Merge branch 'cherry-pick-c4216930' into 'master_8.1.x'

CP V8.1 - Story #14814: Add Rocky Linux 9 support.

Story #14814: Add Rocky Linux 9 support.

Unofficial support for testing or development purposes.

See merge request vitam/vitam!10674 & vitam/vitam!10678

(cherry picked from commit c421693)

ebf0172 Story #14814: Add Rocky Linux 9 support.
320bdee Story #14558: Clean Code for Rocky support.

Co-authored-by: Julien Georges <julien.georges@culture.gouv.fr>

See merge request vitam/vitam!10675

Author: GiooDev

deployment/ansible-vitam-exploitation/roles/checks/tasks/main.yml

@@ -31,5 +31,5 @@
 
 - import_tasks: check_crypto_policies.yml
   when:
-    - ansible_distribution == "AlmaLinux"
+    - ansible_os_family in ['RedHat', 'Rocky']
     - inventory_hostname in groups['hosts_mongodb_data'] or inventory_hostname in groups['hosts_mongodb_offer']

deployment/ansible-vitam-exploitation/roles/cleaning_offers/tasks/purge_swift.yml

@@ -79,7 +79,7 @@
   - name: Update CA truststore
     command: update-ca-trust
 
-  when: ansible_os_family == "RedHat"
+  when: ansible_os_family in ['RedHat', 'Rocky']
 
 - name: List swift buckets for {{ vitam_prefix_offer|default(vitam_site_name) }}
   shell: swift --insecure list --prefix {{ vitam_prefix_offer|default(vitam_site_name) }};

deployment/ansible-vitam-extra/roles/bootstrap_repo/tasks/main.yml

@@ -43,7 +43,7 @@
     notify:
       - purge yum cache
 
-  when: ansible_os_family == "RedHat"
+  when: ansible_os_family in ['RedHat', 'Rocky']
 
 - block:
 

deployment/ansible-vitam-extra/roles/ihm-recette-clone-tests/tasks/main.yml

@@ -19,7 +19,7 @@
     until: result is succeeded
     delay: "{{ packages_install_retries_delay }}"
 
-  when: ansible_os_family == "RedHat"
+  when: ansible_os_family in ['RedHat', 'Rocky']
 
 - block:
 

deployment/ansible-vitam-extra/roles/openldap_server/tasks/configure_ldap.yml

@@ -32,7 +32,7 @@
     src: ldap
     dest: "/etc/sysconfig/ldap"
     mode: 0755
-  when: openldap_server_enable_ssl and ansible_os_family == 'RedHat'
+  when: openldap_server_enable_ssl and ansible_os_family in ['RedHat', 'Rocky']
   notify:
    - restart slapd
 

deployment/ansible-vitam-extra/roles/openldap_server/tasks/install_ldap.yml

@@ -12,7 +12,7 @@
   until: result is succeeded
   delay: "{{ packages_install_retries_delay }}"
   with_items: "{{ openldap_server_pkgs }}"
-  when: ansible_os_family == 'RedHat'
+  when: ansible_os_family in ['RedHat', 'Rocky']
 
 - name: Install the OpenLDAP and required packages for Debian/Ubuntu
   apt:
@@ -40,7 +40,7 @@
   template:
     src: slapd.conf.j2
     dest: "{{ openldap_server_app_path }}/slapd.conf"
-  when: ansible_os_family == "RedHat"
+  when: ansible_os_family in ['RedHat', 'Rocky']
   notify:
    - restart slapd
 

deployment/ansible-vitam-extra/roles/openldap_server/templates/ldap.conf.j2

@@ -18,7 +18,7 @@ URI     ldap://localhost
 #TIMELIMIT      15
 #DEREF          never
 TLS_CACERTDIR /etc/openldap/cacerts
-{% if ansible_os_family == 'RedHat' %}
+{% if ansible_os_family in ['RedHat', 'Rocky'] %}
 TLS_CACERT /etc/openldap/certs/cert.crt
 {% endif %}
 {% if ansible_os_family == 'Debian' %}

deployment/ansible-vitam-extra/roles/openldap_server/vars/Rocky.yml

@@ -0,0 +1,9 @@
+openldap_server_pkgs:
+  - openldap-servers
+  - openldap-clients
+  - libselinux-python
+  - openssl
+  - python-ldap
+
+openldap_server_app_path: "/etc/openldap/"
+openldap_server_user: ldap

deployment/ansible-vitam-extra/roles/packetbeat/vars/Rocky.yml

@@ -0,0 +1,3 @@
+---
+
+libpcap_pkg: libpcap

deployment/ansible-vitam-extra/roles/reverse/handlers/main.yml

@@ -4,7 +4,7 @@
 # Best way to do that is to use openssl rsa but after it the certificate headers are missing
 # We should investigate more on this subject as sed should not be used for that...
 - name: extract certificate
-  shell: "openssl pkcs12 -nodes -in /etc/{{ apache_service }}/certs/keystore_client_{{ vitam_site_name }}.p12 {{ '-provider legacy' if ansible_distribution == 'AlmaLinux' else '-legacy' }} -passin pass:'{{ keystores.client_external.reverse }}' -out /etc/{{ apache_service }}/certs/keystore_client_{{ vitam_site_name }}.pem && sed -i 's/ PRIVATE KEY/ RSA PRIVATE KEY/g' /etc/{{ apache_service }}/certs/keystore_client_{{ vitam_site_name }}.pem"
+  shell: "openssl pkcs12 -nodes -in /etc/{{ apache_service }}/certs/keystore_client_{{ vitam_site_name }}.p12 {{ '-provider legacy' if ansible_distribution in ['AlmaLinux', 'Rocky'] else '-legacy' }} -passin pass:'{{ keystores.client_external.reverse }}' -out /etc/{{ apache_service }}/certs/keystore_client_{{ vitam_site_name }}.pem && sed -i 's/ PRIVATE KEY/ RSA PRIVATE KEY/g' /etc/{{ apache_service }}/certs/keystore_client_{{ vitam_site_name }}.pem"
 
 - name: set certificate attributes
   file: