Add SNI support to memcached_server role via OS packages
Some Linux distributions, such as CentOS 7 and Xenial, have trouble validating SSL certificates when using get_url with servers that use Server Name Indication (SNI). This patch adds those packages to the list of required packages and uses bindep to install them in developer test environments the same way that the gate tests install them. Change-Id: I08e081c77eb034111d43b7d1a10e3c69c5a72383
This commit is contained in:
parent
aa9ff9a318
commit
f449954030
27
bindep.txt
27
bindep.txt
@ -10,16 +10,29 @@
|
|||||||
# will fall back to installing its default packages which
|
# will fall back to installing its default packages which
|
||||||
# will potentially be detrimental to the tests executed.
|
# will potentially be detrimental to the tests executed.
|
||||||
|
|
||||||
# OpenStack-CI's Jenkins needs curl
|
# Base requirements for Ubuntu
|
||||||
# TODO(odyssey4me) remove this once https://review.openstack.org/288634 has merged
|
build-essential [platform:dpkg]
|
||||||
# and the disk images are rebuilt and redeployed.
|
git-core [platform:dpkg]
|
||||||
curl
|
|
||||||
|
|
||||||
# Requirements for Paramiko 2.0
|
|
||||||
libssl-dev [platform:dpkg]
|
libssl-dev [platform:dpkg]
|
||||||
libffi-dev [platform:dpkg]
|
libffi-dev [platform:dpkg]
|
||||||
|
python2.7 [platform:dpkg]
|
||||||
|
python-dev [platform:dpkg]
|
||||||
|
|
||||||
|
# Base requirements for CentOS
|
||||||
|
gcc [platform:rpm]
|
||||||
|
gcc-c++ [platform:rpm]
|
||||||
|
git [platform:rpm]
|
||||||
|
python-devel [platform:rpm]
|
||||||
libffi-devel [platform:rpm]
|
libffi-devel [platform:rpm]
|
||||||
openssl-devel [platform:rpm]
|
openssl-devel [platform:rpm]
|
||||||
|
|
||||||
# For selinux
|
# For SELinux
|
||||||
libselinux-python [platform:rpm]
|
libselinux-python [platform:rpm]
|
||||||
|
|
||||||
|
# For SSL SNI support
|
||||||
|
python-pyasn1 [platform:dpkg]
|
||||||
|
python-openssl [platform:dpkg]
|
||||||
|
python-ndg-httpsclient [platform:ubuntu !platform:ubuntu-trusty]
|
||||||
|
python2-pyasn1 [platform:rpm]
|
||||||
|
pyOpenSSL [platform:rpm]
|
||||||
|
python-ndg_httpsclient [platform:rpm]
|
||||||
|
29
run_tests.sh
29
run_tests.sh
@ -17,20 +17,31 @@ set -euov
|
|||||||
|
|
||||||
FUNCTIONAL_TEST=${FUNCTIONAL_TEST:-true}
|
FUNCTIONAL_TEST=${FUNCTIONAL_TEST:-true}
|
||||||
|
|
||||||
# prep the host
|
# Install pip
|
||||||
if [ "$(which apt-get)" ]; then
|
|
||||||
apt-get update
|
|
||||||
apt-get install -y build-essential python2.7 python-dev git-core libssl-dev libffi-dev
|
|
||||||
fi
|
|
||||||
|
|
||||||
# get pip, if necessary
|
|
||||||
if [ ! "$(which pip)" ]; then
|
if [ ! "$(which pip)" ]; then
|
||||||
curl --silent --show-error --retry 5 \
|
curl --silent --show-error --retry 5 \
|
||||||
https://bootstrap.pypa.io/get-pip.py | sudo python2.7
|
https://bootstrap.pypa.io/get-pip.py | sudo python2.7
|
||||||
fi
|
fi
|
||||||
|
|
||||||
# install tox
|
# Install bindep and tox
|
||||||
pip install tox
|
pip install bindep tox
|
||||||
|
|
||||||
|
# CentOS 7 requires two additional packages:
|
||||||
|
# redhat-lsb-core - for bindep profile support
|
||||||
|
# epel-release - required to install python-ndg_httpsclient/python2-pyasn1
|
||||||
|
if [ "$(which yum)" ]; then
|
||||||
|
yum -y install redhat-lsb-core epel-release
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Install OS packages using bindep
|
||||||
|
if apt-get -v >/dev/null 2>&1 ; then
|
||||||
|
apt-get update
|
||||||
|
DEBIAN_FRONTEND=noninteractive \
|
||||||
|
apt-get -q --option "Dpkg::Options::=--force-confold" \
|
||||||
|
--assume-yes install `bindep -b -f bindep.txt test`
|
||||||
|
else
|
||||||
|
yum install -y `bindep -b -f bindep.txt test`
|
||||||
|
fi
|
||||||
|
|
||||||
# run through each tox env and execute the test
|
# run through each tox env and execute the test
|
||||||
for tox_env in $(awk -F= '/envlist/ {print $2}' tox.ini | sed 's/,/ /g'); do
|
for tox_env in $(awk -F= '/envlist/ {print $2}' tox.ini | sed 's/,/ /g'); do
|
||||||
|
Loading…
Reference in New Issue
Block a user