ci: Temporary libgcrypt workaround for older kernels

I'm trying to get ostree tests to pass in OpenShift as part of our CI
move but I've been seeing lots of failures related to GPG tests. It
finally turned out to be because libgcrypt doesn't behave well on older
kernels that don't have `getrandom()` (the cluster is running on RHEL7).
Thankfully, there's a new build with a fix for this. Pull that in
manually until it gets into stable.

For more information, see:
https://bugzilla.redhat.com/show_bug.cgi?id=1542453

Closes: #1547
Approved by: cgwalters

diff --git a/ci/libpaprci/libbuild.sh b/ci/libpaprci/libbuild.sh
index 9ad417b222b3883257c73a43d750acf60a7958e1..62dc2b2937969f73cb83b34895f9f4a64ac3e6b1 100644 (file)
--- a/ci/libpaprci/libbuild.sh
+++ b/ci/libpaprci/libbuild.sh
@@ -66,6 +66,10 @@ pkg_builddep() {
         if rpm -q gpgme | grep -q gpgme-1.9.0-6.fc27; then
             dnf install -y https://kojipkgs.fedoraproject.org//packages/gpgme/1.10.0/4.fc27/x86_64/{gpgme{,-devel},python{2,3}-gpg}-1.10.0-4.fc27.x86_64.rpm
         fi
+        # https://bugzilla.redhat.com/show_bug.cgi?id=1542453
+        if rpm -q libgcrypt | grep -q libgcrypt-1.8.2-1.fc27; then
+            dnf install -y https://kojipkgs.fedoraproject.org//packages/libgcrypt/1.8.2/2.fc27/x86_64/libgcrypt-1.8.2-2.fc27.x86_64.rpm
+        fi
     else
         yum-builddep -y "$@"
     fi