.oniro-ci/containers/bitbake-builder: add support for runqemu

Part of gcc oeself-test is client/server based. It uses qemu vm for native tests via ssh. The vm is launched by runqemu command which requires the following changes in the docker image.

• passwordless sudo permission
• package iptables pre-installed

Signed-off-by: Chase Qi chase.qi@linaro.org