Merge "Use AFS mirrors to build ubuntu-bionic DIB"

nodepool/elements/nodepool-base/root.d/50-apt-allow-unauthenticated

@@ -22,8 +22,9 @@ set -eu
 set -o pipefail
 
 # NOTE(pabelanger): Because our AFS mirrors are not signed, we need to allow
-# unauthenticated packages.
+# unauthenticated packages and insecure repos.
 if [ -d "$TARGET_ROOT/etc/apt/apt.conf.d" ]; then
     echo "APT::Get::AllowUnauthenticated \"true\";" | sudo tee $TARGET_ROOT/etc/apt/apt.conf.d/95allow-unauthenticated
+    echo "Acquire::AllowInsecureRepositories \"true\";" | sudo tee -a $TARGET_ROOT/etc/apt/apt.conf.d/95allow-unauthenticated
 fi
 

nodepool/nodepool.yaml

@@ -252,7 +252,8 @@ diskimages:
       DIB_APT_LOCAL_CACHE: '0'
       DIB_DISABLE_APT_CLEANUP: '1'
       DIB_GRUB_TIMEOUT: '0'
-      # TODO(pabelanger): Add AFS mirrors once bionic-updates is created.
+      DIB_DISTRIBUTION_MIRROR: 'http://mirror.dfw.rax.openstack.org/ubuntu'
+      DIB_DEBOOTSTRAP_EXTRA_ARGS: '--no-check-gpg'
       DIB_DEBIAN_COMPONENTS: 'main,universe'
   - name: ubuntu-trusty
     pause: false