diff --git a/bind-9.11-unit-disable-random.patch b/bind-9.11-unit-disable-random.patch
new file mode 100644
index 0000000..5658d12
--- /dev/null
+++ b/bind-9.11-unit-disable-random.patch
@@ -0,0 +1,45 @@
+From c89b0e288f923af69b97e8acc29250b262be7d1e Mon Sep 17 00:00:00 2001
+From: Petr Mensik <pemensik@redhat.com>
+Date: Thu, 21 Feb 2019 22:42:27 +0100
+Subject: [PATCH] Disable random_test
+
+It fails too often on some architecture, failing the whole build along.
+Because it runs two times for pkcs11 and normal build and any of
+subtests can occasionally fail, stop it.
+
+It can be used again by defining 'unstable' variable in Kyuafile.
+---
+ lib/isc/tests/Atffile  | 3 ++-
+ lib/isc/tests/Kyuafile | 2 +-
+ 2 files changed, 3 insertions(+), 2 deletions(-)
+
+diff --git a/lib/isc/tests/Atffile b/lib/isc/tests/Atffile
+index 8681844..74a4a77 100644
+--- a/lib/isc/tests/Atffile
++++ b/lib/isc/tests/Atffile
+@@ -20,7 +20,8 @@ tp: pool_test
+ tp: print_test
+ tp: queue_test
+ tp: radix_test
+-tp: random_test
++# random test fails too often
++#tp: random_test
+ tp: regex_test
+ tp: result_test
+ tp: safe_test
+diff --git a/lib/isc/tests/Kyuafile b/lib/isc/tests/Kyuafile
+index 1c510c1..a86824a 100644
+--- a/lib/isc/tests/Kyuafile
++++ b/lib/isc/tests/Kyuafile
+@@ -19,7 +19,7 @@ atf_test_program{name='pool_test'}
+ atf_test_program{name='print_test'}
+ atf_test_program{name='queue_test'}
+ atf_test_program{name='radix_test'}
+-atf_test_program{name='random_test'}
++atf_test_program{name='random_test', required_configs='unstable'}
+ atf_test_program{name='regex_test'}
+ atf_test_program{name='result_test'}
+ atf_test_program{name='safe_test'}
+-- 
+2.20.1
+
diff --git a/bind.spec b/bind.spec
index d750e63..7a38c81 100644
--- a/bind.spec
+++ b/bind.spec
@@ -132,6 +132,8 @@ Patch165:bind-9.11-rh1647829.patch
 Patch166:bind-9.11-rh1647829-2.patch
 # https://gitlab.isc.org/isc-projects/bind9/issues/225
 Patch167:bind-9.11-ed448-disable.patch
+# random_test fails too often by random, disable it
+Patch168:bind-9.11-unit-disable-random.patch
 
 # SDB patches
 Patch11: bind-9.3.2b2-sdbsrc.patch
@@ -480,6 +482,7 @@ are used for building ISC DHCP.
 %patch165 -p1 -b .rh1647829
 %patch166 -p1 -b .rh1647829-2
 %patch167 -p1 -b .noed448
+%patch168 -p1 -b .random_test-disable
 
 mkdir lib/dns/tests/testdata/dstrandom
 cp -a %{SOURCE50} lib/dns/tests/testdata/dstrandom/random.data
@@ -1459,6 +1462,7 @@ rm -rf ${RPM_BUILD_ROOT}
 %changelog
 * Thu Feb 21 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.5-3.P1
 - Disable autodetected eddsa algorithm ED448
+- Disable often failing unit test random_test
 
 * Sun Jan 27 2019 Petr Menšík <pemensik@redhat.com> - 32:9.11.5-2.P1
 - Update to 9.11.5-P1