diff --git a/xt/21-check_acl_no_ipaddr_only.t b/xt/21-check_acl_no_ipaddr_only.t
index e0c95532..7ea3a820 100644
--- a/xt/21-check_acl_no_ipaddr_only.t
+++ b/xt/21-check_acl_no_ipaddr_only.t
@@ -13,10 +13,14 @@ BEGIN {
 
 use Dancer qw/:script !pass/;
 
-config->{'dns'} = {no => ['::1','fe80::/10','127.0.0.0/8','169.254.0.0/16']};
+# this is needed so that test works in github action container
+# and actually ends up cutting out live DNS anyway 👍
+config->{'dns'} = { 'ETCHOSTS' => { localhost => [ [ '127.0.0.1' ] ] } };
+
+config->{'dns'}->{'no'} = ['::1','fe80::/10','127.0.0.0/8','169.254.0.0/16'];
 is(hostname_from_ip('127.0.0.1'), undef, '127.0.0.1 blocked');
 
-config->{'dns'} = {no => ['::1','fe80::/10','169.254.0.0/16']};
+config->{'dns'}->{'no'} = ['::1','fe80::/10','169.254.0.0/16'];
 is(hostname_from_ip('127.0.0.1'), 'localhost', '127.0.0.1 allowed');
 
 done_testing;