG="${VERSION}"
         DH_PUSH=""
-        GH_PUSH=""
       elif [ "x${CI_PIPELINE_SOURCE}" = "xtrigger" ]; then
         VERSION="${CI_COMMIT_BRANCH}"
         DH_PUSH=""
@@ -189,7 +188,13 @@ status:pending:
           echo ${GITHUB_REGISTRY_TOKEN} | docker login -u ${GITHUB_REGISTRY_USER} --password-stdin ${GH_REGISTRY} ;
         fi ;
       fi
+    - # Resolve ghcr.io
+      echo -n "Resolving ${GH_REGISTRY}..." ;
+      nslookup ${GH_REGISTRY} | sed '/^Address:/!d;s/^Address:\s*\(\S*\)/\1/g' | sed "\$!d;s/\$/ ${GH_REGISTRY}/" >> /etc/hosts ;
+      cat /etc/hosts
   after_script:
+    - # Confirm resolved ghcr.io
+      echo "GitHub registry was at ${GH_REGISTRY}"
     - # Logout from local registry
       docker logout ${CI_REGISTRY}
     - # Logout from remote registries