From 388a42774a073220f8d28a722474c75c4e60ed24 Mon Sep 17 00:00:00 2001 From: Martin Schuppert Date: Fri, 22 Mar 2019 09:18:59 +0100 Subject: [PATCH] Add openssl-perl to provide /etc/pki/CA in TLS setup This directory is no longer available in CentOS 8 with base openssl package. Libvirt still has the default to /etc/pki/CA for some TLS settings. Lets add openssl-perl to get /etc/pki/CA and keep defaults where possible. Change-Id: Ib641ef5a7971a31fbe709e404e0194156ec2aa33 Related-Bug: #1821139 --- container-images/tripleo_kolla_template_overrides.j2 | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/container-images/tripleo_kolla_template_overrides.j2 b/container-images/tripleo_kolla_template_overrides.j2 index 4b718fc1c..990fde00c 100644 --- a/container-images/tripleo_kolla_template_overrides.j2 +++ b/container-images/tripleo_kolla_template_overrides.j2 @@ -216,6 +216,10 @@ RUN sed -i -r 's,^(Listen 80),#\1,' /etc/httpd/conf/httpd.conf \ {% set nova_compute_packages_append = ['openstack-nova-migration', 'openssh-server'] %} {% set nova_libvirt_packages_append = ['openstack-nova-migration'] %} +# On RHEL7 /etc/pki/CA was part of base openssl package. +# On RHEL8 it is now in openssl-perl. +{% set nova_libvirt_packages_append = ['openssl-perl'] %} + ############################ service container footers ######################### {% block aodh_api_footer %}