ci: twister: Run Linux jobs inside container

The GitHub Actions runner may occasionally lose communication with the
server (i.e. get denial-of-service'ed) when running twister directly on
the runner host.

To work around this, run twister inside a container, which is isolated
from the GitHub Actions runner pod, as does the Zephyr main CI twister
workflow.

Signed-off-by: Stephanos Ioannidis <[email protected]>

Author: stephanosio

.github/workflows/twister.yml

@@ -73,11 +73,23 @@ jobs:
       run: |
         # Resolve runner type
         case "${{ github.event.inputs.host }}" in
-          linux-x86_64)   runner="zephyr-runner-v2-linux-x64-4xlarge";;
-          linux-aarch64)  runner="zephyr-runner-v2-linux-arm64-4xlarge";;
-          macos-x86_64)   runner="zephyr-runner-v2-macos-arm64-2xlarge";;
-          macos-aarch64)  runner="zephyr-runner-v2-macos-arm64-2xlarge";;
-          windows-x86_64) runner="zephyr-runner-v2-windows-x64-2xlarge";;
+          linux-x86_64)
+            runner="zephyr-runner-v2-linux-x64-4xlarge"
+            container="ghcr.io/zephyrproject-rtos/sdk-build:v1.3.9"
+            ;;
+          linux-aarch64)
+            runner="zephyr-runner-v2-linux-arm64-4xlarge"
+            container="ghcr.io/zephyrproject-rtos/sdk-build:v1.3.9"
+            ;;
+          macos-x86_64)
+            runner="zephyr-runner-v2-macos-arm64-2xlarge"
+            ;;
+          macos-aarch64)
+            runner="zephyr-runner-v2-macos-arm64-2xlarge"
+            ;;
+          windows-x86_64)
+            runner="zephyr-runner-v2-windows-x64-2xlarge"
+            ;;
         esac
 
         # Resolve subset count
@@ -94,6 +106,7 @@ jobs:
 
         # Export output variables
         echo "runner=${runner}" >> $GITHUB_OUTPUT
+        echo "container=${container}" >> $GITHUB_OUTPUT
         echo "subset=${subset}" >> $GITHUB_OUTPUT
         echo "size=${size}" >> $GITHUB_OUTPUT
 
@@ -102,6 +115,7 @@ jobs:
     needs: [ prep ]
     runs-on:
       group: ${{ needs.prep.outputs.runner }}
+    container: ${{ needs.prep.outputs.container }}
 
     strategy:
       fail-fast: false