From eb7090ac2cf2e4d762b0bbf6fa2e2cd74eb39729 Mon Sep 17 00:00:00 2001 From: Thomas Eizinger Date: Mon, 15 Sep 2025 20:27:32 +0000 Subject: [PATCH] ci: up the `veth-config` container last (#10351) It appears that we still have a race condition where the `veth-config` container runs too early and ends up not applying the `XDP_PASS` program to all interfaces, causing the double symmetric NAT integration test to fail: https://github.com/firezone/firezone/actions/runs/17718375157/job/50346744176?pr=10347 --- .github/workflows/_integration_tests.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/_integration_tests.yml b/.github/workflows/_integration_tests.yml index d80a8ac05..5b7a39d67 100644 --- a/.github/workflows/_integration_tests.yml +++ b/.github/workflows/_integration_tests.yml @@ -158,7 +158,6 @@ jobs: docker compose up -d relay-2 --no-build docker compose up -d gateway --no-build docker compose up -d client --no-build - docker compose up veth-config if [[ -n "${{ matrix.test.stop_containers }}" ]]; then docker compose stop ${{ matrix.test.stop_containers }} @@ -170,6 +169,7 @@ jobs: # Intended to mitigate sleep 3 + docker compose up veth-config - name: Add 50ms simulated API latency run: | docker compose exec -T -u root api sh -c 'apk add --update --no-cache iproute2-tc'