aquaproj / aqua-installer Goto Github PK

Problem to solve

We use aqua-installer action and sometimes get the following error:

Run aquaproj/[email protected]
Run echo "${AQUA_ROOT_DIR:-${XDG_DATA_HOME:-$HOME/.local/share}/aquaproj-aqua}/bin" >> $GITHUB_PATH
Run bash "/runner/_work/_actions/aquaproj/aqua-installer/v1.0.0/action.sh"
===> Downloading https://github.com/aquaproj/aqua/releases/download/v1.17.1/aqua_linux_amd64.tar.gz ...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed

  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0

100 5637k  100 5637k    0     0  19.5M      0 --:--:-- --:--:-- --:--:-- 19.5M
===> Install aqua v1.17.1 (linux/amd64) to /home/runner/.local/share/aquaproj-aqua/bin/aqua
time="2022-07-28T01:31:21Z" level=info msg="download and unarchive the package" aqua_version=1.17.1 env=linux/amd64 package_name=aqua-proxy package_version=v1.1.2 program=aqua registry=
time="2022-07-28T01:31:21Z" level=fatal msg="aqua failed" aqua_version=1.17.1 env=linux/amd64 error="copy the file to the temporal file: read tcp 10.11.69.172:60234->185.199.109.133:443: read: connection reset by peer" program=aqua

It seems a temporary error.

How to solve

It would be nice if aqua-installer or aqua retries on a temporary error.
Related to aquaproj/aqua#829.

Thanks.

https://aquaproj.github.io/docs/reference/install

add ${AQUA_ROOT_DIR}/bin to the environment variable PATH

It should be go install github.com/aquaproj/aqua/cmd/aqua@latest .

Rather than downloading all binaries on every run it would be more efficient and faster if the action would cache the aqua binary and all of the packages binaries.

https://docs.github.com/en/actions/using-workflows/caching-dependencies-to-speed-up-workflows
https://github.com/actions/cache

https://aquaproj.github.io/docs/products/aqua-installer#shell-script

The installation script hash of this repository introduced in the link above is for v3.0.0.
It would be helpful if you could publish the hash of v3.0.1 on the release page and introduction page.

• aquaproj/aqua-registry#22727
• https://github.com/aquaproj/aqua-registry/actions/runs/9029687702/job/24812502432?pr=22727

FAILED: SLSA verification failed: error searching rekor entries: no matching rekor entries
time="2024-05-10T08:43:57Z" level=info msg="Verification by slsa-verifier failed temporarily, retring" aqua_version=2.25.1 env=linux/amd64 new_version=v2.27.4 package_name=aquaproj/aqua package_version=v2.27.4 program=aqua registry= retry_count=4 wait_time=929ms
Verifying artifact /tmp/898778525: FAILED: error searching rekor entries: no matching rekor entries

SLSA verification failed: error searching rekor entries: no matching rekor entries

Overview

GitHub Actions doesn't work in container.

https://docs.github.com/en/actions/using-jobs/running-jobs-in-a-container

How to reproduce

https://github.com/suzuki-shunsuke/test-github-action/blob/ee42b9ad6e5e180d189cf585357bb47a74b499b8/.github/workflows/test.yaml

---
name: test
on: pull_request
jobs:
  test:
    runs-on: ubuntu-latest
    container:
      image: golang:1.20
    steps:
      - uses: actions/checkout@83b7061638ee4956cf7545a6f7efe594e5ad0247 # v3.5.1
      - uses: aquaproj/[email protected]
        with:
          aqua_version: v2.9.0
        env:
          GITHUB_TOKEN: ${{github.token}}

https://github.com/suzuki-shunsuke/test-github-action/actions/runs/5332029013/jobs/9660678516?pr=162

Run "/home/runner/work/_actions/aquaproj/aqua-installer/v2.1.1/aqua-installer" -v "$AQUA_VERSION"
/__w/_temp/31[19](https://github.com/suzuki-shunsuke/test-github-action/actions/runs/5332029013/jobs/9660678516?pr=162#step:4:22)fcdf-4b2f-4ff8-a83a-06ceee381e9d.sh: line 1: /home/runner/work/_actions/aquaproj/aqua-installer/v2.1.1/aqua-installer: No such file or directory
Error: Process completed with exit code 127.

https://docs.sigstore.dev/cosign/overview/

Install aqua securely.

Similar to how Comtrya does it:

https://github.com/comtrya/get.comtrya.dev/blob/main/public/ps.html

iwr "https://get.comtrya.dev/ps" -UseBasicParsing | iex

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Edited/Blocked

These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.

• chore(deps): update dependency aquaproj/aqua-registry to v4.213.1

Detected dependencies

• Check this box to trigger a request for Renovate to run again on this repository

This issue provides visibility into Renovate updates and their statuses. Learn more

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps): update dependency suzuki-shunsuke/aqua to v0.1.2

• Verify the checksum of aqua
• Verify the checksum of aqua-installer

• https://docs.sigstore.dev/cosign/working_with_blobs

Right now when you run aqua-installer it only tells the progress and location to be installed. Is it possible to show which version is going to be installed as well?

$ aqua-installer 
===> Downloading https://github.com/aquaproj/aqua/releases/latest/download/aqua_linux_amd64.tar.gz ...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
100 5651k  100 5651k    0     0  3255k      0  0:00:01  0:00:01 --:--:-- 10.1M
===> Install aqua latest (linux/amd64) to /home/tasato/.local/share/aquaproj-aqua/bin/aqua

It'd be also great if aqua-installer first tries to look for existing aqua cmd and if it's already latest then it skips installation.