ci: Validate that the rvm-installer comes from the correct source

Based on guidance from https://rvm.io/rvm/security to make sure
we get rvm-installer from the correct source.
This commit is contained in:
Robert Maynard
2026-04-28 11:12:32 -04:00
committed by Brad King
parent 2786d4e6a3
commit 05bd3e5437
3 changed files with 10 additions and 4 deletions

View File

@@ -8,7 +8,10 @@ gpg2 --keyserver hkps://keyserver.ubuntu.com \
--recv-keys 409B6B1796C275462A1703113804BB82D39DC0E3 \
7D2BAF1CF37B13E2069D6956105BD0E739499BDB
curl -sSL https://get.rvm.io | bash -s stable
curl -sSL https://raw.githubusercontent.com/rvm/rvm/stable/binscripts/rvm-installer -o rvm-installer &&
curl -sSL https://raw.githubusercontent.com/rvm/rvm/stable/binscripts/rvm-installer.asc -o rvm-installer.asc &&
gpg2 --verify rvm-installer.asc rvm-installer &&
bash rvm-installer stable
# keep version in sync with `env_debian*_ninja.sh`
/usr/local/rvm/bin/rvm install ruby-3.2.2

View File

@@ -8,7 +8,10 @@ gpg2 --keyserver hkps://keyserver.ubuntu.com \
--recv-keys 409B6B1796C275462A1703113804BB82D39DC0E3 \
7D2BAF1CF37B13E2069D6956105BD0E739499BDB
curl -sSL https://get.rvm.io | bash -s stable --ignore-dotfiles
curl -sSL https://raw.githubusercontent.com/rvm/rvm/stable/binscripts/rvm-installer -o rvm-installer &&
curl -sSL https://raw.githubusercontent.com/rvm/rvm/stable/binscripts/rvm-installer.asc -o rvm-installer.asc &&
gpg2 --verify rvm-installer.asc rvm-installer &&
bash rvm-installer stable --ignore-dotfiles
export rvm_silence_banner=1

View File

@@ -58,7 +58,7 @@
### Debian
.debian13:
image: "kitware/cmake:ci-debian13-x86_64-2026-02-08"
image: "kitware/cmake:ci-debian13-x86_64-2026-04-28"
variables:
GIT_CLONE_PATH: "$CI_BUILDS_DIR/cmake ci"
@@ -82,7 +82,7 @@
### Fedora
.fedora43:
image: "kitware/cmake:ci-fedora43-x86_64-2026-02-08"
image: "kitware/cmake:ci-fedora43-x86_64-2026-04-28"
variables:
GIT_CLONE_PATH: "$CI_BUILDS_DIR/cmake ci/long file name for testing purposes"