.github/workflows/test.yml: Add limactl to firewall

Signed-off-by: Norio Nomura <[email protected]>

Author: norio-nomura

.github/workflows/test.yml

@@ -528,6 +528,16 @@ jobs:
       run: brew install bash coreutils w3m socat
     - name: Uninstall qemu
       run: brew uninstall --ignore-dependencies --force qemu
+    - name: "Allow limactl to firewall"
+      if: matrix.create_arg == '--network=vzNAT'
+      # Avoid macOS firewall prompt by pre-adding limactl to the firewall
+      run: |
+        sudo /usr/libexec/ApplicationFirewall/socketfilterfw --add $(command -v limactl)
+        sudo /usr/libexec/ApplicationFirewall/socketfilterfw --getglobalstate
+        sudo /usr/libexec/ApplicationFirewall/socketfilterfw --getblockall
+        sudo /usr/libexec/ApplicationFirewall/socketfilterfw --getallowsigned
+        sudo /usr/libexec/ApplicationFirewall/socketfilterfw --getstealthmode
+        sudo /usr/libexec/ApplicationFirewall/socketfilterfw --listapps
     - name: Test
       run: ./hack/test-templates.sh templates/${{ matrix.template }}
     - if: failure()