Debugging TLS builds on CI is fun, round 9

Author: michaelklishin

.github/workflows/ci.yaml

@@ -140,36 +140,24 @@ jobs:
           sed -i 's/^[[:space:]]*//' tests/tls/certs/rabbitmq.conf
           echo "Generated config:"
           cat tests/tls/certs/rabbitmq.conf
+          echo -n "rabbitmq-test-cookie" > tests/tls/certs/.erlang.cookie
+          chmod 600 tests/tls/certs/.erlang.cookie
 
-      - name: Start RabbitMQ
+      - name: Start RabbitMQ with TLS
         run: |
           docker run -d --name rabbitmq-tls \
             -p 15671:15671 \
             -p 15672:15672 \
             -p 5672:5672 \
+            -v ${{ github.workspace }}/tests/tls/certs/.erlang.cookie:/var/lib/rabbitmq/.erlang.cookie:ro \
+            -v ${{ github.workspace }}/tests/tls/certs:/certs:ro \
+            -v ${{ github.workspace }}/tests/tls/certs/rabbitmq.conf:/etc/rabbitmq/conf.d/10-tls.conf:ro \
             rabbitmq:${{ matrix.rabbitmq-series }}-management
 
       - name: Wait for RabbitMQ to start
         run: |
           docker exec rabbitmq-tls rabbitmqctl await_startup --timeout 60
 
-      - name: Configure TLS
-        run: |
-          docker exec rabbitmq-tls mkdir -p /certs
-          docker cp tests/tls/certs/ca_certificate.pem rabbitmq-tls:/certs/
-          docker cp tests/tls/certs/server_certificate.pem rabbitmq-tls:/certs/
-          docker cp tests/tls/certs/server_key.pem rabbitmq-tls:/certs/
-          docker cp tests/tls/certs/rabbitmq.conf rabbitmq-tls:/etc/rabbitmq/conf.d/10-tls.conf
-          docker exec rabbitmq-tls chown -R rabbitmq:rabbitmq /certs
-          docker exec rabbitmq-tls chmod 644 /certs/*.pem
-          docker exec rabbitmq-tls chmod 600 /certs/server_key.pem
-
-      - name: Restart RabbitMQ to apply TLS config
-        run: |
-          docker exec rabbitmq-tls rabbitmqctl stop_app
-          docker exec rabbitmq-tls rabbitmqctl start_app
-          sleep 5
-
       - name: Verify TLS listener
         run: |
           docker exec rabbitmq-tls rabbitmq-diagnostics listeners