lxc-test-ubuntu in ubuntu_lxc failed on Trusty and variants

[Po-Hsu Lin]

This is not a regression, it can be found with kernel on Trusty in cycle sru-20221114 (but it was ok with sru-20221010)

Test failed with:
 ubuntu-cloudimg-query is /usr/bin/ubuntu-cloudimg-query
 wget is /usr/bin/wget
 failed to get https://cloud-images.ubuntu.com/query/trusty/server/daily-dl.current.txt
 There is no download available for release=trusty, stream=daily, arch=amd64
 lxc_container: lxccontainer.c: create_run_template: 1092 container creation template for 2dcd9e61-a9cc-4a2c-afac-60433e791cae failed
 lxc_container: lxc_create.c: main: 274 Error creating container 2dcd9e61-a9cc-4a2c-afac-60433e791cae
 Failed creating ubuntu-cloud container

Look into the lxc-test-ubuntu code (/usr/bin/lxc-test-ubuntu):

  for template in ubuntu ubuntu-cloud; do
    # need a different name for each container so dnsmasq doesn't
    # mess us up with its caching
    if which uuidgen 2>&1 > /dev/null; then
      name=$(uuidgen)
    else
      name=lxc-test-$template
    fi

    lxc-create -t $template -n $name || FAIL "creating $template container"

you will see it's failing with template=ubuntu-cloud at the lxc-create command.

The file, https://cloud-images.ubuntu.com/query/trusty/server/daily-dl.current.txt exists, however if you try to wget it, you will see:

$ wget https://cloud-images.ubuntu.com/query/trusty/server/daily-dl.current.txt
--2023-02-24 16:08:41-- https://cloud-images.ubuntu.com/query/trusty/server/daily-dl.current.txt
Resolving cloud-images.ubuntu.com (cloud-images.ubuntu.com)... 185.125.190.37, 185.125.190.40, 2620:2d:4000:1::17, ...
Connecting to cloud-images.ubuntu.com (cloud-images.ubuntu.com)|185.125.190.37|:443... connected.
ERROR: cannot verify cloud-images.ubuntu.com's certificate, issued by '/C=US/O=Let\'s Encrypt/CN=R3':
  Issued certificate has expired.
To connect to cloud-images.ubuntu.com insecurely, use `--no-check-certificate'.

We might need to find a way to update the certificate. Otherwise we will need to find a way to pass that "--no-check-certificate" flag to wget.

[Po-Hsu Lin (cypressyew)]

I will keep this bug open, if this happens again please contact kernel team member and ask for ca-certificate to be copied to the target PPA.