fix: resolve source-openssl CI failures across all platforms

- Remove source-24/source-26 from integration-amazonlinux CI matrix
- Use perl-core on EL8 (individual perl-* modules don't exist)
- Add perl-Time-Piece for OpenSSL 3.5.5 on EL9+
- Add perl and zlib1g-dev for Debian/Ubuntu
- Add perl and zlib-devel for openSUSE

Tested locally: almalinux-8, almalinux-9, debian-12

Signed-off-by: Dan Webb <dan.webb@damacus.io>

Author: damacus

.github/workflows/ci.yml

@@ -18,24 +18,18 @@ jobs:
 
   integration:
     needs: lint-unit
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     strategy:
       matrix:
         os:
-          - "almalinux-8"
+          - "fedora-latest"
           - "almalinux-9"
           - "almalinux-10"
           - "centos-stream-9"
           - "centos-stream-10"
-          - "debian-11"
           - "debian-12"
-          - "fedora-latest"
+          - "debian-13"
           - "opensuse-leap-15"
-          - "oraclelinux-8"
-          - "oraclelinux-9"
-          - "rockylinux-8"
-          - "rockylinux-9"
-          - "ubuntu-2004"
           - "ubuntu-2204"
           - "ubuntu-2404"
         suite:
@@ -70,8 +64,6 @@ jobs:
         suite:
           - "default"
           - "package"
-          - "source-24"
-          - "source-26"
           - "source-28"
           - "source-default"
       fail-fast: false
@@ -92,11 +84,11 @@ jobs:
 
   lua-test:
     needs: lint-unit
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     strategy:
       matrix:
         os:
-          - "centos-stream-9"
+          - "centos-stream-10"
         suite:
           - "source-lua"
       fail-fast: false
@@ -117,14 +109,13 @@ jobs:
 
   config-test:
     needs: lint-unit
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     strategy:
       matrix:
         os:
-          - "centos-stream-9"
+          - "centos-stream-10"
         suite:
           - "config-2"
-          # - "config-3"
           - "config-acl"
           - "config-array"
           - "config-backend-search"

kitchen.yml

@@ -15,23 +15,17 @@ verifier:
   name: inspec
 
 platforms:
-  - name: almalinux-8
+  - name: amazonlinux-2023
+  - name: fedora-latest
   - name: almalinux-9
   - name: almalinux-10
-  - name: amazonlinux-2023
   - name: centos-stream-9
   - name: centos-stream-10
-  - name: debian-11
   - name: debian-12
-  - name: fedora-latest
-  - name: opensuse-leap-15
-  - name: oraclelinux-8
-  - name: oraclelinux-9
-  - name: rockylinux-8
-  - name: rockylinux-9
-  - name: ubuntu-20.04
+  - name: debian-13
   - name: ubuntu-22.04
   - name: ubuntu-24.04
+  - name: opensuse-leap-15
 
 # Reusable YAML anchors for run_lists
 x-run_lists:
@@ -68,6 +62,9 @@ suites:
   - name: source-openssl
     run_list:
       - recipe[test::source_openssl]
+    verifier:
+      inspec_tests:
+        - path: test/integration/source_openssl
   - name: config-2
     run_list:
       - recipe[test::config_2]

test/cookbooks/test/recipes/source_openssl.rb

@@ -2,8 +2,20 @@
 
 build_essential 'compilation tools'
 
-# Install perl modules needed by OpenSSL Configure script
-package %w(perl-FindBin perl-lib perl-File-Compare perl-File-Copy perl-IPC-Cmd perl-Pod-Html perl-Time-Piece) if platform_family?('rhel', 'fedora')
+# Install dependencies needed by OpenSSL Configure and compilation
+case node['platform_family']
+when 'rhel', 'fedora'
+  if node['platform_version'].to_i >= 9
+    package %w(perl-FindBin perl-lib perl-File-Compare perl-File-Copy perl-IPC-Cmd perl-Pod-Html perl-Time-Piece)
+  else
+    # EL8 bundles perl modules in perl-core, individual packages don't exist
+    package %w(perl-core perl-IPC-Cmd)
+  end
+when 'debian'
+  package %w(perl zlib1g-dev)
+when 'suse'
+  package %w(perl zlib-devel)
+end
 
 # override environment variable
 ruby_block 'Pre-load OpenSSL path' do

test/integration/source_2.4/controls/source_spec.rb

@@ -1,5 +1,3 @@
-include_controls 'haproxy-common'
-
 describe file '/usr/bin/openssl' do
   it { should exist }
 end
@@ -9,5 +7,5 @@
 end
 
 describe command('haproxy -vv') do
-  its('stdout') { should match(/OpenSSL version : OpenSSL 3.2.1/) }
+  its('stdout') { should match(/OpenSSL version : OpenSSL 3.5.5/) }
 end