Apply Docker iptables workaround and set a job timeout

Author: petrutlucian94

.github/workflows/build-snap.yml

@@ -18,6 +18,11 @@ jobs:
           sudo lxd init --auto
           sudo usermod --append --groups lxd $USER
           sg lxd -c 'lxc version'
+      # Docker sets iptables rules that interfere with LXD or K8s.
+      # https://documentation.ubuntu.com/lxd/en/latest/howto/network_bridge_firewalld/#prevent-connectivity-issues-with-lxd-and-docker
+      - name: Apply Docker iptables workaround
+        shell: bash
+        run: sudo iptables -I DOCKER-USER -j ACCEPT
       - name: Install snapcraft
         run: |
           sudo snap install snapcraft --classic
@@ -64,6 +69,7 @@ jobs:
     name: Test core addons
     runs-on: ubuntu-22.04
     needs: build
+    timeout-minutes: 30
 
     steps:
       - name: Checking out repo
@@ -76,6 +82,11 @@ jobs:
           sudo pip3 install -U pytest==8.3.4 sh psutil
           sudo apt-get -y install open-iscsi
           sudo systemctl enable iscsid
+      # Docker sets iptables rules that interfere with LXD or K8s.
+      # https://documentation.ubuntu.com/lxd/en/latest/howto/network_bridge_firewalld/#prevent-connectivity-issues-with-lxd-and-docker
+      - name: Apply Docker iptables workaround
+        shell: bash
+        run: sudo iptables -I DOCKER-USER -j ACCEPT
       - name: Fetch snap
         uses: actions/download-artifact@v4
         with:
@@ -127,6 +138,7 @@ jobs:
     name: Test core addons upgrade
     runs-on: ubuntu-22.04
     needs: build
+    timeout-minutes: 30
 
     steps:
       - name: Checking out repo
@@ -141,6 +153,11 @@ jobs:
           sudo pip3 install -U pytest sh psutil
           sudo apt-get -y install open-iscsi
           sudo systemctl enable iscsid
+      # Docker sets iptables rules that interfere with LXD or K8s.
+      # https://documentation.ubuntu.com/lxd/en/latest/howto/network_bridge_firewalld/#prevent-connectivity-issues-with-lxd-and-docker
+      - name: Apply Docker iptables workaround
+        shell: bash
+        run: sudo iptables -I DOCKER-USER -j ACCEPT
       - name: Fetch snap
         uses: actions/download-artifact@v4
         with:
@@ -197,6 +214,11 @@ jobs:
           sudo lxc network set lxdbr0 ipv6.address=none
           sudo usermod --append --groups lxd $USER
           sg lxd -c 'lxc version'
+      # Docker sets iptables rules that interfere with LXD or K8s.
+      # https://documentation.ubuntu.com/lxd/en/latest/howto/network_bridge_firewalld/#prevent-connectivity-issues-with-lxd-and-docker
+      - name: Apply Docker iptables workaround
+        shell: bash
+        run: sudo iptables -I DOCKER-USER -j ACCEPT
       - name: Run airgap tests
         run: |
           sudo -E bash -x -c "./tests/libs/airgap.sh --distro ubuntu:22.04 --channel $PWD/build/microk8s.snap"