CI: retry apt-get and time-limit install steps

Every workflow that installs packages now passes Acquire::Retries=3
to apt-get, and each install step gets its own timeout, sized to fit
inside its job's limit, so a stalled mirror fails fast under a step
name that says what went wrong.

- cppcheck runs apt-get update before installing, and installs with -y
- sftp-test and sshd-test move their inline installs into their own
  steps
- test-fatfs job timeout goes from 4 to 10 minutes to hold its installs

Author: ejohnstown

.github/workflows/code-coverage.yml

@@ -56,9 +56,10 @@ jobs:
 
       # clang 18 is the min: -fcoverage-mcdc does not exist before it.
       - name: Install clang and LLVM coverage tools
+        timeout-minutes: 5
         run: |
-          sudo apt-get update
-          sudo apt-get install -y clang-18 llvm-18 libclang-rt-18-dev
+          sudo apt-get -o Acquire::Retries=3 update
+          sudo apt-get -o Acquire::Retries=3 install -y clang-18 llvm-18 libclang-rt-18-dev
 
       - name: Download wolfSSL
         uses: actions/download-artifact@v8

.github/workflows/cppcheck.yml

@@ -16,7 +16,10 @@ jobs:
 
       - name: Install cppcheck
         if: always()
-        run: sudo apt-get install cppcheck
+        timeout-minutes: 5
+        run: |
+          sudo apt-get -o Acquire::Retries=3 update
+          sudo apt-get -o Acquire::Retries=3 install -y cppcheck
 
       - name: Run CppCheck
         id: cpp_check_run

.github/workflows/multi-compiler.yml

@@ -65,9 +65,10 @@ jobs:
 
     steps:
       - name: Install compiler
+        timeout-minutes: 5
         run: |
-          sudo apt-get update
-          sudo apt-get install -y ${{ matrix.cc }}
+          sudo apt-get -o Acquire::Retries=3 update
+          sudo apt-get -o Acquire::Retries=3 install -y ${{ matrix.cc }}
 
       - name: Checkout wolfSSH
         uses: actions/checkout@v6

.github/workflows/network-contention-test.yml

@@ -108,7 +108,8 @@ jobs:
         run: ./scripts/sftp.test
 
       - name: Install expect for extended tests
-        run: sudo apt-get update && sudo apt-get install -y expect
+        timeout-minutes: 2
+        run: sudo apt-get -o Acquire::Retries=3 update && sudo apt-get -o Acquire::Retries=3 install -y expect
 
       - name: Create large test files
         working-directory: ./wolfssh/

.github/workflows/paramiko-sftp-test.yml

@@ -67,9 +67,10 @@ jobs:
         run: make
 
       - name: Install dependencies
+        timeout-minutes: 5
         run: |
-          sudo apt-get update
-          sudo apt-get install -y python3-pip openssh-client
+          sudo apt-get -o Acquire::Retries=3 update
+          sudo apt-get -o Acquire::Retries=3 install -y python3-pip openssh-client
           python3 -m pip install paramiko
 
       - name: Create test directories

.github/workflows/sftp-test.yml

@@ -106,6 +106,12 @@ jobs:
           echo "Echoserver started with PID: $!"
           sleep 2  # Give the server time to start
 
+      - name: Install expect
+        timeout-minutes: 2
+        run: |
+          sudo apt-get -o Acquire::Retries=3 update
+          sudo apt-get -o Acquire::Retries=3 install -y expect
+
       - name: Run SFTP test
         working-directory: ./wolfssh/
         run: |
@@ -124,9 +130,6 @@ jobs:
           EOF
           chmod +x /tmp/sftp_test.exp
 
-          # Install expect
-          sudo apt-get update && sudo apt-get install -y expect
-
           # Run the expect script
           /tmp/sftp_test.exp
 

.github/workflows/sshd-test.yml

@@ -125,12 +125,17 @@ jobs:
           sudo ./run_all_sshd_tests.sh
 
       # could use optimization with caching
+      - name: Install valgrind
+        if: matrix.extra_flags == ''
+        timeout-minutes: 2
+        run: |
+          sudo apt-get -o Acquire::Retries=3 -y update
+          sudo apt-get -o Acquire::Retries=3 -y install valgrind
+
       - name: Test memory after close down
         working-directory: ./wolfssh/
         if: matrix.extra_flags == ''
         run: |
-          sudo apt-get -y update
-          sudo apt-get -y install valgrind
           touch sshd_config.txt
           ./configure --enable-all LDFLAGS="-L${{ github.workspace }}/build-dir/lib" CPPFLAGS="-I${{ github.workspace }}/build-dir/include -DWOLFSSH_NO_FPKI -DWOLFSSH_NO_SFTP_TIMEOUT -DWOLFSSH_MAX_SFTP_RW=4000000 -DMAX_PATH_SZ=120" --enable-static --disable-shared && make
           # wolfSSHd loads the host key through the secure gate; the daemon runs

.github/workflows/test-fatfs.yml

@@ -30,7 +30,7 @@ jobs:
     name: Test wolfSSH with FatFS
     needs: get-fatfs
     runs-on: ubuntu-latest
-    timeout-minutes: 4
+    timeout-minutes: 10
     steps:
       - name: Checkout code
         uses: actions/checkout@v6
@@ -43,9 +43,10 @@ jobs:
           fail-on-cache-miss: true
 
       - name: Install dependencies
+        timeout-minutes: 3
         run: |
-          sudo apt-get update
-          sudo apt-get install -y build-essential autoconf automake libtool pkg-config openssh-server dosfstools
+          sudo apt-get -o Acquire::Retries=3 update
+          sudo apt-get -o Acquire::Retries=3 install -y build-essential autoconf automake libtool pkg-config openssh-server dosfstools
 
       - name: Build wolfSSL
         uses: wolfSSL/actions-build-autotools-project@v1
@@ -89,9 +90,10 @@ jobs:
           chmod 600 ~/.ssh/config
 
       - name: Install expect
+        timeout-minutes: 2
         run: |
-          sudo apt-get update
-          sudo apt-get install -y expect
+          sudo apt-get -o Acquire::Retries=3 update
+          sudo apt-get -o Acquire::Retries=3 install -y expect
 
       - name: Run wolfsftp client to get file
         run: |

.github/workflows/tpm-ssh.yml

@@ -40,10 +40,11 @@ jobs:
         path: wolftpm
 
     - name: Install Dependencies
+      timeout-minutes: 10
       run: |
-        sudo apt-get update
-        sudo apt-get install -y libtool automake autoconf
-        sudo apt-get install -y build-essential git autoconf-archive \
+        sudo apt-get -o Acquire::Retries=3 update
+        sudo apt-get -o Acquire::Retries=3 install -y libtool automake autoconf
+        sudo apt-get -o Acquire::Retries=3 install -y build-essential git autoconf-archive \
             libcmocka-dev libssl-dev uthash-dev libglib2.0-dev \
             tpm2-tools openssh-client sshpass
 

.github/workflows/windows-cert-store-test.yml

@@ -298,9 +298,10 @@ jobs:
     - uses: actions/checkout@v4
 
     - name: Install mingw toolchain and autotools
+      timeout-minutes: 5
       run: |
-        sudo apt-get update
-        sudo apt-get install -y gcc-mingw-w64-x86-64 autoconf automake libtool
+        sudo apt-get -o Acquire::Retries=3 update
+        sudo apt-get -o Acquire::Retries=3 install -y gcc-mingw-w64-x86-64 autoconf automake libtool
 
     - name: Generate configure
       run: ./autogen.sh