integration/linux/build: Switch from curl to wget for bootstrap

Curl is annoying to get to retry on all network errors on all distros,
whereas wget just does it by default.

Author: elprans

integration/linux/build/Dockerfile-amazonlinux.template

@@ -58,6 +58,9 @@ RUN dnf install -y \
 		zstd \
 	&& dnf swap -y gnupg2-minimal gnupg2-full
 
+# wget option defaults for bootstrap
+ENV WGET="wget --no-verbose --secure-protocol=TLSv1_2 --continue"
+
 %%SCRIPTS%%
 
 RUN set -ex \

integration/linux/build/Dockerfile-centos.template

@@ -64,6 +64,9 @@ RUN ulimit -n 1024 \
 RUN localedef -f UTF-8 -i en_US en_US.UTF-8
 %%ENDIF%%
 
+# wget option defaults for bootstrap
+ENV WGET="wget --no-verbose --secure-protocol=TLSv1_2 --continue"
+
 %%SCRIPTS%%
 
 RUN set -ex \

integration/linux/build/Dockerfile-debian.template

@@ -26,6 +26,9 @@ RUN apt-get update \
 		zstd \
 	&& rm -rf /var/lib/apt/lists/*
 
+# wget option defaults for bootstrap
+ENV WGET="wget --no-verbose --secure-protocol=TLSv1_2 --continue"
+
 %%SCRIPTS%%
 
 RUN set -ex \

integration/linux/build/Dockerfile-fedora.template

@@ -53,6 +53,9 @@ RUN dnf install -y \
 		zlib-devel \
 		zstd
 
+# wget option defaults for bootstrap
+ENV WGET="wget --no-verbose --secure-protocol=TLSv1_2 --continue"
+
 %%SCRIPTS%%
 
 RUN set -ex \

integration/linux/build/Dockerfile-linux.template

@@ -74,6 +74,9 @@ RUN localedef -f UTF-8 -i en_US en_US.UTF-8
 # Needed to pick up SCL stuff from profile.d/
 SHELL ["/bin/bash", "--login", "-c"]
 
+# wget option defaults for bootstrap
+ENV WGET="wget --no-verbose --secure-protocol=TLSv1_2 --continue"
+
 %%SCRIPTS%%
 
 ENV OPENSSL_VERSION 1.1.1w

integration/linux/build/Dockerfile-linuxmusl.template

@@ -38,12 +38,16 @@ RUN apk add --no-cache \
 		tar \
 		tcl \
 		util-linux-dev \
+		wget \
 		xz \
 		xz-dev \
 		yarn \
 		zip \
 		zstd
 
+# wget option defaults for bootstrap
+ENV WGET="wget --no-verbose --secure-protocol=TLSv1_2 --continue"
+
 %%SCRIPTS%%
 
 RUN set -ex \

integration/linux/build/Dockerfile-rockylinux.template

@@ -57,6 +57,9 @@ RUN dnf install -y \
 		zlib-devel \
 		zstd
 
+# wget option defaults for bootstrap
+ENV WGET="wget --no-verbose --secure-protocol=TLSv1_2 --continue"
+
 %%SCRIPTS%%
 
 RUN set -ex \

integration/linux/build/_bootstrap/cmake.sh

@@ -32,21 +32,21 @@ mkdir -p /usr/src/cmake
 cd /usr/src
 
 _server="https://github.com/Kitware/CMake/releases/download/v${CMAKE_VERSION}"
-curl -fsSLO "${_server}/cmake-${CMAKE_VERSION}-SHA-256.txt"
-curl -fsSLO "${_server}/cmake-${CMAKE_VERSION}-SHA-256.txt.asc"
+$WGET "${_server}/cmake-${CMAKE_VERSION}-SHA-256.txt"
+$WGET "${_server}/cmake-${CMAKE_VERSION}-SHA-256.txt.asc"
 
 gpg --batch --verify "cmake-${CMAKE_VERSION}-SHA-256.txt.asc" "cmake-${CMAKE_VERSION}-SHA-256.txt"
 rm -f "cmake-${CMAKE_VERSION}-SHA-256.txt.asc"
 
 if [ -n "${CMAKE_ARCH}" ]; then
-	curl -fsSLO "${_server}/cmake-${CMAKE_VERSION}-linux-${CMAKE_ARCH}.tar.gz"
+	$WGET "${_server}/cmake-${CMAKE_VERSION}-linux-${CMAKE_ARCH}.tar.gz"
 	grep " cmake-${CMAKE_VERSION}-linux-${CMAKE_ARCH}.tar.gz\$" "cmake-${CMAKE_VERSION}-SHA-256.txt" | sha256sum -c -
     rm -f "cmake-${CMAKE_VERSION}-SHA-256.txt"
 
     tar -xzf "cmake-${CMAKE_VERSION}-linux-${CMAKE_ARCH}.tar.gz" -C /usr/local --strip-components=1 --no-same-owner
     rm -f "cmake-${CMAKE_VERSION}-linux-${CMAKE_ARCH}.tar.gz"
 else
-    curl -fsSLO "${_server}/cmake-${CMAKE_VERSION}.tar.gz"
+    $WGET "${_server}/cmake-${CMAKE_VERSION}.tar.gz"
     grep " cmake-${CMAKE_VERSION}.tar.gz\$" "cmake-${CMAKE_VERSION}-SHA-256.txt" | sha256sum -c -
     rm -f "cmake-${CMAKE_VERSION}-SHA-256.txt"
 

integration/linux/build/_bootstrap/git.sh

@@ -14,8 +14,8 @@ fetch_keys "${GIT_KEYS[@]}"
 mkdir -p /usr/src/git
 cd /usr/src
 
-curl -fsSLo git.tar.xz "https://www.kernel.org/pub/software/scm/git/git-${GIT_VERSION}.tar.xz"
-curl -fsSLo git.tar.sign "https://www.kernel.org/pub/software/scm/git/git-${GIT_VERSION}.tar.sign"
+$WGET -O git.tar.xz "https://www.kernel.org/pub/software/scm/git/git-${GIT_VERSION}.tar.xz"
+$WGET -O git.tar.sign "https://www.kernel.org/pub/software/scm/git/git-${GIT_VERSION}.tar.sign"
 
 # gpg --batch --verify git.tar.sign git.tar.xz
 rm -f git.tar.sign

integration/linux/build/_bootstrap/gzip.sh

@@ -14,8 +14,8 @@ fetch_keys "${GZIP_KEYS[@]}"
 mkdir -p /usr/src/gzip
 cd /usr/src
 
-curl -fsSLo gzip.tar.gz "https://ftp.gnu.org/gnu/gzip/gzip-${GZIP_VERSION}.tar.gz"
-curl -fsSLo gzip.tar.gz.sign "https://ftp.gnu.org/gnu/gzip/gzip-${GZIP_VERSION}.tar.gz.sig"
+$WGET -O gzip.tar.gz "https://ftp.gnu.org/gnu/gzip/gzip-${GZIP_VERSION}.tar.gz"
+$WGET -O gzip.tar.gz.sign "https://ftp.gnu.org/gnu/gzip/gzip-${GZIP_VERSION}.tar.gz.sig"
 
 gpg --batch --verify gzip.tar.gz.sign gzip.tar.gz
 rm -f gzip.tar.gz.sign