From 11551de5fa245323798f4ff40a322a5d003421ec Mon Sep 17 00:00:00 2001 From: Jeffrey Cafferata Date: Sun, 29 May 2016 22:15:56 +0200 Subject: Changed composer installer script in the CI PHP example doc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The script will check some php.ini settings warn you if they are set incorrectly, and then download the latest composer.phar in the current directory. These lines will, in order: - Download the installer SHA-384 to the current directory - Download the installer to the current directory - Verify the installer SHA-384 which you can also cross-check https://composer.github.io/pubkeys.html - Run the installer - Remove the installer & the installer SHA-384 Signed-off-by: Rémy Coutable --- doc/ci/examples/php.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) (limited to 'doc/ci/examples/php.md') diff --git a/doc/ci/examples/php.md b/doc/ci/examples/php.md index 82ffb841729..5eeec92d976 100644 --- a/doc/ci/examples/php.md +++ b/doc/ci/examples/php.md @@ -235,7 +235,11 @@ cache: before_script: # Install composer dependencies -- curl --silent --show-error https://getcomposer.org/installer | php +- wget https://composer.github.io/installer.sig -O - -q | tr -d '\n' > installer.sig +- php -r "copy('https://getcomposer.org/installer', 'composer-setup.php');" +- php -r "if (hash_file('SHA384', 'composer-setup.php') === file_get_contents('installer.sig')) { echo 'Installer verified'; } else { echo 'Installer corrupt'; unlink('composer-setup.php'); } echo PHP_EOL;" +- php composer-setup.php +- php -r "unlink('composer-setup.php'); unlink('installer.sig');" - php composer.phar install ... -- cgit v1.2.1