Harden Terraform install in CI with GitHub fallback

.gitea/workflows/terraform-dev.yml

@@ -35,11 +35,23 @@ jobs:
 
       - name: Install Terraform
         run: |
+          set -euo pipefail
           apt-get update
-          apt-get install -y wget unzip
-          wget -qO /tmp/terraform.zip https://releases.hashicorp.com/terraform/1.9.5/terraform_1.9.5_linux_amd64.zip
+          apt-get install -y wget unzip ca-certificates
+          rm -f /tmp/terraform.zip
+          for URL in \
+            "https://github.com/hashicorp/terraform/releases/download/v1.9.5/terraform_1.9.5_linux_amd64.zip" \
+            "https://releases.hashicorp.com/terraform/1.9.5/terraform_1.9.5_linux_amd64.zip"
+          do
+            echo "Trying: $URL"
+            if wget -qO /tmp/terraform.zip "$URL"; then
+              break
+            fi
+          done
+          test -s /tmp/terraform.zip
           unzip -o /tmp/terraform.zip -d /tmp
           install -m 0755 /tmp/terraform /usr/local/bin/terraform
+          terraform version
 
       - name: Terraform version
         run: terraform version
@@ -70,11 +82,23 @@ jobs:
 
       - name: Install Terraform
         run: |
+          set -euo pipefail
           apt-get update
-          apt-get install -y wget unzip
-          wget -qO /tmp/terraform.zip https://releases.hashicorp.com/terraform/1.9.5/terraform_1.9.5_linux_amd64.zip
+          apt-get install -y wget unzip ca-certificates
+          rm -f /tmp/terraform.zip
+          for URL in \
+            "https://github.com/hashicorp/terraform/releases/download/v1.9.5/terraform_1.9.5_linux_amd64.zip" \
+            "https://releases.hashicorp.com/terraform/1.9.5/terraform_1.9.5_linux_amd64.zip"
+          do
+            echo "Trying: $URL"
+            if wget -qO /tmp/terraform.zip "$URL"; then
+              break
+            fi
+          done
+          test -s /tmp/terraform.zip
           unzip -o /tmp/terraform.zip -d /tmp
           install -m 0755 /tmp/terraform /usr/local/bin/terraform
+          terraform version
 
       - name: Terraform init (no backend)
         working-directory: ${{ env.WORKDIR }}
@@ -100,11 +124,23 @@ jobs:
 
       - name: Install Terraform
         run: |
+          set -euo pipefail
           apt-get update
-          apt-get install -y wget unzip
-          wget -qO /tmp/terraform.zip https://releases.hashicorp.com/terraform/1.9.5/terraform_1.9.5_linux_amd64.zip
+          apt-get install -y wget unzip ca-certificates
+          rm -f /tmp/terraform.zip
+          for URL in \
+            "https://github.com/hashicorp/terraform/releases/download/v1.9.5/terraform_1.9.5_linux_amd64.zip" \
+            "https://releases.hashicorp.com/terraform/1.9.5/terraform_1.9.5_linux_amd64.zip"
+          do
+            echo "Trying: $URL"
+            if wget -qO /tmp/terraform.zip "$URL"; then
+              break
+            fi
+          done
+          test -s /tmp/terraform.zip
           unzip -o /tmp/terraform.zip -d /tmp
           install -m 0755 /tmp/terraform /usr/local/bin/terraform
+          terraform version
 
       - name: Terraform init (no backend)
         working-directory: ${{ env.WORKDIR }}