From 956601c8e704126e06d33592767b06d0ab370546 Mon Sep 17 00:00:00 2001
From: Kur0x <dqh915@gmail.com>
Date: Tue, 11 Aug 2026 20:14:09 +0800
Subject: [PATCH] fix: allow insecure curl downloads

---
 scripts/cann_download_install.sh     | 4 ++--
 scripts/ci/provision/runner.sh       | 4 ++--
 scripts/download_open_source_deps.sh | 2 +-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/scripts/cann_download_install.sh b/scripts/cann_download_install.sh
index 211e29f8..ab0fdcf6 100755
--- a/scripts/cann_download_install.sh
+++ b/scripts/cann_download_install.sh
@@ -40,12 +40,12 @@ success "TILEXR_CANN_VER = ${TILEXR_CANN_VER}"
 
 success "start download cann from ${cann_url}"
 cd "${TILEXR_TEMP_HOME}" || exit 1
-curl --fail --location --continue-at - --remote-name "${cann_url}" \
+curl -k --fail --location --continue-at - --remote-name "${cann_url}" \
     > "${TILEXR_TEMP_HOME}/toolkit.log" 2>&1 &
 pid_cann=$!
 
 success "start download ops from ${ops_url}"
-curl --fail --location --continue-at - --remote-name "${ops_url}" \
+curl -k --fail --location --continue-at - --remote-name "${ops_url}" \
     > "${TILEXR_TEMP_HOME}/ops.log" 2>&1 &
 pid_ops=$!
 cd "${TILEXR_HOME}" || exit 1
diff --git a/scripts/ci/provision/runner.sh b/scripts/ci/provision/runner.sh
index 824ef6cc..a3123933 100755
--- a/scripts/ci/provision/runner.sh
+++ b/scripts/ci/provision/runner.sh
@@ -131,7 +131,7 @@ fi
 release_json="${stage}/release.json"
 
 run install -d -o root -g "${CI_GROUP}" -m 0750 "${stage}"
-run env "${proxy_env[@]}" curl --fail --location --silent --show-error \
+run env "${proxy_env[@]}" curl -k --fail --location --silent --show-error \
     https://api.github.com/repos/actions/runner/releases/latest -o "${release_json}"
 
 if [[ "${DRY_RUN}" == 1 ]]; then
@@ -173,7 +173,7 @@ PY
 fi
 
 asset_path="${stage}/${asset_name}"
-run env "${proxy_env[@]}" curl --fail --location --silent --show-error \
+run env "${proxy_env[@]}" curl -k --fail --location --silent --show-error \
     "${asset_url}" -o "${asset_path}"
 if [[ "${DRY_RUN}" == 1 ]]; then
     run sha256sum --check "${asset_path}.sha256"
diff --git a/scripts/download_open_source_deps.sh b/scripts/download_open_source_deps.sh
index fc7d50f8..52d3934f 100755
--- a/scripts/download_open_source_deps.sh
+++ b/scripts/download_open_source_deps.sh
@@ -48,7 +48,7 @@ fi
 
 downloader=()
 if command -v curl >/dev/null 2>&1; then
-    downloader=(curl -fL --retry 3 --connect-timeout 20 -o)
+    downloader=(curl -kfL --retry 3 --connect-timeout 20 -o)
 elif command -v wget >/dev/null 2>&1; then
     downloader=(wget --tries=3 --timeout=20 -O)
 elif [[ ${check_only} -eq 0 ]]; then