Fix setting hostname in container in CI

Our venerable hack of setting the hostname on the host doesn't seem to
work anymore, so switch to using nss_wrapper.

Signed-off-by: Robbie Harwood <rharwood@redhat.com>

.github/workflows/build.yml

@@ -11,6 +11,7 @@
     "jobs": {
         "linux": {
             "runs-on": "ubuntu-latest",
+            "container": "${{ matrix.distro }}",
             "strategy": {
                 "fail-fast": false,
                 "matrix": {
@@ -45,9 +46,8 @@
                 },
                 {
                     "name": "Build and test gssapi",
-                    "run": "./ci/run-on-linux.sh ./ci/build.sh",
+                    "run": "./ci/build.sh",
                     "env": {
-                        "DISTRO": "${{ matrix.distro }}",
                         "KRB5_VER": "${{ matrix.krb5_ver }}",
                         "FLAKE": "${{ matrix.flake }}",
                     },

.github/workflows/deploy-docs.yml

@@ -4,15 +4,15 @@
     "jobs": {
         "update-pages": {
             "runs-on": "ubuntu-latest",
+            "container": "fedora-latest",
             "steps": [
                 {
                     "name": "Check out code",
                     "uses": "actions/checkout@v2",
                 },
                 {
                     "name": "Build docs",
-                    "run": "./ci/run-on-linux.sh ./ci/before-docs-deploy.sh",
-                    "env": { "DISTRO": "fedora:latest" },
+                    "run": "./ci/before-docs-deploy.sh",
                 },
                 {
                     "name": "Deploy latest docs",

.github/workflows/release.yml

@@ -4,15 +4,15 @@
     "jobs": {
         "release-linux": {
             "runs-on": "ubuntu-latest",
+            "container": "fedora:latest",
             "steps": [
                 {
                     "name": "Check out code",
                     "uses": "actions/checkout@v2",
                 },
                 {
                     "name": "Set things up",
-                    "run": "./ci/run-on-linux.sh ./ci/before-deploy.sh",
-                    "env": { "DISTRO": "fedora:latest" },
+                    "run": "./ci/before-deploy.sh",
                 },
                 {
                     "name": "Deploy to PyPI",

ci/build.sh

@@ -41,6 +41,8 @@ if [ x"$KRB5_VER" = "xheimdal" ] || [ "$OS_NAME" = "windows" ]; then
     exit $?
 fi
 
+export NSS_WRAPPER_HOSTNAME=test.box
+export LD_PRELOAD=libnss_wrapper.so
 python setup.py nosetests --verbosity=3
 TEST_RES=$?
 

ci/lib-setup.sh

@@ -11,7 +11,7 @@ setup::debian::install() {
         apt-get -y install heimdal-dev
     else
         apt-get -y install krb5-{user,kdc,admin-server,multidev} libkrb5-dev \
-                gss-ntlmssp
+                gss-ntlmssp libnss-wrapper
     fi
 
     apt-get -y install gcc virtualenv python3-{virtualenv,dev} cython3
@@ -27,7 +27,7 @@ setup::rh::yuminst() {
 
 setup::centos::install() {
     # Cython on el7 is too old - downstream patches
-    setup::rh::yuminst python3-{virtualenv,devel}
+    setup::rh::yuminst python3-{virtualenv,devel} nss_wrapper
     virtualenv -p $(which python3) .venv
     source ./.venv/bin/activate
     pip install --upgrade pip # el7 pip doesn't quite work right
@@ -37,7 +37,7 @@ setup::centos::install() {
 setup::fedora::install() {
     # path to binary here in case Rawhide changes it
     setup::rh::yuminst redhat-rpm-config \
-        /usr/bin/virtualenv python3-{virtualenv,devel}
+        /usr/bin/virtualenv python3-{virtualenv,devel} nss_wrapper
     virtualenv -p $(which python3) .venv
     source ./.venv/bin/activate
     pip install --install-option='--no-cython-compile' cython