Re: Updating IPC::Run in CI?

Hi,

On 2025-10-31 14:40:41 -0700, Jacob Champion wrote:
> On Mon, Sep 22, 2025 at 3:35 PM Jacob Champion
> <jacob(dot)champion(at)enterprisedb(dot)com> wrote:
> > On Mon, Sep 22, 2025 at 1:27 PM Andres Freund <andres(at)anarazel(dot)de> wrote:
> > > I think your position has merit. However, I'd like to have at least one of the
> > > tasks continue to use the non-built-in IPC::Run.
> > >
> > > I'll review patches installing a newer IPC::Run.
> >
> > I will work on that, then. Thanks both!
>
> I got stuck on this a few weeks back and had to put it down. Of all
> things, I couldn't figure out how to download a Perl module in a
> secure manner across _all_ of our supported platforms. I tried to get
> --verify mode working with cpanm and found that it would simply
> continue downloading and running code without verification if the
> prerequisites weren't installed. (I am now reevaluating my own
> personal use of cpanm.) The state of the world there looks horrifying
> [1, 2].

Yuck.

> (CPAN itself appears to _require_ interactive use at first
> run, making it very difficult to use in a CI...)

I think I had to figure this out in the past <dig>, ah, yea:
https://github.com/anarazel/pg-vm-images/blob/8ac88f59e368f35a63d3a0635ee7baf3436d5ee3/scripts/windows_install_mingw64.ps1#L25-L27

msys '(echo; echo o conf recommends_policy 0; echo notest install IPC::Run) | cpan'

Greetings,

Andres Freund