fix: always retry curl invocations to surmount transient third-party failures

gaultier · ory-bot · commit c28a6c82fc2e · 2025-11-20T08:18:50.000Z
GitOrigin-RevId: b23ca94a4e1ba11367012a70a9e528b614f3ceb9
diff --git a/install.sh b/install.sh
@@ -271,9 +271,9 @@ http_download_curl() {
   source_url=$2
   header=$3
   if [ -z "$header" ]; then
-    code=$(curl -w '%{http_code}' -sL -o "$local_file" "$source_url")
+    code=$(curl --retry 7 --retry-connrefused -w '%{http_code}' -sL -o "$local_file" "$source_url")
   else
-    code=$(curl -w '%{http_code}' -sL -H "$header" -o "$local_file" "$source_url")
+    code=$(curl --retry 7 --retry-connrefused -w '%{http_code}' -sL -H "$header" -o "$local_file" "$source_url")
   fi
   if [ "$code" != "200" ]; then
     log_debug "http_download_curl received HTTP status $code"
diff --git a/internal/certification/scripts/install.sh b/internal/certification/scripts/install.sh
@@ -20,7 +20,7 @@ mkdir -p go/bin
 source "$HOME"/.profile
 
 # go/dep
-curl https://raw.githubusercontent.com/golang/dep/master/install.sh | sh
+curl --retry 7 --retry-connrefused https://raw.githubusercontent.com/golang/dep/master/install.sh | sh
 
 # Docker
 sudo apt-get update
@@ -30,7 +30,7 @@ sudo apt-get -y install \
      curl \
      gnupg2 \
      software-properties-common
-curl -fsSL https://download.docker.com/linux/debian/gpg | sudo apt-key add -
+curl --retry 7 --retry-connrefused -fsSL https://download.docker.com/linux/debian/gpg | sudo apt-key add -
 sudo add-apt-repository \
    "deb [arch=amd64] https://download.docker.com/linux/debian \
    $(lsb_release -cs) \
diff --git a/internal/certification/scripts/start.sh b/internal/certification/scripts/start.sh
@@ -12,12 +12,13 @@ docker start kong
 
 dockerize -wait http://localhost:8001/ -timeout 30s
 
-ip=$(curl ifconfig.co)
+ip=$(curl --retry 7 --retry-connrefused ifconfig.co)
 
-curl -i -X DELETE --url http://localhost:8001/apis/hydra-oauth
-curl -i -X DELETE --url http://localhost:8001/apis/login-consent
+curl --retry 7 --retry-connrefused -i -X DELETE --url http://localhost:8001/apis/hydra-oauth
+curl --retry 7 --retry-connrefused -i -X DELETE --url http://localhost:8001/apis/login-consent
 
 curl -i -X POST \
+  --retry 7 --retry-connrefused \
   --url http://localhost:8001/apis/ \
   --data 'name=hydra-oauth' \
   --data upstream_url=http://"${ip}":9000/ \
@@ -26,6 +27,7 @@ curl -i -X POST \
   --data 'preserve_host=true'
 
 curl -i -X POST \
+  --retry 7 --retry-connrefused \
   --url http://localhost:8001/apis/ \
   --data 'name=login-consent' \
   --data upstream_url=http://"$ip":9001/ \
