rm gcp.json and verify runner sha

google · May 6, 2024 · c35fc7c · c35fc7c
1 parent 882b258
commit c35fc7c
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml
@@ -16,6 +16,10 @@ jobs:
         run: |
           export GOOGLE_APPLICATION_CREDENTIALS=/tmp/gcp.json
           echo "${GCS_KEY}" > ${GOOGLE_APPLICATION_CREDENTIALS}
+          function cleanup {
+            rm /tmp/gcp.json
+          }
+          trap cleanup EXIT
           python3 Testing/integration/actions/update_vm.py macOS_14.bundle.tar.gz
 
   start_vm:

diff --git a/Testing/integration/actions/start_vm.py b/Testing/integration/actions/start_vm.py
@@ -70,7 +70,10 @@
     # And populate startup script with runner and JIT key
     with open(init_dmg_mount / "run.sh", "w") as run_sh:
       run_sh.write(f"""#!/bin/sh
+set -xeuo pipefail
+
 curl -L -o /tmp/runner.tar.gz 'https://github.com/actions/runner/releases/download/v2.316.0/actions-runner-osx-arm64-2.316.0.tar.gz'
+echo "8442d39e3d91b67807703ec0825cec4384837b583305ea43a495a9867b7222ca  /tmp/runner.tar.gz" | shasum -a 256 -c -
 mkdir /tmp/runner
 cd /tmp/runner
 tar -xzf /tmp/runner.tar.gz