fix: install ca-certificates before downloading

packages/setup-apt/src/apt-key.ts

@@ -3,6 +3,7 @@ import { execRoot, execRootSync } from "admina"
 import { warning } from "ci-log"
 import { DownloaderHelper } from "node-downloader-helper"
 import { pathExists } from "path-exists"
+import { installAptPack } from "./install.js"
 
 function initGpg() {
   execRootSync("gpg", ["-k"])
@@ -54,6 +55,7 @@ export async function addAptKeyViaDownload(name: string, url: string) {
   if (!(await pathExists(fileName))) {
     initGpg()
 
+    await installAptPack([{ name: "ca-certificates" }])
     const dl = new DownloaderHelper(url, tmpdir(), { fileName: name })
     dl.on("error", (err) => {
       throw new Error(`Failed to download ${url}: ${err}`)

src/brew/brew.ts

@@ -3,6 +3,7 @@ import { addPath } from "envosman"
 import { execaSync } from "execa"
 import { DownloaderHelper } from "node-downloader-helper"
 import { dirname } from "patha"
+import { installAptPack } from "setup-apt"
 import which from "which"
 import { rcOptions } from "../cli-options.js"
 
@@ -29,6 +30,7 @@ export async function setupBrew(_version: string, _setupDir: string, _arch: stri
   }
 
   // download the installation script
+  await installAptPack([{ name: "ca-certificates" }])
   const dl = new DownloaderHelper("https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh", tmpdir(), {
     fileName: "install-brew.sh",
   })

src/llvm/llvm_installer.ts

@@ -24,6 +24,7 @@ export async function setupLLVMApt(
   const installationFolder = `/usr/lib/llvm-${majorVersion}`
 
   // download the installation script
+  await installAptPack([{ name: "ca-certificates" }])
   const dl = new DownloaderHelper("https://apt.llvm.org/llvm.sh", tmpdir(), { fileName: "llvm.sh" })
   dl.on("error", (err) => {
     throw new Error(`Failed to download the LLVM installer script: ${err}`)