New rpi 3 install won't load Add-on store, supervisor container has blocked tcp?

I’ve downloaded the latest rpi3 image from here:
https://github.com/home-assistant/operating-system/releases/tag/4.13 (hassos_rpi3-4.13.img.gz)
and flashed it to a sd card. I’m running on a raspberry pi 3 B+, home assistant starts up fine but I see this error in the supervisor logs and I can’t load the Add-on store page

20-09-16 14:59:06 INFO (MainThread) [supervisor.store.git] Clone add-on https://github.com/home-assistant/hassio-addons repository
20-09-16 14:59:06 INFO (MainThread) [supervisor.store.git] Clone add-on https://github.com/hassio-addons/repository repository
20-09-16 15:04:07 ERROR (MainThread) [supervisor.store.git] Can't clone https://github.com/hassio-addons/repository repository: Cmd('git') failed due to: exit code(128)
  cmdline: git clone --depth=1 --recursive --shallow-submodules -v https://github.com/hassio-addons/repository /data/addons/git/a0d7b954
  stderr: 'Cloning into '/data/addons/git/a0d7b954'...
fatal: unable to access 'https://github.com/hassio-addons/repository/': Operation timed out after 300002 milliseconds with 0 out of 0 bytes received
'.
20-09-16 15:04:07 ERROR (MainThread) [supervisor.store] Can't load from repository https://github.com/hassio-addons/repository
20-09-16 15:04:07 ERROR (MainThread) [supervisor.store.git] Can't clone https://github.com/home-assistant/hassio-addons repository: Cmd('git') failed due to: exit code(128)
  cmdline: git clone --depth=1 --recursive --shallow-submodules -v https://github.com/home-assistant/hassio-addons /data/addons/core
  stderr: 'Cloning into '/data/addons/core'...
fatal: unable to access 'https://github.com/home-assistant/hassio-addons/': Operation timed out after 300006 milliseconds with 0 out of 0 bytes received
'.
20-09-16 15:04:07 ERROR (MainThread) [supervisor.store] Can't load from repository core
20-09-16 15:04:07 INFO (MainThread) [supervisor.store] Load add-ons from store: 0 all - 0 new - 0 remove

I also tried entering the docker containers, ping works fine in both the homeassistant and hassio_supervisor containers, however wget only works in the homeassistant container and not in the hassio_supervisor container.

Could there be some setting that is blocking tcp traffic but allowing icmp on this container? or something else going on?

Thanks,
Chuck

A bit more information, here are the containers:

# docker ps
CONTAINER ID        IMAGE                                              COMMAND                  CREATED             STATUS              PORTS                  NAMES
85450b088084        homeassistant/raspberrypi3-homeassistant:0.114.4   "/init"                  51 minutes ago      Up 51 minutes                              homeassistant
051deb70e5ff        homeassistant/armv7-hassio-observer:3              "/init"                  About an hour ago   Up About an hour    0.0.0.0:4357->80/tcp   hassio_observer
1d28919d0c6b        homeassistant/armv7-hassio-supervisor:latest       "/init"                  About an hour ago   Up About an hour                           hassio_supervisor
03f0094c34b7        homeassistant/armv7-hassio-multicast:3             "/init"                  About an hour ago   Up About an hour                           hassio_multicast
08ab94034786        homeassistant/armv7-hassio-cli:26                  "/init /bin/bash -c …"   About an hour ago   Up About an hour                           hassio_cli
cb45f24ba9f6        homeassistant/armv7-hassio-audio:17                "/init"                  About an hour ago   Up About an hour                           hassio_audio
41dbbe560cda        homeassistant/armv7-hassio-dns:9                   "/init coredns -conf…"   7 months ago        Up About an hour                           hassio_dns

Here is ping and wget on the homeassistant container:

# docker exec -it 854 /bin/bash
bash-5.0# ping google.com
PING google.com (172.217.5.14): 56 data bytes
64 bytes from 172.217.5.14: seq=1 ttl=115 time=14.365 ms
64 bytes from 172.217.5.14: seq=3 ttl=115 time=13.842 ms
64 bytes from 172.217.5.14: seq=4 ttl=115 time=14.459 ms
^C
--- google.com ping statistics ---
6 packets transmitted, 3 packets received, 50% packet loss
round-trip min/avg/max = 13.842/14.222/14.459 ms
bash-5.0# wget google.com
Connecting to google.com (172.217.5.14:80)
Connecting to www.google.com (172.217.9.68:80)
saving to 'index.html'
index.html           100% |******************************************************************************************************************************************| 12880  0:00:00 ETA
'index.html' saved
bash-5.0# 

Here are the same commands in hassio_supervisor container:

# docker exec -it 1d2 /bin/bash
bash-5.0# ping google.com
PING google.com (216.58.192.142): 56 data bytes
64 bytes from 216.58.192.142: seq=0 ttl=114 time=14.462 ms
64 bytes from 216.58.192.142: seq=1 ttl=114 time=14.254 ms
64 bytes from 216.58.192.142: seq=2 ttl=114 time=14.730 ms
64 bytes from 216.58.192.142: seq=3 ttl=114 time=16.962 ms
^C
--- google.com ping statistics ---
4 packets transmitted, 4 packets received, 0% packet loss
round-trip min/avg/max = 14.254/15.102/16.962 ms
bash-5.0# wget google.com
Connecting to google.com (172.217.5.14:80)
Connecting to www.google.com (172.217.9.68:80)

I haven’t had time to look into this more yet, but I’m still getting errors. I’ve updated to 0.115.2 (not that I expected that to fix it) and I’m running HassOS 4.13. I did manage to manually load the files it was looking for by using git in the homeassistant docker instance, and then copying them over to hassio_supervisor instance. I was able to load some integrations but I see this error in the logs daily:

20-09-23 20:22:30 INFO (MainThread) [supervisor.store.git] Update add-on https://github.com/hassio-addons/repository repository
20-09-23 20:22:30 INFO (MainThread) [supervisor.store.git] Update add-on https://github.com/home-assistant/hassio-addons repository
20-09-23 20:27:30 ERROR (MainThread) [supervisor.store.git] Can't update https://github.com/home-assistant/hassio-addons repo: Cmd('git') failed due to: exit code(128)
  cmdline: git fetch --depth=1 --update-shallow -v origin
  stderr: 'fatal: unable to access 'https://github.com/home-assistant/hassio-addons/': Operation timed out after 300004 milliseconds with 0 out of 0 bytes received'.
20-09-23 20:27:30 ERROR (MainThread) [supervisor.store.git] Can't update https://github.com/hassio-addons/repository repo: Cmd('git') failed due to: exit code(128)
  cmdline: git fetch --depth=1 --update-shallow -v origin
  stderr: 'fatal: unable to access 'https://github.com/hassio-addons/repository/': Operation timed out after 300011 milliseconds with 0 out of 0 bytes received'.
20-09-23 20:27:30 INFO (MainThread) [supervisor.store] Load add-ons from store: 66 all - 0 new - 0 remove

I’ll bring this up in discord when a get a chance but I figured I’d document it here.

There is something very odd going on. I’ve found that the container can access this url and download correctly:

bash-5.0# wget -T 5 https://version.home-assistant.io/stable.json
Connecting to version.home-assistant.io (172.67.68.90:443)
saving to 'stable.json'
stable.json          100% |*******************************************************************************************************************************************************************************************|  1316  0:00:00 ETA
'stable.json' saved

versus this:

bash-5.0# wget -T 20 https://raw.githubusercontent.com/hassio-addons/repository/master/repository.json
Connecting to raw.githubusercontent.com (151.101.0.133:443)
wget: download timed out