network constraints in docker-in-docker image

[manas-suleman]

Hi,

I'm trying to run images in arc dind containers and use that base environment for job steps. In other words, I have arc dind deployed. I'm trying to set a container to be used as base for steps within a job like this:

jobs:
  job1:
    runs-on: arc-runner-set-dind
    container:
      node:20
    steps:
      - run: apt update

      - name: Checkout
        uses: actions/checkout@v4

Now, apparently the container gets built and runs just fine. But any steps (even simple ones like apt update) either take forever to run and/or simply timeout. I suspect it has to do with the docker network settings within dind container but not sure what that would be. The run output looks something like this for above steps:

Run apt update 7m

Get:1 http://deb.debian.org/debian bookworm InRelease [151 kB]
Ign:1 http://deb.debian.org/debian bookworm InRelease
Get:2 http://deb.debian.org/debian bookworm-updates InRelease [55.4 kB]
Ign:2 http://deb.debian.org/debian bookworm-updates InRelease
Get:3 http://deb.debian.org/debian-security bookworm-security InRelease [48.0 kB]
Ign:3 http://deb.debian.org/debian-security bookworm-security InRelease
Get:1 http://deb.debian.org/debian bookworm InRelease [151 kB]
Ign:1 http://deb.debian.org/debian bookworm InRelease
Get:2 http://deb.debian.org/debian bookworm-updates InRelease [55.4 kB]
Ign:2 http://deb.debian.org/debian bookworm-updates InRelease
Get:3 http://deb.debian.org/debian-security bookworm-security InRelease [48.0 kB]
Ign:3 http://deb.debian.org/debian-security bookworm-security InRelease
Get:1 http://deb.debian.org/debian bookworm InRelease [151 kB]
Ign:1 http://deb.debian.org/debian bookworm InRelease
Get:2 http://deb.debian.org/debian bookworm-updates InRelease [55.4 kB]
Ign:2 http://deb.debian.org/debian bookworm-updates InRelease
Get:3 http://deb.debian.org/debian-security bookworm-security InRelease [48.0 kB]
Ign:3 http://deb.debian.org/debian-security bookworm-security InRelease
Get:1 http://deb.debian.org/debian bookworm InRelease [151 kB]
Err:1 http://deb.debian.org/debian bookworm InRelease
  Connection timed out [IP: 151.101.130.132 80]
Get:2 http://deb.debian.org/debian bookworm-updates InRelease [55.4 kB]
Err:2 http://deb.debian.org/debian bookworm-updates InRelease
  Connection timed out [IP: 151.101.2.132 80]
Get:3 http://deb.debian.org/debian-security bookworm-security InRelease [48.0 kB]
Err:3 http://deb.debian.org/debian-security bookworm-security InRelease
  Connection timed out [IP: 151.101.2.132 80]
Reading package lists...
Building dependency tree...
Reading state information...
All packages are up to date.
W: Failed to fetch http://deb.debian.org/debian/dists/bookworm/InRelease  Connection timed out [IP: 151.101.130.132 80]
W: Failed to fetch http://deb.debian.org/debian/dists/bookworm-updates/InRelease  Connection timed out [IP: 151.101.2.132 80]
W: Failed to fetch http://deb.debian.org/debian-security/dists/bookworm-security/InRelease  Connection timed out [IP: 151.101.2.132 80]
W: Some index files failed to download. They have been ignored, or old ones used instead.

checkout 8m

/usr/bin/docker exec  035639315fc33485339f2224f1f68865311ab50f7615bf8d23eb3571a93e0d28 sh -c "cat /etc/*release | grep ^ID"
Syncing repository: orgname/reponame
Getting Git version info
Temporarily overriding HOME='/__w/_temp/4d179709-c2d6-4862-8ebe-b0494f6d5e4c' before making global git config changes
Adding repository directory to the temporary git global config as a safe directory
/usr/bin/git config --global --add safe.directory /__w/reponame/reponame
Deleting the contents of '/__w/reponame/reponame'
Initializing the repository
Disabling automatic garbage collection
Setting up auth
Fetching the repository
  /usr/bin/git -c protocol.version=2 fetch --no-tags --prune --no-recurse-submodules --depth=1 origin +17d35d1ab451aa1b10677e27af959025a4dc2fb8:refs/remotes/origin/master
  Error: fatal: unable to access 'https://github.com/orgname/reponame/': Recv failure: Connection reset by peer
  The process '/usr/bin/git' failed with exit code 128
  Waiting 19 seconds before trying again
  /usr/bin/git -c protocol.version=2 fetch --no-tags --prune --no-recurse-submodules --depth=1 origin +17d35d1ab451aa1b10677e27af959025a4dc2fb8:refs/remotes/origin/master
  Error: fatal: unable to access 'https://github.com/orgname/reponame/': Recv failure: Connection reset by peer
  The process '/usr/bin/git' failed with exit code 128
  Waiting 16 seconds before trying again
  /usr/bin/git -c protocol.version=2 fetch --no-tags --prune --no-recurse-submodules --depth=1 origin +17d35d1ab451aa1b10677e27af959025a4dc2fb8:refs/remotes/origin/master
  Error: fatal: unable to access 'https://github.com/orgname/reponame/': Recv failure: Connection reset by peer
  Error: The process '/usr/bin/git' failed with exit code 128

I've tried experimenting with dns values like below:

    container:
      image: node:20
      options: --dns #######

but no luck so far. Anyone else struggling with this issue? Please any hint regarding this would be really appreciated.

Thanks

[manas-suleman]

I was able to fix the issue following this:
actions/runner#2966 (comment)