Skip to content

ci: fix Windows curl llvm download failure#2089

Merged
lgritz merged 1 commit intoAcademySoftwareFoundation:mainfrom
lgritz:lg-winllvm2
Mar 6, 2026
Merged

ci: fix Windows curl llvm download failure#2089
lgritz merged 1 commit intoAcademySoftwareFoundation:mainfrom
lgritz:lg-winllvm2

Conversation

@lgritz
Copy link
Collaborator

@lgritz lgritz commented Mar 5, 2026

For a few days now, the Windows CI variants have been almost always failing due to unexplained inability to curl download the pre-built LLVM that we stashed on a Google drive, which has worked flawlessly for over a year.

J.F. Panisset suggested on Slack:

Could be a wild goose chase, but a direction to look in with your
Windows / curl issue would be SSL certificate verification. Windows
uses some kind of magic process to update its store of recognized CA
root certs, but since a Windows runner is a "fresh" Windows VM every
time, it could be that it is missing an updated cert required to
verify the https URL you are downloading from (assuming that's using
a cert anchored to a root CA not in that base Windows image). I've
seen issues like that on Windows systems with limited Internet
access. If you try curl --insecure to (temporarily) bypass
certificate verification, are you able to download what you need?

And sure enough, adding --insecure clears it right up.

For a few days now, the Windows CI variants have been almost always
failing due to unexplained inability to curl download the pre-built
LLVM that we stashed on a Google drive, which has worked flawlessly
for over a year.

J.F. Panisset suggested:

> Could be a wild goose chase, but a direction to look in with your
> Windows / curl issue would be SSL certificate verification. Windows
> uses some kind of magic process to update its store of recognized CA
> root certs, but since a Windows runner is a "fresh" Windows VM every
> time, it could be that it is missing an updated cert required to
> verify the https URL you are downloading from (assuming that's using
> a cert anchored to a root CA not in that base WIndows image). I've
> seen issues like that on Windows systems with limited Internet
> access. If you try curl --insecure to (temporarily) bypass
> certificate verification, are you able to download what you need?

And sure enough, adding --insecure clears it right up.

Signed-off-by: Larry Gritz <lg@larrygritz.com>
@lgritz lgritz requested a review from jfpanisset March 5, 2026 21:44
@lgritz
Copy link
Collaborator Author

lgritz commented Mar 6, 2026

Merging to fix broken CI

@lgritz lgritz merged commit 14840fd into AcademySoftwareFoundation:main Mar 6, 2026
50 of 52 checks passed
@lgritz lgritz deleted the lg-winllvm2 branch March 6, 2026 00:24
@jfpanisset
Copy link
Contributor

Sorry didn't see this in time for an approval, but yes, that's a good workaround for now.

lgritz added a commit to lgritz/OpenShadingLanguage that referenced this pull request Mar 6, 2026
…#2089)

For a few days now, the Windows CI variants have been almost always
failing due to unexplained inability to curl download the pre-built
LLVM that we stashed on a Google drive, which has worked flawlessly
for over a year.

J.F. Panisset suggested:

> Could be a wild goose chase, but a direction to look in with your
> Windows / curl issue would be SSL certificate verification. Windows
> uses some kind of magic process to update its store of recognized CA
> root certs, but since a Windows runner is a "fresh" Windows VM every
> time, it could be that it is missing an updated cert required to
> verify the https URL you are downloading from (assuming that's using
> a cert anchored to a root CA not in that base WIndows image). I've
> seen issues like that on Windows systems with limited Internet
> access. If you try curl --insecure to (temporarily) bypass
> certificate verification, are you able to download what you need?

And sure enough, adding --insecure clears it right up.

Signed-off-by: Larry Gritz <lg@larrygritz.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants