github: unload br_netfilter module

This modules is not normally loaded on stock Ubuntu installs but it is on GHA runners. Fixes canonical/lxd#13069 Signed-off-by: Simon Deziel <[email protected]>
canonical · Oct 10, 2024 · 5927206 · 5927206
1 parent 17f53f1
commit 5927206
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
@@ -237,6 +237,15 @@ jobs:
           sudo ip link delete docker0
           sudo nft flush ruleset || sudo iptables -I DOCKER-USER -j ACCEPT
 
+      - name: "Disable br_netfilter"
+        run: |
+          set -eux
+          # XXX: br_netfilter causes subtle issues by subjecting internal
+          #      bridge traffic to NAT/MASQUERADING and IP filtering. This
+          #      modules is not normally loaded on stock Ubuntu installs but it
+          #      is on GHA runners.
+          lsmod | grep -qw ^br_netfilter && sudo modprobe -r br_netfilter
+
       - name: Checkout
         uses: actions/checkout@v4