18248: edit provision's snakeoil cert for ubuntu-18.04

Comment RANDFILE line in /etc/ssl/openssl.cnf to fix ubuntu 18.04 testing

See https://github.com/openssl/openssl/issues/7754#issuecomment-541310006

Arvados-DCO-1.1-Signed-off-by: Javier Bértoli <jbertoli@curii.com>

diff --git a/tools/salt-install/config_examples/single_host/multiple_hostnames/states/snakeoil_certs.sls b/tools/salt-install/config_examples/single_host/multiple_hostnames/states/snakeoil_certs.sls
index 91617e4fa4765e5e3365a4269937ac6987a94d17..f2354a881f33a99854febcd2685c69feb22e01c6 100644 (file)
--- a/tools/salt-install/config_examples/single_host/multiple_hostnames/states/snakeoil_certs.sls
+++ b/tools/salt-install/config_examples/single_host/multiple_hostnames/states/snakeoil_certs.sls
@@ -36,6 +36,20 @@ arvados_test_salt_states_examples_single_host_snakeoil_certs_dependencies_pkg_in
       - openssl
       - ca-certificates
 
+# Edit the openssl.conf file to fix the RND error
+#     20:03:39                   Can't load /home/jenkins/.rnd into RNG
+# as seen 
+#     https://ci.arvados.org/view/Release%20Pipeline/job/test-provision-ubuntu1804/91/console
+# using the solution provided here
+#     https://github.com/openssl/openssl/issues/7754#issuecomment-541310006
+arvados_test_salt_states_examples_single_host_snakeoil_certs_file_comment_etc_openssl_conf:
+  file.comment:
+    - name: /etc/ssl/openssl.cnf
+    - regex: ^RANDFILE.*
+    - onlyif: grep -q ^RANDFILE /etc/ssl/openssl.cnf
+    - require_in:
+      - cmd: arvados_test_salt_states_examples_single_host_snakeoil_certs_arvados_snake_oil_ca_cmd_run
+
 arvados_test_salt_states_examples_single_host_snakeoil_certs_arvados_snake_oil_ca_cmd_run:
   # Taken from https://github.com/arvados/arvados/blob/master/tools/arvbox/lib/arvbox/docker/service/certificate/run
   cmd.run: