unkin/terraform-vault
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ci: fetch vault from artifactapi instead of dnf install #99

Merged
benvin merged 2 commits from benvin/ci-vault-install-speedup into master 2026-07-25 09:47:35 +10:00
Conversation 0 Commits 2 Files Changed 2
+4 -2

2 Commits

Author SHA1 Message Date
unkinben 282730e578 Escape VAULT_VERSION for woodpecker YAML substitution ($$ -> shell)
ci/woodpecker/pr/plan Pipeline was successful
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
2026-07-25 00:32:22 +10:00
benvin 1e0f1762d3 ci: fetch vault from artifactapi instead of dnf install
ci/woodpecker/pr/plan Pipeline failed
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details 
CI installed vault by shelling out to `dnf install vault -y`, which reads
metadata for every enabled repo (appstream/baseos/crb/epel/ha) and downloads
the 169MB vendored vault RPM from the unkin repo on every pipeline run
(~39s per plan/apply job).

- Replace the dnf install with a pinned curl of the upstream vault zip from
  the artifactapi hashicorp-releases remote proxy, extracted with python3 to
  /usr/local/bin/vault.
- Pin the version via a VAULT_VERSION env var (1.20.0).
 2026-07-25 00:27:21 +10:00