ceph/qa/tasks/userdata_setup.yaml
Ilya Dryomov b47965b577 qa/tasks/qemu: get the new Let's Encrypt root certificate
Fixes: https://tracker.ceph.com/issues/53841
Signed-off-by: Ilya Dryomov <idryomov@gmail.com>
2022-01-12 20:53:45 +01:00

37 lines
1.1 KiB
YAML

#cloud-config-archive
- type: text/cloud-config
content: |
output:
all: '| tee -a /var/log/cloud-init-output.log'
# allow passwordless access for debugging
- |
#!/usr/bin/env bash
exec passwd -d ubuntu
- |
#!/usr/bin/env bash
# mount a NFS share for storing logs
sed -i 's/archive.ubuntu.com/old-releases.ubuntu.com/' /etc/apt/sources.list
sed -i 's/security.ubuntu.com/old-releases.ubuntu.com/' /etc/apt/sources.list
apt-get update
# DST Root CA X3 certificate expired on Sep 30, 2021. It was used by
# Let's Encrypt, which is what git.ceph.com relies on for HTTPS. Get the
# new Let's Encrypt root certificate in place and deactivate the old one
# (lines that begin with "!" are deselected).
apt-get install --only-upgrade ca-certificates libssl1.0.0
sed -i 's/mozilla\/DST_Root_CA_X3\.crt/!mozilla\/DST_Root_CA_X3\.crt/' /etc/ca-certificates.conf
update-ca-certificates
apt-get -y install nfs-common
mkdir /mnt/log
# 10.0.2.2 is the host
mount -v -t nfs -o proto=tcp 10.0.2.2:{mnt_dir} /mnt/log
# mount the iso image that has the test script
mkdir /mnt/cdrom
mount -t auto /dev/cdrom /mnt/cdrom