ERP5 SR: Generate real password for mariadb.

Get rid of this insecure password.
Warning: for existing instances that are upgraded, it requires to manually
change the mariadb password by the new one.

slapos/recipe/generic_mysql/__init__.py

@@ -30,9 +30,6 @@ import os
 class Recipe(GenericBaseRecipe):
 
   def _options(self, options):
-    options['password'] = self.generatePassword()
-    if 'test-database' in options:
-      options['test-password'] = self.generatePassword()
     options.setdefault('parallel-test-database-amount', '0')
     for x in xrange(int(options['parallel-test-database-amount'])):
       options['test-password-%s' % x] = self.generatePassword()

stack/erp5/buildout.cfg

@@ -181,7 +181,7 @@ context =
 [template-mariadb]
 < = template-jinja2-base
 filename = instance-mariadb.cfg
-md5sum = 49ae6f1bf97d3755978fe08b8e29fb5a
+md5sum = b5500e3fdb5f64fbaff9137c394f576f
 extra-context =
     key coreutils_location coreutils:location
     key dcron_location dcron:location

stack/erp5/instance-mariadb.cfg.in

@@ -38,6 +38,8 @@ test-user = erp5_test
 test-database = erp5_test
 mysql-test-database-base = testdb
 mysql-test-user-base = testuser
+password = ${generate-password:passwd}
+test-password = ${:password}
 
 # Paths
 wrapper = ${basedirectory:services}/mariadb
@@ -102,6 +104,11 @@ pt-visual-explain-binary = {{ perl_siteprefix }}/bin/pt-visual-explain
 xtrabackup-binary = {{ xtrabackup_location }}/bin/xtrabackup_51
 perl-binary = {{ perl_location }}/bin/perl
 
+[generate-password]
+recipe = slapos.cookbook:generate.password
+storage-path = ${rootdirectory:srv}/passwd
+bytes = 32
+
 [logrotate]
 recipe = slapos.cookbook:logrotate
 # Binaries