Add missing dependency

[agateau-gg]

Context

The Python interpreter we bundle in our RPM package depends on libcrypt.so.1, but some distributions do not ship it anymore. This is why ggshield fails when it's installed using its RPM package on Red Hat Enterprise Linux 9 (See #1036).

What has been done

• Update nfpm configuration to bundle the version of libcrypt we depend on.
• Update CI to test the RPM on RockyLinux 9 (more-or-less equivalent to RHEL 9).
• Build the RPM using rockylinux:8 instead of rockylinux:8.8 because the 8.8 Docker image does not receive security upgrades (we still test with 8.8 to ensure it works)

Validation

• Start a rockylinux 9 container
• Install git
• Install ggshield from the RPM
• Run ggshield --version → with the released version it fails, with the version from the CI it works

PR check list

• As much as possible, the changes include tests (unit and/or functional)
• If the changes affect the end user (new feature, behavior change, bug fix) then the PR has a changelog entry (see doc/dev/getting-started.md). If the changes do not affect the end user, then the skip-changelog label has been added to the PR.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 92.09%. Comparing base (82a2486) to head (7f68d32).
Report is 4 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1043   +/-   ##
=======================================
  Coverage   92.09%   92.09%           
=======================================
  Files         181      181           
  Lines        7756     7756           
=======================================
  Hits         7143     7143           
  Misses        613      613           

Flag	Coverage Δ
unittests	92.09% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[salome-voltz]

If I recall correctly, we initially fixed the minor version of rockylinux to 8.8 for python version consideration. Maybe it would be safer to pin a version here

[agateau-gg]

The problem is the 8.8 images do not receive security upgrades (See Rocky Linux Docker page), so it's less work for the CI to start from the latest 8 to build. The smoke tests run at the end still use 8.8 so it can't break without us noticing.

[salome-voltz]

All right, all good then, thanks for the clarification !