Support a bionic variant that builds against the newer libssl.

This is so we can more easily install these packages in Chef v2 and stop
fighting the mysql client and other things that depend on libssl-dev.

Author: mdkent

build_ruby.go

@@ -18,22 +18,8 @@ import (
 
 var (
 	distros = map[string]string{
-		"ubuntu_precise": "ubuntu:12.04",
-		"ubuntu:12.04":   "ubuntu:12.04",
-
-		"ubuntu_raring": "ubuntu:13.04",
-		"ubuntu:13.04":  "ubuntu:13.04",
-
-		"ubuntu_trusty": "ubuntu:14.04",
-		"ubuntu:14.04":  "ubuntu:14.04",
-
-		"ubuntu_xenial": "ubuntu:16.04",
-		"ubuntu:16.04":  "ubuntu:16.04",
-
-		"ubuntu_bionic": "ubuntu:18.04",
-		"ubuntu:18.04":  "ubuntu:18.04",
-
-		"centos:6.6": "centos:6.6",
+		"ubuntu:18.04":        "ubuntu:18.04",
+		"ubuntu:18.04:libssl": "ubuntu:18.04:libssl", // drop this variant once we move beyond bionic
 	}
 
 	docker_client   *docker.Client
@@ -358,12 +344,10 @@ func dockerFileFromTemplate(distro, ruby_version, arch, iteration string, patche
 	// This would be way better as a look up table, or with a more formal lookup process
 	var template_location string
 	switch distro {
-	case "centos:6.6":
-		template_location = "data/Dockerfile-centos.template"
-	case "ubuntu:16.04":
-		template_location = "data/Dockerfile-xenial.template"
 	case "ubuntu:18.04":
 		template_location = "data/Dockerfile-bionic.template"
+        case "ubuntu:18.04:libssl": // drop this variant once we move beyond bionic
+		template_location = "data/Dockerfile-bionic-libssl.template"
 	default:
 		template_location = "data/Dockerfile.template"
 	}
@@ -393,12 +377,10 @@ func dockerFileFromTemplate(distro, ruby_version, arch, iteration string, patche
 
 func gemfilesFromDistro(distro string) (string, string) {
 	switch distro {
-	case "centos:6.6":
-		return "data/Gemfile.centos", "data/Gemfile.centos.lock"
-	case "ubuntu:16.04":
-		return "data/Gemfile.xenial", "data/Gemfile.xenial.lock"
 	case "ubuntu:18.04":
 		return "data/Gemfile.bionic", "data/Gemfile.bionic.lock"
+	case "ubuntu:18.04:libssl": // drop this variant once we move beyond bionic
+		return "data/Gemfile.bionic", "data/Gemfile.bionic.lock"
 	default:
 		return "data/Gemfile.template", "data/Gemfile.template.lock"
 	}

data/Dockerfile-bionic-libssl.template

@@ -0,0 +1,55 @@
+# Only produces builds for ruby >= 2.4 due to the newer openssl
+# see https://3.basecamp.com/2914079/buckets/21350690/todos/4209849128
+#
+# We should drop this variant when we move beyond bionic
+
+# Can't use {{.Distro}} since it's ubuntu:18.04:libssl
+FROM ubuntu:18.04
+RUN apt-get update
+RUN apt-get install -y build-essential \
+    libc6-dev libffi-dev libgdbm-dev libncurses5-dev \
+    libreadline-dev libssl-dev libyaml-dev zlib1g-dev \
+    curl ruby ruby-dev
+RUN ["/usr/bin/gem", "install", "bundler", "-v", "1.17.3", "--no-rdoc", "--no-ri"]
+ADD Gemfile /
+ADD Gemfile.lock /
+RUN ["bundle", "install"]
+
+RUN curl {{.DownloadUrl}}|tar oxzC /tmp
+{{range .Patches}}ADD {{.}} /
+{{end}}
+WORKDIR /tmp/ruby-{{.RubyVersion}}
+RUN for i in `/bin/ls /*.patch`; do patch -p0 < $i; done
+RUN CFLAGS='-march=x86-64 -O3 -fno-fast-math -g3 -ggdb -Wall -Wextra -Wno-unused-parameter -Wno-parentheses -Wno-long-long -Wno-missing-field-initializers -Wunused-variable -Wpointer-arith -Wwrite-strings -Wdeclaration-after-statement -Wimplicit-function-declaration -Wdeprecated-declarations -Wno-packed-bitfield-compat -std=iso9899:1999  -fPIC' ./configure \
+  --prefix=/opt/ruby{{.RubyVersion}} \
+  --enable-shared \
+  --disable-install-doc \
+  --enable-load-relative
+# Seems to only affect some 1.9 series Rubies, but the combined make step:
+#
+#     RUN make -j8 install DESTDIR=/tmp/fpm
+#
+# that ran the make then make install, was broken. Splitting it up into
+# two separate commands works fine:
+RUN make -j{{.NumCPU}}
+RUN make install DESTDIR=/tmp/fpm
+
+WORKDIR /
+RUN fpm \
+    -s dir \
+    -t deb \
+    -n ruby-{{.RubyVersion}} \
+    -a {{.Arch}} \
+    -v {{.RubyVersion}} \
+    {{.Iteration}}
+    -d libc6-dev \
+    -d libffi-dev \
+    -d libgdbm-dev \
+    -d libncurses5-dev \
+    -d libreadline-dev \
+    -d libssl-dev \
+    -d libyaml-dev \
+    -d zlib1g-dev \
+    -C /tmp/fpm \
+    -p /{{.FileName}} \
+    opt