Merge branch 'rjb/alternative-nns-domains' into 'master'

chore(BOUN-779): Updating initial NNS URL for Node Onboarding

Currently, a node will try to contact the IC using `nns.ic0.app`. However, the Boundary Node will soon only provide the API endpoints under `ic0.app`, `icp0.io`, and `icp-api.io`, and not the subdomains anymore.

As part of this change, we provide multiple domains for redundancy. `setupos` checks that at least one of them works before proceeding. 

See merge request dfinity-lab/public/ic!12570

Author: r-birkner

ic-os/setupos/data/deployment.json.template

@@ -6,7 +6,7 @@
     "hosts": "elasticsearch-node-0.mercury.dfinity.systems:443 elasticsearch-node-1.mercury.dfinity.systems:443 elasticsearch-node-2.mercury.dfinity.systems:443 elasticsearch-node-3.mercury.dfinity.systems:443"
   },
   "nns": {
-    "url": "https://nns.ic0.app"
+    "url": "https://icp-api.io,https://icp0.io,https://ic0.app"
   },
   "dns": {
     "name_servers": "2606:4700:4700::1111 2606:4700:4700::1001 2001:4860:4860::8888 2001:4860:4860::8844"

ic-os/setupos/rootfs/opt/ic/bin/network.sh

@@ -147,8 +147,8 @@ function ping_ipv6_gateway() {
 }
 
 function assemble_nns_nodes_list() {
-    NNS_URL=$(/opt/ic/bin/fetch-property.sh --key=.nns.url --config=${DEPLOYMENT})
-    NNS_URL_LIST=$(echo $NNS_URL | sed 's@,@ @g')
+    NNS_URL_STRING=$(/opt/ic/bin/fetch-property.sh --key=.nns.url --config=${DEPLOYMENT})
+    NNS_URL_LIST=$(echo $NNS_URL_STRING | sed 's@,@ @g')
 }
 
 function query_nns_nodes() {
@@ -157,10 +157,8 @@ function query_nns_nodes() {
     i=0
     success=0
     nodes=$(echo ${NNS_URL_LIST} | wc -w)
+    # At least one of the provided URLs needs to work.
     verify=1
-    if [ ${nodes} -gt 1 ]; then
-        verify=$(awk "BEGIN {printf \"%.0f\n\", ${nodes}*0.20}")
-    fi
     for url in $(echo $NNS_URL_LIST); do
         # When running against testnets, we need to ignore self signed certs
         # with `--insecure`. This check is only meant to confirm from SetupOS