mv ensure lxd network

canonical · Nov 8, 2024 · 1179fb4 · 1179fb4
1 parent bcbfe1e
commit 1179fb4
Showing 1 changed file with 8 additions and 6 deletions.
diff --git a/.github/workflows/performance.yaml b/.github/workflows/performance.yaml
@@ -51,12 +51,6 @@ jobs:
           sudo lxd init --auto
           sudo usermod --append --groups lxd $USER
           sg lxd -c 'lxc version'
-      - name: Ensure lxd network traffic flows
-        run: |
-          sudo iptables  -I DOCKER-USER -i lxdbr0 -j ACCEPT
-          sudo ip6tables -I DOCKER-USER -i lxdbr0 -j ACCEPT
-          sudo iptables  -I DOCKER-USER -o lxdbr0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-          sudo ip6tables -I DOCKER-USER -o lxdbr0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
       - name: Download latest k8s-snap
         run: |
           sudo snap download k8s --channel=latest/edge --basename k8s
@@ -70,6 +64,14 @@ jobs:
           sudo cp ./bin/static/k8s-dqlite snap-unpack-dir/bin/k8s-dqlite
           sudo chmod o+r snap-unpack-dir/bin/k8s-dqlite
           sudo mksquashfs snap-unpack-dir head.snap -noappend -comp lzo -no-fragments
+      - name: Ensure lxd network traffic flows
+        run: |
+          if iptables -nL DOCKER-USER >/dev/null 2>&1; then
+            sudo iptables  -I DOCKER-USER -i lxdbr0 -j ACCEPT
+            sudo iptables  -I DOCKER-USER -o lxdbr0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
+          else
+              echo "DOCKER-USER chain does not exist, skipping iptables rules"
+          fi
       - name: Run Performance test ${{ github.head_ref }} ${{ matrix.dqlite }} snap
         env:
           TEST_SNAP: ${{ github.workspace }}/head.snap