qa/tasks: change collectl source to download.ceph.com

Getting it from our own service avoids exposing us to
supply chain attacks in our QA infrastructure.

Fixes: https://tracker.ceph.com/issues/76927
Signed-off-by: Laura Flores <lflores@ibm.com>

diff --git a/qa/tasks/cbt.py b/qa/tasks/cbt.py
index b85902b55769b85165e8af4eef6b1966b74bfd51..a7b33a7f54de8d8840fe8141f55e299b10be474d 100644 (file)
--- a/qa/tasks/cbt.py
+++ b/qa/tasks/cbt.py
@@ -84,7 +84,7 @@ class CBT(Task):
                 cbt_depends += ['pdsh', 'pdsh-rcmd-ssh']
 
             self.log.info('Installing collectl')
-            collectl_location = "https://sourceforge.net/projects/collectl/files/collectl/collectl-4.3.1/collectl-4.3.1.src.tar.gz/download"
+            collectl_location = "https://download.ceph.com/qa/collectl-4.3.1.src.tar.gz"
             self.first_mon.run(
                 args=[
                     'sudo', 'mkdir', 'collectl', run.Raw('&&'),