ci(rock): fix goss download for goss >= v0.4.10 asset layout

[deusebio]

Problem

rock-pull-request.yaml installs goss via:

goss_base_url="https://github.com/goss-org/goss/releases/latest/download"
curl -L ${goss_base_url}/goss-linux-$(dpkg --print-architecture) -o /usr/local/bin/goss

goss latest is now v0.4.10, which removed the raw goss-linux-<arch> assets and now ships per-arch tarballs (e.g. goss_0.4.10_linux_x86_64.tar.gz). So releases/latest/download/goss-linux-amd64 returns 404, curl -L writes GitHub's "Not Found" page into /usr/local/bin/goss, and kgoss then copies that text file into the test pod. Running it fails with:

/tmp/goss/goss: 1: Not: not found
command terminated with exit code 127
[ERROR]: goss_wait.yaml never passed

This breaks the Tests job for every rock repo consuming this reusable workflow at @v1.

Fix

Pin goss to v0.4.10, download the per-arch tarball, and extract the goss binary, mapping dpkg arch to goss's naming (amd64 → x86_64, arm64 → arm64). kgoss is still a standalone asset, so its download is pinned to the same release.

goss_version="v0.4.10"
goss_base_url="https://github.com/goss-org/goss/releases/download/${goss_version}"
case "$(dpkg --print-architecture)" in
  amd64) goss_arch="x86_64" ;;
  arm64) goss_arch="arm64" ;;
  *) echo "unsupported architecture: $(dpkg --print-architecture)" >&2; exit 1 ;;
esac
curl -sSfL "${goss_base_url}/goss_${goss_version#v}_linux_${goss_arch}.tar.gz" | tar -xz -C /usr/local/bin goss
chmod +rx /usr/local/bin/goss
curl -sSfL "${goss_base_url}/kgoss" -o /usr/local/bin/kgoss
chmod +rx /usr/local/bin/kgoss

Verified the pinned URLs return 200 for both amd64 (x86_64) and arm64, and that a full goss suite runs correctly with the extracted v0.4.10 binary.

Related

• Surfaced by Run NiFi 2.10 workload as non-root user _daemon_ (uid/gid 584792) nifi-rocks#3 (non-root NiFi rock), whose goss suite passes locally but was blocked by this download failure in CI.

[lucabello]

Sorry, didn't see this PR :)

Already implemented for v1 at 30382d7

Closing!