This is an automated email from the ASF dual-hosted git repository.

nic-6443 pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/apisix.git


The following commit(s) were added to refs/heads/master by this push:
     new 063d8509e ci: use prebuilt apisix runtime (#13432)
063d8509e is described below

commit 063d8509e9c3d02bd95e0eea39a52770ff3926b5
Author: Nic <[email protected]>
AuthorDate: Tue May 26 09:22:31 2026 +0800

    ci: use prebuilt apisix runtime (#13432)
---
 ci/linux-install-openresty.sh | 84 ++++++++++++++++++++++++++++++-------------
 t/plugin/uri-blocker.t        |  4 +--
 2 files changed, 61 insertions(+), 27 deletions(-)

diff --git a/ci/linux-install-openresty.sh b/ci/linux-install-openresty.sh
index 1279cc1bc..d94adbc4b 100755
--- a/ci/linux-install-openresty.sh
+++ b/ci/linux-install-openresty.sh
@@ -22,38 +22,72 @@ source ./ci/common.sh
 export_version_info
 
 ARCH=${ARCH:-`(uname -m | tr '[:upper:]' '[:lower:]')`}
-arch_path=""
-if [[ $ARCH == "arm64" ]] || [[ $ARCH == "aarch64" ]]; then
-    arch_path="arm64/"
-fi
-
-wget -qO - https://openresty.org/package/pubkey.gpg | sudo apt-key add -
-wget -qO - http://repos.apiseven.com/pubkey.gpg | sudo apt-key add -
-sudo apt-get -y update --fix-missing
-sudo apt-get -y install software-properties-common
-sudo add-apt-repository -y "deb 
https://openresty.org/package/${arch_path}ubuntu $(lsb_release -sc) main"
-sudo add-apt-repository -y "deb 
http://repos.apiseven.com/packages/${arch_path}debian bullseye main"
-
-sudo apt-get update
-sudo apt-get install -y openresty-pcre-dev openresty-zlib-dev build-essential 
gcc g++ cpanminus
 
 SSL_LIB_VERSION=${SSL_LIB_VERSION-openssl}
 ENABLE_FIPS=${ENABLE_FIPS:-"false"}
 
-if [ "$SSL_LIB_VERSION" == "tongsuo" ]; then
-    export openssl_prefix=/usr/local/tongsuo
-    export zlib_prefix=$OPENRESTY_PREFIX/zlib
-    export pcre_prefix=$OPENRESTY_PREFIX/pcre
+if [ "$SSL_LIB_VERSION" == "tongsuo" ] || [ "$ENABLE_FIPS" == "true" ]; then
+    arch_path=""
+    if [[ $ARCH == "arm64" ]] || [[ $ARCH == "aarch64" ]]; then
+        arch_path="arm64/"
+    fi
 
-    export cc_opt="-DNGX_LUA_ABORT_AT_PANIC -I${zlib_prefix}/include 
-I${pcre_prefix}/include -I${openssl_prefix}/include"
-    export ld_opt="-L${zlib_prefix}/lib -L${pcre_prefix}/lib 
-L${openssl_prefix}/lib64 
-Wl,-rpath,${zlib_prefix}/lib:${pcre_prefix}/lib:${openssl_prefix}/lib64"
-fi
+    wget -qO - https://openresty.org/package/pubkey.gpg | sudo apt-key add -
+    wget -qO - http://repos.apiseven.com/pubkey.gpg | sudo apt-key add -
+    sudo apt-get -y update --fix-missing
+    sudo apt-get -y install software-properties-common
+    sudo add-apt-repository -y "deb 
https://openresty.org/package/${arch_path}ubuntu $(lsb_release -sc) main"
+    sudo add-apt-repository -y "deb 
http://repos.apiseven.com/packages/${arch_path}debian bullseye main"
+
+    sudo apt-get update
+    sudo apt-get install -y openresty-pcre-dev openresty-zlib-dev 
build-essential gcc g++ cpanminus
+
+    if [ "$SSL_LIB_VERSION" == "tongsuo" ]; then
+        export openssl_prefix=/usr/local/tongsuo
+        export zlib_prefix=$OPENRESTY_PREFIX/zlib
+        export pcre_prefix=$OPENRESTY_PREFIX/pcre
+
+        export cc_opt="-DNGX_LUA_ABORT_AT_PANIC -I${zlib_prefix}/include 
-I${pcre_prefix}/include -I${openssl_prefix}/include"
+        export ld_opt="-L${zlib_prefix}/lib -L${pcre_prefix}/lib 
-L${openssl_prefix}/lib64 
-Wl,-rpath,${zlib_prefix}/lib:${pcre_prefix}/lib:${openssl_prefix}/lib64"
+    fi
+
+    install_apisix_runtime
+
+    if [ ! "$ENABLE_FIPS" == "true" ]; then
+        curl -o /usr/local/openresty/openssl3/ssl/openssl.cnf \
+            
https://raw.githubusercontent.com/api7/apisix-build-tools/apisix-runtime/${APISIX_RUNTIME}/conf/openssl3/openssl.cnf
+    fi
+else
+    sudo apt-get -y update --fix-missing
+    sudo apt-get install -y build-essential gcc g++ cpanminus
+
+    if [ "$APISIX_RUNTIME" != "1.3.6" ]; then
+        echo "Please update the apisix-runtime-debug checksum for 
APISIX_RUNTIME=$APISIX_RUNTIME" >&2
+        exit 1
+    fi
+
+    case "$ARCH" in
+        x86_64|amd64)
+            DEB_ARCH="amd64"
+            
EXPECTED_SHA256="f3c3836270e4d71c7154bea3dd13005cacad5b489eacf9fab7b048907fa4d641"
+            ;;
+        arm64|aarch64)
+            DEB_ARCH="arm64"
+            
EXPECTED_SHA256="6f5ba1e4dee34f9c2593687b3e97dad53cbc1f2b90283961fd87eba62e4c9bc4"
+            ;;
+        *)
+            echo "Unsupported architecture: $ARCH" >&2
+            exit 1
+            ;;
+    esac
 
-install_apisix_runtime
+    
DEB_NAME="apisix-runtime-debug_${APISIX_RUNTIME}-0.debianbookworm-slim_${DEB_ARCH}.deb"
+    
RELEASE_URL="https://github.com/api7/apisix-build-tools/releases/download/apisix-runtime%2F${APISIX_RUNTIME}/${DEB_NAME}";
 
-if [ ! "$ENABLE_FIPS" == "true" ]; then
-curl -o /usr/local/openresty/openssl3/ssl/openssl.cnf \
-    
https://raw.githubusercontent.com/api7/apisix-build-tools/apisix-runtime/${APISIX_RUNTIME}/conf/openssl3/openssl.cnf
+    wget --no-verbose --tries=3 --retry-connrefused "$RELEASE_URL" -O 
"/tmp/$DEB_NAME"
+    echo "$EXPECTED_SHA256  /tmp/$DEB_NAME" | sha256sum -c -
+    sudo apt-get install -y "/tmp/$DEB_NAME"
+    rm -f "/tmp/$DEB_NAME"
 fi
 
 # patch lua-resty-events
diff --git a/t/plugin/uri-blocker.t b/t/plugin/uri-blocker.t
index 0187fe31c..616f3e842 100644
--- a/t/plugin/uri-blocker.t
+++ b/t/plugin/uri-blocker.t
@@ -51,7 +51,7 @@ location /t {
 GET /t
 --- error_code: 400
 --- response_body
-{"error_msg":"failed to check the configuration of plugin uri-blocker err: 
pcre2_compile() failed: missing closing parenthesis in \".+(\""}
+{"error_msg":"failed to check the configuration of plugin uri-blocker err: 
pcre_compile() failed: missing ) in \".+(\""}
 
 
 
@@ -112,7 +112,7 @@ location /t {
 GET /t
 --- error_code: 400
 --- response_body
-{"error_msg":"failed to check the configuration of plugin uri-blocker err: 
pcre2_compile() failed: missing closing parenthesis in \"^b(\""}
+{"error_msg":"failed to check the configuration of plugin uri-blocker err: 
pcre_compile() failed: missing ) in \"^b(\""}
 
 
 

Reply via email to