Add debian build

Author: Test User

.github/workflows/git-ssh-dr.yml

@@ -27,7 +27,7 @@ jobs:
 
   git-ssh-default-replace-test:
     runs-on: ubuntu-22.04
-container:
+    container:
       image: ghcr.io/wolfssl/build-wolfprovider-debian:bookworm
       env:
         DEBIAN_FRONTEND: noninteractive

.github/workflows/hostap.yml

@@ -32,10 +32,12 @@ jobs:
     needs: build_wolfprovider
     # Run inside Debian Bookworm with privileged access for UML
     container:
-      image: debian:bookworm
-      options: --privileged --cap-add=ALL -v /dev:/dev
+      image: ghcr.io/wolfssl/build-wolfprovider-debian:bookworm
       env:
         DEBIAN_FRONTEND: noninteractive
+      # Add network capabilities so ifconfig/RTNETLINK operations are permitted
+      # These are passed to `docker run` as runtime options
+      options: --cap-add=NET_ADMIN --cap-add=NET_RAW
     # This should be a safe limit for the tests to run.
     timeout-minutes: 90
     strategy:

.github/workflows/openssh.yml

@@ -31,7 +31,9 @@ jobs:
     runs-on: ubuntu-22.04
     needs: build_wolfprovider
     container:
-      image: debian:bookworm
+      image: ghcr.io/wolfssl/build-wolfprovider-debian:bookworm
+      env:
+        DEBIAN_FRONTEND: noninteractive
       # Extra permissions needed for Debian Bookworm
       options: >-
         --privileged
@@ -41,9 +43,8 @@ jobs:
         --device=/dev/loop0
         --device=/dev/loop1
         --device=/dev/loop2
+        --cap-add=NET_ADMIN --cap-add=NET_RAW
         -v /lib/modules:/lib/modules:ro
-      env:
-        DEBIAN_FRONTEND: noninteractive
     # This should be a safe limit for the tests to run.
     timeout-minutes: 20
     strategy:

.github/workflows/python3-ntp.yml

@@ -33,10 +33,13 @@ jobs:
     # This should be a safe limit for the tests to run.
     timeout-minutes: 20
     container:
-      image: debian:bookworm
-      options: --user root
+      image: ghcr.io/wolfssl/build-wolfprovider-debian:bookworm
+      env:
+        DEBIAN_FRONTEND: noninteractive
+      # Add network capabilities so ifconfig/RTNETLINK operations are permitted
+      # These are passed to `docker run` as runtime options
+      options: --cap-add=NET_ADMIN --cap-add=NET_RAW
     env:
-      DEBIAN_FRONTEND: noninteractive
       WOLFSSL_PACKAGES_PATH: /tmp/wolfssl-packages
       OPENSSL_PACKAGES_PATH: /tmp/openssl-packages
       WOLFPROV_PACKAGES_PATH: /tmp/wolfprov-packages

.github/workflows/rsync.yml

@@ -29,10 +29,13 @@ jobs:
     needs: build_wolfprovider
     timeout-minutes: 15
     container:
-      image: debian:bookworm
-      options: --user root
+      image: ghcr.io/wolfssl/build-wolfprovider-debian:bookworm
+      env:
+        DEBIAN_FRONTEND: noninteractive
+      # Add network capabilities so ifconfig/RTNETLINK operations are permitted
+      # These are passed to `docker run` as runtime options
+      options: --cap-add=NET_ADMIN --cap-add=NET_RAW
     env:
-      DEBIAN_FRONTEND: noninteractive
       WOLFSSL_PACKAGES_PATH: /tmp/wolfssl-packages
       OPENSSL_PACKAGES_PATH: /tmp/openssl-packages
       WOLFPROV_PACKAGES_PATH: /tmp/wolfprov-packages

.github/workflows/sscep.yml

@@ -32,10 +32,13 @@ jobs:
     needs: build_wolfprovider
     timeout-minutes: 10
     container:
-      image: debian:bookworm
-      options: --user root
+      image: ghcr.io/wolfssl/build-wolfprovider-debian:bookworm
+      env:
+        DEBIAN_FRONTEND: noninteractive
+      # Add network capabilities so ifconfig/RTNETLINK operations are permitted
+      # These are passed to `docker run` as runtime options
+      options: --cap-add=NET_ADMIN --cap-add=NET_RAW
     env:
-      DEBIAN_FRONTEND: noninteractive
       WOLFSSL_PACKAGES_PATH: /tmp/wolfssl-packages
       OPENSSL_PACKAGES_PATH: /tmp/openssl-packages
       WOLFPROV_PACKAGES_PATH: /tmp/wolfprov-packages

.github/workflows/systemd.yml

@@ -33,9 +33,13 @@ jobs:
     # This should be a safe limit for the tests to run.
     timeout-minutes: 20
     container:
-      image: debian:bookworm
+      image: ghcr.io/wolfssl/build-wolfprovider-debian:bookworm
+      env:
+        DEBIAN_FRONTEND: noninteractive
+      # Add network capabilities so ifconfig/RTNETLINK operations are permitted
+      # These are passed to `docker run` as runtime options
+      options: --cap-add=NET_ADMIN --cap-add=NET_RAW
     env:
-      DEBIAN_FRONTEND: noninteractive
       WOLFSSL_PACKAGES_PATH: /tmp/wolfssl-packages
       OPENSSL_PACKAGES_PATH: /tmp/openssl-packages
       WOLFPROV_PACKAGES_PATH: /tmp/wolfprov-packages

.github/workflows/x11vnc.yml

@@ -30,7 +30,7 @@ jobs:
   test_x11vnc:
     runs-on: ubuntu-22.04
     needs: build_wolfprovider
-container:
+    container:
       image: ghcr.io/wolfssl/build-wolfprovider-debian:bookworm
       env:
         DEBIAN_FRONTEND: noninteractive