Use unsecure entropy source in docker packaging tests

mark-vieira · Jan 6, 2025 · 02de815 · 02de815
1 parent f7444ae
commit 02de815
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/qa/packaging/src/test/java/org/elasticsearch/packaging/util/docker/DockerRun.java b/qa/packaging/src/test/java/org/elasticsearch/packaging/util/docker/DockerRun.java
@@ -29,6 +29,9 @@
  */
 public class DockerRun {
 
+    // Use less secure entropy source to avoid hanging when generating certificates
+    private static final String DEFAULT_JAVA_OPTS = "-Djava.security.egd=file:/dev/urandom";
+
     private Distribution distribution;
     private final Map<String, String> envVars = new HashMap<>();
     private final Map<Path, Path> volumes = new HashMap<>();
@@ -112,6 +115,13 @@ String build() {
         // Limit container memory
         cmd.add("--memory " + memory);
 
+        // Add default java opts
+        if (this.envVars.containsKey("CLI_JAVA_OPTS")) {
+            this.envVars.put("CLI_JAVA_OPTS", this.envVars.get("CLI_JAVA_OPTS") + " " + DEFAULT_JAVA_OPTS);
+        } else {
+            this.envVars.put("CLI_JAVA_OPTS", DEFAULT_JAVA_OPTS);
+        }
+
         this.envVars.forEach((key, value) -> cmd.add("--env " + key + "=\"" + value + "\""));
 
         // Map ports in the container to the host, so that we can send requests