github: Prevent interactions with image server

Signed-off-by: Stéphane Graber <[email protected]>
lxc · Oct 12, 2023 · cbf01fe · cbf01fe
1 parent c38cf37
commit cbf01fe
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
@@ -255,6 +255,13 @@ jobs:
           sudo microceph.ceph status
           sudo rm -f /snap/bin/rbd
 
+      - name: "Ensure offline mode (block image server)"
+        run: |
+          nft add table inet filter
+          nft add chain 'inet filter output { type filter hook output priority 10 ; }'
+          nft add rule inet filter output ip daddr 45.45.148.8 reject
+          nft add rule inet filter output ip6 daddr 2602:fc62:a:1::8 reject
+
       - name: "Run system tests (${{ matrix.go }}, ${{ matrix.suite }}, ${{ matrix.backend }})"
         run: |
           chmod +x ~