From 0105cd557301c30eca59a1b0005f493cf19bff6b Mon Sep 17 00:00:00 2001 From: unkin-agent Date: Sun, 23 Aug 2026 22:39:20 +1000 Subject: [PATCH] ci: fetch terraform from artifactapi instead of dnf install dnf install reads metadata for every enabled repo and downloads the vendored terraform RPM on every pipeline run. Fetch the pinned upstream zip from the artifactapi hashicorp-releases remote instead, matching the vault pattern in terraform-vault and terraform-artifactapi. - Replace dnf install terraform with a pinned curl of the terraform 1.15.0 zip (same version as the vendored RPM) from the artifactapi hashicorp-releases remote, extracted to /usr/local/bin. --- .gitea/workflows/build.yaml | 3 ++- .gitea/workflows/deploy.yaml | 3 ++- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/.gitea/workflows/build.yaml b/.gitea/workflows/build.yaml index f25febd..d113464 100644 --- a/.gitea/workflows/build.yaml +++ b/.gitea/workflows/build.yaml @@ -28,6 +28,7 @@ jobs: - name: Run Terraform Plan env: VAULT_ROLEID: ${{ secrets.TERRAFORM_INCUS_VAULT_ROLEID }} + TERRAFORM_VERSION: "1.15.0" run: | - dnf install terraform -y + curl -fsSL -o /tmp/terraform.zip "https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/hashicorp-releases/terraform/${TERRAFORM_VERSION}/terraform_${TERRAFORM_VERSION}_linux_amd64.zip" && python3 -m zipfile -e /tmp/terraform.zip /tmp/ && install -m0755 /tmp/terraform /usr/local/bin/terraform && rm -f /tmp/terraform.zip /tmp/terraform /tmp/LICENSE.txt make plan diff --git a/.gitea/workflows/deploy.yaml b/.gitea/workflows/deploy.yaml index 6ba05de..c6a42be 100644 --- a/.gitea/workflows/deploy.yaml +++ b/.gitea/workflows/deploy.yaml @@ -22,6 +22,7 @@ jobs: - name: Run Terraform Apply env: VAULT_ROLEID: ${{ secrets.TERRAFORM_INCUS_VAULT_ROLEID }} + TERRAFORM_VERSION: "1.15.0" run: | - dnf install terraform -y + curl -fsSL -o /tmp/terraform.zip "https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/hashicorp-releases/terraform/${TERRAFORM_VERSION}/terraform_${TERRAFORM_VERSION}_linux_amd64.zip" && python3 -m zipfile -e /tmp/terraform.zip /tmp/ && install -m0755 /tmp/terraform /usr/local/bin/terraform && rm -f /tmp/terraform.zip /tmp/terraform /tmp/LICENSE.txt make apply -- 2.47.3