Let a stalled apt mirror fail the job rather than hold it

Both Linux test jobs on this branch sat an hour in apt-get, on runners
where the same step takes seconds, and a job with nothing to time it out
holds the pull request red-free and unfinished until the six hour limit.
Three retries and a twenty second timeout give apt another mirror, and
five minutes on the step gives the job an end.

.github/workflows/build.yml

@@ -66,9 +66,11 @@ jobs:
       # the build draws its own icon before it packages anything.
       - name: Install the Qt runtime libraries
         if: runner.os == 'Linux'
+        timeout-minutes: 5
         run: |
-          sudo apt-get update
+          apt="-o Acquire::Retries=3 -o Acquire::http::Timeout=20"
-          sudo apt-get install --no-install-recommends -y \
+          sudo apt-get $apt update
+          sudo apt-get $apt install --no-install-recommends -y \
             libegl1 libgl1 libxkbcommon0 libdbus-1-3 libglib2.0-0 \
             libfontconfig1 libfreetype6 libgssapi-krb5-2
 

.github/workflows/release.yml

@@ -46,9 +46,11 @@ jobs:
       - uses: actions/setup-python@v5
         with:
           python-version: "3.12"
-      - run: |
+      - timeout-minutes: 5
-          sudo apt-get update
+        run: |
-          sudo apt-get install --no-install-recommends -y \
+          apt="-o Acquire::Retries=3 -o Acquire::http::Timeout=20"
+          sudo apt-get $apt update
+          sudo apt-get $apt install --no-install-recommends -y \
             libegl1 libgl1 libxkbcommon0 libdbus-1-3 libglib2.0-0 \
             libfontconfig1 libfreetype6 libgssapi-krb5-2
       - run: python -m pip install --quiet PyQt6

.github/workflows/tests.yml

@@ -24,10 +24,18 @@ jobs:
       # for the offscreen platform the tests run on. QtNetwork wants the Kerberos
       # library, and the widgets want fontconfig, whether or not anything is
       # ever drawn.
+      #
+      # A mirror that stops answering is what the retries and the timeout are
+      # for: apt waits on it by default, and a job waiting on apt sits there
+      # until the six hour limit rather than going red in a minute. The same
+      # two lines are in build.yml and release.yml, which install the same
+      # eight libraries.
       - name: Install the Qt runtime libraries
+        timeout-minutes: 5
         run: |
-          sudo apt-get update
+          apt="-o Acquire::Retries=3 -o Acquire::http::Timeout=20"
-          sudo apt-get install --no-install-recommends -y \
+          sudo apt-get $apt update
+          sudo apt-get $apt install --no-install-recommends -y \
             libegl1 libgl1 libxkbcommon0 libdbus-1-3 libglib2.0-0 \
             libfontconfig1 libfreetype6 libgssapi-krb5-2