ambiser
/
openvidu
mirror of https://github.com/OpenVidu/openvidu.git
9
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

openvidu-deployment: download the install scripts over HTTPS 

get.openvidu.io is served over HTTPS since 2026-10-23 (a CloudFront
distribution with a certificate for the name, in front of the same
bucket); HTTP keeps working unchanged. The twelve cloud templates, the
four compiled Azure templates and update.sh's base URL switch to https://,
so a node no longer fetches the script it runs as root over plain HTTP.


Assisted-by: claude-code - Anthropic - Claude Fable 5.1
pull/918/head
cruizba 2026-10-23 14:57:54 +02:00
parent f016d57f23
commit ba6db418fa
17 changed files with 25 additions and 25 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
openvidu-deployment/community/singlenode/aws/cf-openvidu-singlenode.yaml
View File

@ -741,7 +741,7 @@ Resources:
LIVEKIT_API_SECRET="$(/usr/local/bin/store_secret.sh generate LIVEKIT_API_SECRET)" LIVEKIT_API_SECRET="$(/usr/local/bin/store_secret.sh generate LIVEKIT_API_SECRET)"
# Base command # Base command
INSTALL_COMMAND="sh <(curl -fsSL http://get.openvidu.io/community/singlenode/$OPENVIDU_VERSION/install.sh)" INSTALL_COMMAND="sh <(curl -fsSL https://get.openvidu.io/community/singlenode/$OPENVIDU_VERSION/install.sh)"
# Common arguments # Common arguments
COMMON_ARGS=( COMMON_ARGS=(

2
openvidu-deployment/community/singlenode/azure/cf-openvidu-singlenode.bicep
View File

@ -222,7 +222,7 @@ LIVEKIT_API_SECRET="$(/usr/local/bin/store_secret.sh generate LIVEKIT-API-SECRET
ENABLED_MODULES="$(/usr/local/bin/store_secret.sh save ENABLED-MODULES "observability,openviduMeet")" ENABLED_MODULES="$(/usr/local/bin/store_secret.sh save ENABLED-MODULES "observability,openviduMeet")"
# Base command # Base command
INSTALL_COMMAND="sh <(curl -fsSL http://get.openvidu.io/community/singlenode/$OPENVIDU_VERSION/install.sh)" INSTALL_COMMAND="sh <(curl -fsSL https://get.openvidu.io/community/singlenode/$OPENVIDU_VERSION/install.sh)"
# Common arguments # Common arguments
COMMON_ARGS=( COMMON_ARGS=(

2
openvidu-deployment/community/singlenode/azure/cf-openvidu-singlenode.json
View File

File diff suppressed because one or more lines are too long

2
openvidu-deployment/community/singlenode/gcp/tf-gpc-openvidu-singlenode.tf
View File

@ -216,7 +216,7 @@ LIVEKIT_API_KEY="$(/usr/local/bin/store_secret.sh generate LIVEKIT_API_KEY "API"
LIVEKIT_API_SECRET="$(/usr/local/bin/store_secret.sh generate LIVEKIT_API_SECRET)" LIVEKIT_API_SECRET="$(/usr/local/bin/store_secret.sh generate LIVEKIT_API_SECRET)"
# Build install command and args # Build install command and args
INSTALL_COMMAND="sh <(curl -fsSL http://get.openvidu.io/community/singlenode/$OPENVIDU_VERSION/install.sh)" INSTALL_COMMAND="sh <(curl -fsSL https://get.openvidu.io/community/singlenode/$OPENVIDU_VERSION/install.sh)"
# Common arguments # Common arguments
COMMON_ARGS=( COMMON_ARGS=(

4
openvidu-deployment/pro/elastic/aws/cf-openvidu-elastic.yaml
View File

@ -1576,7 +1576,7 @@ Resources:
# Download first: sh <(curl ...) would silently run an empty script on a transient curl failure # Download first: sh <(curl ...) would silently run an empty script on a transient curl failure
INSTALLER_SCRIPT="/tmp/install_ov_master_node.sh" INSTALLER_SCRIPT="/tmp/install_ov_master_node.sh"
curl -fsSL --retry 8 --retry-all-errors --retry-delay 5 -o "$INSTALLER_SCRIPT" "http://get.openvidu.io/pro/elastic/$OPENVIDU_VERSION/install_ov_master_node.sh" curl -fsSL --retry 8 --retry-all-errors --retry-delay 5 -o "$INSTALLER_SCRIPT" "https://get.openvidu.io/pro/elastic/$OPENVIDU_VERSION/install_ov_master_node.sh"
if [ ! -s "$INSTALLER_SCRIPT" ]; then if [ ! -s "$INSTALLER_SCRIPT" ]; then
echo "Downloaded OpenVidu master node installer is empty or missing" >&2 echo "Downloaded OpenVidu master node installer is empty or missing" >&2
exit 1 exit 1
@ -2129,7 +2129,7 @@ Resources:
# Download first: sh <(curl ...) would silently run an empty script on a transient curl failure # Download first: sh <(curl ...) would silently run an empty script on a transient curl failure
INSTALLER_SCRIPT="/tmp/install_ov_media_node.sh" INSTALLER_SCRIPT="/tmp/install_ov_media_node.sh"
curl -fsSL --retry 8 --retry-all-errors --retry-delay 5 -o "$INSTALLER_SCRIPT" "http://get.openvidu.io/pro/elastic/$OPENVIDU_VERSION/install_ov_media_node.sh" curl -fsSL --retry 8 --retry-all-errors --retry-delay 5 -o "$INSTALLER_SCRIPT" "https://get.openvidu.io/pro/elastic/$OPENVIDU_VERSION/install_ov_media_node.sh"
if [ ! -s "$INSTALLER_SCRIPT" ]; then if [ ! -s "$INSTALLER_SCRIPT" ]; then
echo "Downloaded OpenVidu media node installer is empty or missing" >&2 echo "Downloaded OpenVidu media node installer is empty or missing" >&2
exit 1 exit 1

4
openvidu-deployment/pro/elastic/azure/cf-openvidu-elastic.bicep
View File

@ -309,7 +309,7 @@ ALL_SECRETS_GENERATED="$(/usr/local/bin/store_secret.sh save ALL-SECRETS-GENERAT
# Download to a file first: process substitution would silently run an empty script on a transient curl failure # Download to a file first: process substitution would silently run an empty script on a transient curl failure
INSTALLER_SCRIPT="/tmp/install_ov_master_node.sh" INSTALLER_SCRIPT="/tmp/install_ov_master_node.sh"
curl -fsSL --retry 8 --retry-all-errors --retry-delay 5 -o "$INSTALLER_SCRIPT" "http://get.openvidu.io/pro/elastic/$OPENVIDU_VERSION/install_ov_master_node.sh" curl -fsSL --retry 8 --retry-all-errors --retry-delay 5 -o "$INSTALLER_SCRIPT" "https://get.openvidu.io/pro/elastic/$OPENVIDU_VERSION/install_ov_master_node.sh"
if [ ! -s "$INSTALLER_SCRIPT" ]; then if [ ! -s "$INSTALLER_SCRIPT" ]; then
echo "[OpenVidu] failed to download the master node installer script" echo "[OpenVidu] failed to download the master node installer script"
exit 1 exit 1
@ -963,7 +963,7 @@ MASTER_NODE_IP=${privateIPMasterNode}
# Download to a file first: process substitution would silently run an empty script on a transient curl failure # Download to a file first: process substitution would silently run an empty script on a transient curl failure
INSTALLER_SCRIPT="/tmp/install_ov_media_node.sh" INSTALLER_SCRIPT="/tmp/install_ov_media_node.sh"
curl -fsSL --retry 8 --retry-all-errors --retry-delay 5 -o "$INSTALLER_SCRIPT" "http://get.openvidu.io/pro/elastic/$OPENVIDU_VERSION/install_ov_media_node.sh" curl -fsSL --retry 8 --retry-all-errors --retry-delay 5 -o "$INSTALLER_SCRIPT" "https://get.openvidu.io/pro/elastic/$OPENVIDU_VERSION/install_ov_media_node.sh"
if [ ! -s "$INSTALLER_SCRIPT" ]; then if [ ! -s "$INSTALLER_SCRIPT" ]; then
echo "[OpenVidu] failed to download the media node installer script" echo "[OpenVidu] failed to download the media node installer script"
exit 1 exit 1

4
openvidu-deployment/pro/elastic/azure/cf-openvidu-elastic.json
View File

File diff suppressed because one or more lines are too long

4
openvidu-deployment/pro/elastic/gcp/tf-gpc-openvidu-elastic.tf
View File

@ -750,7 +750,7 @@ ALL_SECRETS_GENERATED="$(/usr/local/bin/store_secret.sh save ALL_SECRETS_GENERAT
# Download first: sh <(curl ...) would silently run an empty script on a transient curl failure # Download first: sh <(curl ...) would silently run an empty script on a transient curl failure
INSTALLER_SCRIPT="/tmp/install_ov_master_node.sh" INSTALLER_SCRIPT="/tmp/install_ov_master_node.sh"
curl -fsSL --retry 8 --retry-all-errors --retry-delay 5 -o "$INSTALLER_SCRIPT" "http://get.openvidu.io/pro/elastic/$OPENVIDU_VERSION/install_ov_master_node.sh" curl -fsSL --retry 8 --retry-all-errors --retry-delay 5 -o "$INSTALLER_SCRIPT" "https://get.openvidu.io/pro/elastic/$OPENVIDU_VERSION/install_ov_master_node.sh"
if [ ! -s "$INSTALLER_SCRIPT" ]; then if [ ! -s "$INSTALLER_SCRIPT" ]; then
echo "Downloaded OpenVidu master node installer is empty or missing" >&2 echo "Downloaded OpenVidu master node installer is empty or missing" >&2
exit 1 exit 1
@ -1297,7 +1297,7 @@ fi
# Download first: sh <(curl ...) would silently run an empty script on a transient curl failure # Download first: sh <(curl ...) would silently run an empty script on a transient curl failure
INSTALLER_SCRIPT="/tmp/install_ov_media_node.sh" INSTALLER_SCRIPT="/tmp/install_ov_media_node.sh"
curl -fsSL --retry 8 --retry-all-errors --retry-delay 5 -o "$INSTALLER_SCRIPT" "http://get.openvidu.io/pro/elastic/$OPENVIDU_VERSION/install_ov_media_node.sh" curl -fsSL --retry 8 --retry-all-errors --retry-delay 5 -o "$INSTALLER_SCRIPT" "https://get.openvidu.io/pro/elastic/$OPENVIDU_VERSION/install_ov_media_node.sh"
if [ ! -s "$INSTALLER_SCRIPT" ]; then if [ ! -s "$INSTALLER_SCRIPT" ]; then
echo "Downloaded OpenVidu media node installer is empty or missing" >&2 echo "Downloaded OpenVidu media node installer is empty or missing" >&2
exit 1 exit 1

4
openvidu-deployment/pro/ha/aws/cf-openvidu-ha.yaml
View File

@ -1867,7 +1867,7 @@ Resources:
# Download first: sh <(curl ...) would silently run an empty script on a transient curl failure # Download first: sh <(curl ...) would silently run an empty script on a transient curl failure
INSTALLER_SCRIPT="/tmp/install_ov_master_node.sh" INSTALLER_SCRIPT="/tmp/install_ov_master_node.sh"
curl -fsSL --retry 8 --retry-all-errors --retry-delay 5 -o "$INSTALLER_SCRIPT" "http://get.openvidu.io/pro/ha/$OPENVIDU_VERSION/install_ov_master_node.sh" curl -fsSL --retry 8 --retry-all-errors --retry-delay 5 -o "$INSTALLER_SCRIPT" "https://get.openvidu.io/pro/ha/$OPENVIDU_VERSION/install_ov_master_node.sh"
if [ ! -s "$INSTALLER_SCRIPT" ]; then if [ ! -s "$INSTALLER_SCRIPT" ]; then
echo "Downloaded OpenVidu master node installer is empty or missing" >&2 echo "Downloaded OpenVidu master node installer is empty or missing" >&2
exit 1 exit 1
@ -2785,7 +2785,7 @@ Resources:
# Download first: sh <(curl ...) would silently run an empty script on a transient curl failure # Download first: sh <(curl ...) would silently run an empty script on a transient curl failure
INSTALLER_SCRIPT="/tmp/install_ov_media_node.sh" INSTALLER_SCRIPT="/tmp/install_ov_media_node.sh"
curl -fsSL --retry 8 --retry-all-errors --retry-delay 5 -o "$INSTALLER_SCRIPT" "http://get.openvidu.io/pro/ha/$OPENVIDU_VERSION/install_ov_media_node.sh" curl -fsSL --retry 8 --retry-all-errors --retry-delay 5 -o "$INSTALLER_SCRIPT" "https://get.openvidu.io/pro/ha/$OPENVIDU_VERSION/install_ov_media_node.sh"
if [ ! -s "$INSTALLER_SCRIPT" ]; then if [ ! -s "$INSTALLER_SCRIPT" ]; then
echo "Downloaded OpenVidu media node installer is empty or missing" >&2 echo "Downloaded OpenVidu media node installer is empty or missing" >&2
exit 1 exit 1

4
openvidu-deployment/pro/ha/azure/cf-openvidu-ha.bicep
View File

@ -465,7 +465,7 @@ ENABLED_MODULES=$(az keyvault secret show --vault-name ${keyVaultName} --name EN
# Download first: sh <(curl ...) would silently run an empty script on a transient curl failure # Download first: sh <(curl ...) would silently run an empty script on a transient curl failure
INSTALLER_SCRIPT="/tmp/install_ov_master_node.sh" INSTALLER_SCRIPT="/tmp/install_ov_master_node.sh"
curl -fsSL --retry 8 --retry-all-errors --retry-delay 5 -o "$INSTALLER_SCRIPT" "http://get.openvidu.io/pro/ha/$OPENVIDU_VERSION/install_ov_master_node.sh" curl -fsSL --retry 8 --retry-all-errors --retry-delay 5 -o "$INSTALLER_SCRIPT" "https://get.openvidu.io/pro/ha/$OPENVIDU_VERSION/install_ov_master_node.sh"
if [ ! -s "$INSTALLER_SCRIPT" ]; then if [ ! -s "$INSTALLER_SCRIPT" ]; then
echo "[OpenVidu] failed to download the master node installer script" echo "[OpenVidu] failed to download the master node installer script"
exit 1 exit 1
@ -1354,7 +1354,7 @@ OPENVIDU_VERSION=$(az keyvault secret show --vault-name ${keyVaultName} --name O
# Download first: sh <(curl ...) would silently run an empty script on a transient curl failure # Download first: sh <(curl ...) would silently run an empty script on a transient curl failure
INSTALLER_SCRIPT="/tmp/install_ov_media_node.sh" INSTALLER_SCRIPT="/tmp/install_ov_media_node.sh"
curl -fsSL --retry 8 --retry-all-errors --retry-delay 5 -o "$INSTALLER_SCRIPT" "http://get.openvidu.io/pro/ha/$OPENVIDU_VERSION/install_ov_media_node.sh" curl -fsSL --retry 8 --retry-all-errors --retry-delay 5 -o "$INSTALLER_SCRIPT" "https://get.openvidu.io/pro/ha/$OPENVIDU_VERSION/install_ov_media_node.sh"
if [ ! -s "$INSTALLER_SCRIPT" ]; then if [ ! -s "$INSTALLER_SCRIPT" ]; then
echo "[OpenVidu] failed to download the media node installer script" echo "[OpenVidu] failed to download the media node installer script"
exit 1 exit 1

4
openvidu-deployment/pro/ha/azure/cf-openvidu-ha.json
View File

File diff suppressed because one or more lines are too long

4
openvidu-deployment/pro/ha/gcp/tf-gpc-openvidu-ha.tf
View File

@ -1154,7 +1154,7 @@ ENABLED_MODULES=$(gcloud secrets versions access latest --secret=ENABLED_MODULES
# Download first: sh <(curl ...) would silently run an empty script on a transient curl failure # Download first: sh <(curl ...) would silently run an empty script on a transient curl failure
INSTALLER_SCRIPT="/tmp/install_ov_master_node.sh" INSTALLER_SCRIPT="/tmp/install_ov_master_node.sh"
curl -fsSL --retry 8 --retry-all-errors --retry-delay 5 -o "$INSTALLER_SCRIPT" "http://get.openvidu.io/pro/ha/$OPENVIDU_VERSION/install_ov_master_node.sh" curl -fsSL --retry 8 --retry-all-errors --retry-delay 5 -o "$INSTALLER_SCRIPT" "https://get.openvidu.io/pro/ha/$OPENVIDU_VERSION/install_ov_master_node.sh"
if [ ! -s "$INSTALLER_SCRIPT" ]; then if [ ! -s "$INSTALLER_SCRIPT" ]; then
echo "Downloaded OpenVidu master node installer is empty or missing" >&2 echo "Downloaded OpenVidu master node installer is empty or missing" >&2
exit 1 exit 1
@ -1685,7 +1685,7 @@ fi
# Download first: sh <(curl ...) would silently run an empty script on a transient curl failure # Download first: sh <(curl ...) would silently run an empty script on a transient curl failure
INSTALLER_SCRIPT="/tmp/install_ov_media_node.sh" INSTALLER_SCRIPT="/tmp/install_ov_media_node.sh"
curl -fsSL --retry 8 --retry-all-errors --retry-delay 5 -o "$INSTALLER_SCRIPT" "http://get.openvidu.io/pro/ha/$OPENVIDU_VERSION/install_ov_media_node.sh" curl -fsSL --retry 8 --retry-all-errors --retry-delay 5 -o "$INSTALLER_SCRIPT" "https://get.openvidu.io/pro/ha/$OPENVIDU_VERSION/install_ov_media_node.sh"
if [ ! -s "$INSTALLER_SCRIPT" ]; then if [ ! -s "$INSTALLER_SCRIPT" ]; then
echo "Downloaded OpenVidu media node installer is empty or missing" >&2 echo "Downloaded OpenVidu media node installer is empty or missing" >&2
exit 1 exit 1

2
openvidu-deployment/pro/singlenode/aws/cf-openvidu-singlenode.yaml
View File

@ -846,7 +846,7 @@ Resources:
LIVEKIT_API_SECRET="$(/usr/local/bin/store_secret.sh generate LIVEKIT_API_SECRET)" LIVEKIT_API_SECRET="$(/usr/local/bin/store_secret.sh generate LIVEKIT_API_SECRET)"
# Base command # Base command
INSTALL_COMMAND="sh <(curl -fsSL http://get.openvidu.io/pro/singlenode/$OPENVIDU_VERSION/install.sh)" INSTALL_COMMAND="sh <(curl -fsSL https://get.openvidu.io/pro/singlenode/$OPENVIDU_VERSION/install.sh)"
# Common arguments # Common arguments
COMMON_ARGS=( COMMON_ARGS=(

2
openvidu-deployment/pro/singlenode/azure/cf-openvidu-singlenode.bicep
View File

@ -234,7 +234,7 @@ LIVEKIT_API_SECRET="$(/usr/local/bin/store_secret.sh generate LIVEKIT-API-SECRET
ENABLED_MODULES="$(/usr/local/bin/store_secret.sh save ENABLED-MODULES "observability,openviduMeet,v2compatibility")" ENABLED_MODULES="$(/usr/local/bin/store_secret.sh save ENABLED-MODULES "observability,openviduMeet,v2compatibility")"
# Base command # Base command
INSTALL_COMMAND="sh <(curl -fsSL http://get.openvidu.io/pro/singlenode/$OPENVIDU_VERSION/install.sh)" INSTALL_COMMAND="sh <(curl -fsSL https://get.openvidu.io/pro/singlenode/$OPENVIDU_VERSION/install.sh)"
# Common arguments # Common arguments
COMMON_ARGS=( COMMON_ARGS=(

2
openvidu-deployment/pro/singlenode/azure/cf-openvidu-singlenode.json
View File

File diff suppressed because one or more lines are too long

2
openvidu-deployment/pro/singlenode/gcp/tf-gpc-openvidu-singlenode.tf
View File

@ -215,7 +215,7 @@ LIVEKIT_API_KEY="$(/usr/local/bin/store_secret.sh generate LIVEKIT_API_KEY "API"
LIVEKIT_API_SECRET="$(/usr/local/bin/store_secret.sh generate LIVEKIT_API_SECRET)" LIVEKIT_API_SECRET="$(/usr/local/bin/store_secret.sh generate LIVEKIT_API_SECRET)"
# Build install command and args # Build install command and args
INSTALL_COMMAND="sh <(curl -fsSL http://get.openvidu.io/pro/singlenode/$OPENVIDU_VERSION/install.sh)" INSTALL_COMMAND="sh <(curl -fsSL https://get.openvidu.io/pro/singlenode/$OPENVIDU_VERSION/install.sh)"
# Common arguments # Common arguments
COMMON_ARGS=( COMMON_ARGS=(
"--no-tty" "--no-tty"

2
openvidu-deployment/update.sh
View File

@ -6,7 +6,7 @@ export INSTALL_PREFIX="${INSTALL_PREFIX:-/opt/openvidu}"
export DOCKER_VERSION="${DOCKER_VERSION:-29.8.0}" export DOCKER_VERSION="${DOCKER_VERSION:-29.8.0}"
export DOCKER_COMPOSE_VERSION="${DOCKER_COMPOSE_VERSION:-v5.5.1}" export DOCKER_COMPOSE_VERSION="${DOCKER_COMPOSE_VERSION:-v5.5.1}"
export OPENVIDU_VERSION="${OPENVIDU_VERSION:-main}" export OPENVIDU_VERSION="${OPENVIDU_VERSION:-main}"
export UPDATE_BASE_URL="${UPDATE_BASE_URL:-http://get.openvidu.io/update}" export UPDATE_BASE_URL="${UPDATE_BASE_URL:-https://get.openvidu.io/update}"
export UPDATER_IMAGE="${UPDATER_IMAGE:-docker.io/openvidu/openvidu-updater:${OPENVIDU_VERSION}}" export UPDATER_IMAGE="${UPDATER_IMAGE:-docker.io/openvidu/openvidu-updater:${OPENVIDU_VERSION}}"
export MINIO_SERVER_IMAGE="${MINIO_SERVER_IMAGE:-docker.io/openvidu/minio:RELEASE.2026-09-22T19-25-18Z-r0}" export MINIO_SERVER_IMAGE="${MINIO_SERVER_IMAGE:-docker.io/openvidu/minio:RELEASE.2026-09-22T19-25-18Z-r0}"
export MINIO_CLIENT_IMAGE="${MINIO_CLIENT_IMAGE:-docker.io/openvidu/minio-client:RELEASE.2026-09-02T16-12-00Z}" export MINIO_CLIENT_IMAGE="${MINIO_CLIENT_IMAGE:-docker.io/openvidu/minio-client:RELEASE.2026-09-02T16-12-00Z}"