Release 1.17.3

See badges/shields issue 8671

.github/.cspell/project-dictionary.txt

@@ -1,19 +1,25 @@
 binstall
 bytecodealliance
+distro
+doas
+Dpkg
 jfrimmel
 koalaman
 libc
 linkcheck
 mdbook
+microdnf
 mvdan
 nextest
 protobuf
 protoc
 protocolbuffers
 quickinstall
+rockylinux
 rustwasm
 shellcheck
 shfmt
 toolchains
 udeps
 wasmtime
+xscale

.github/workflows/ci.yml

@@ -10,7 +10,7 @@ on:
       - main
       - dev
   schedule:
-    - cron: '0 0 * * *'
+    - cron: '0 1 * * *'
   workflow_dispatch:
 
 defaults:
@@ -27,14 +27,17 @@ jobs:
       matrix:
         os:
           - ubuntu-20.04
+          - ubuntu-22.04
         tool:
-          # Note: Specifying the version of valgrind is not supported.
           # cargo-watch is supported by cargo-binstall (through quickinstall)
           - cargo-hack,cargo-llvm-cov,cargo-minimal-versions,parse-changelog,cargo-udeps,cargo-valgrind,cargo-deny,cross,nextest,protoc,shellcheck,shfmt,valgrind,wasm-pack,wasmtime,mdbook,mdbook-linkcheck,cargo-watch
-          - cargo-hack@0.5.24,cargo-llvm-cov@0.5.2,cargo-minimal-versions@0.1.8,parse-changelog@0.5.2,cargo-udeps@0.1.35,cargo-valgrind@2.1.0,cargo-deny@0.13.5,cross@0.2.4,nextest@0.9.11,protoc@3.21.11,shellcheck@0.8.0,shfmt@3.5.1,wasm-pack@0.10.3,wasmtime@3.0.1,mdbook@0.4.22,mdbook-linkcheck@0.7.7,cargo-watch@8.1.1
-          # Nextest supports basic version ranges as well
-          - nextest@0.9
         include:
+          # Note: Specifying the version of valgrind and cargo-binstall is not supported.
+          - os: ubuntu-20.04
+            tool: cargo-hack@0.5.24,cargo-llvm-cov@0.5.3,cargo-minimal-versions@0.1.8,parse-changelog@0.5.2,cargo-udeps@0.1.35,cargo-valgrind@2.1.0,cargo-deny@0.13.5,cross@0.2.4,nextest@0.9.11,protoc@3.21.12,shellcheck@0.9.0,shfmt@3.6.0,wasm-pack@0.10.3,wasmtime@4.0.0,mdbook@0.4.25,mdbook-linkcheck@0.7.7,cargo-watch@8.1.1
+          # Nextest supports basic version ranges as well. For other tools, this will be supported by https://github.com/taiki-e/install-action/pull/27.
+          - os: ubuntu-20.04
+            tool: nextest@0.9
           - os: macos-11
             tool: cargo-hack,cargo-llvm-cov,cargo-minimal-versions,parse-changelog,cargo-udeps,cargo-valgrind,cargo-deny,cross,nextest,protoc,shellcheck,shfmt,wasm-pack,wasmtime,mdbook,mdbook-linkcheck,cargo-watch
           - os: windows-2019
@@ -47,3 +50,69 @@ jobs:
       - uses: ./
         with:
           tool: ${{ matrix.tool }}
+
+  test-container:
+    strategy:
+      fail-fast: false
+      matrix:
+        container:
+          - ubuntu:18.04 # glibc 2.27
+          - ubuntu:20.04 # glibc 2.31
+          - debian:10-slim # glibc 2.28
+          - debian:11-slim # glibc 2.31
+          - rockylinux:8 # glibc 2.28
+          - rockylinux:8-minimal # glibc 2.28
+        tool:
+          # valgrind: installing snap to container is difficult...
+          - cargo-hack,cargo-llvm-cov,cargo-minimal-versions,parse-changelog,cargo-udeps,cargo-valgrind,cargo-deny,cross,nextest,protoc,shellcheck,shfmt,wasm-pack,wasmtime,mdbook,mdbook-linkcheck,cargo-watch
+        include:
+          - container: ubuntu:22.04 # glibc 2.35
+            # cargo-udeps depends on openssl 1.1
+            tool: cargo-hack,cargo-llvm-cov,cargo-minimal-versions,parse-changelog,cargo-valgrind,cargo-deny,cross,nextest,protoc,shellcheck,shfmt,wasm-pack,wasmtime,mdbook,mdbook-linkcheck,cargo-watch
+          - container: fedora:latest # glibc 2.36 (as of fedora 37)
+            # cargo-udeps depends on openssl 1.1
+            tool: cargo-hack,cargo-llvm-cov,cargo-minimal-versions,parse-changelog,cargo-valgrind,cargo-deny,cross,nextest,protoc,shellcheck,shfmt,wasm-pack,wasmtime,mdbook,mdbook-linkcheck,cargo-watch
+          - container: centos:7 # glibc 2.17
+            # cargo-udeps,protoc,valgrind,wasmtime,mdbook-linkcheck,cargo-watch don't provide prebuilt binaries for musl host.
+            # we don't support nextest on very old glibc due to https://github.com/taiki-e/install-action/issues/13.
+            tool: cargo-hack,cargo-llvm-cov,cargo-minimal-versions,parse-changelog,cargo-valgrind,cargo-deny,cross,shellcheck,shfmt,wasm-pack,mdbook,cargo-binstall
+          - container: alpine:latest # musl 1.2.3 (as of alpine 3.17)
+            # cargo-udeps,protoc,valgrind,wasmtime,mdbook-linkcheck,cargo-watch don't provide prebuilt binaries for musl host.
+            tool: cargo-hack,cargo-llvm-cov,cargo-minimal-versions,parse-changelog,cargo-valgrind,cargo-deny,cross,nextest,shellcheck,shfmt,wasm-pack,mdbook,cargo-binstall
+    runs-on: ubuntu-latest
+    container: ${{ matrix.container }}
+    steps:
+      - name: Install requirements (ubuntu/debian)
+        run: |
+          set -euxo pipefail
+          apt-get -o Acquire::Retries=10 -qq update
+          apt-get -o Acquire::Retries=10 -qq -o Dpkg::Use-Pty=0 install -y --no-install-recommends cargo
+        if: startsWith(matrix.container, 'ubuntu') || startsWith(matrix.container, 'debian')
+      - name: Install requirements (fedora/rockylinux)
+        run: |
+          set -euxo pipefail
+          dnf=dnf
+          if ! type -P dnf &>/dev/null; then
+            dnf=microdnf
+          fi
+          # tar and gzip are required for actions/checkout on rockylinux:*-minimal
+          $dnf install -y cargo tar gzip
+        if: startsWith(matrix.container, 'fedora') || startsWith(matrix.container, 'rockylinux')
+      - name: Install requirements (centos)
+        run: |
+          set -euxo pipefail
+          curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --profile minimal --default-toolchain stable
+          echo "$HOME/.cargo/bin" >>"${GITHUB_PATH}"
+        if: startsWith(matrix.container, 'centos')
+      - name: Install requirements (alpine)
+        run: |
+          set -eux
+          apk add bash cargo
+        shell: sh
+        if: startsWith(matrix.container, 'alpine')
+      - uses: actions/checkout@v3
+        with:
+          persist-credentials: false
+      - uses: ./
+        with:
+          tool: ${{ matrix.tool }}

CHANGELOG.md

@@ -10,6 +10,52 @@ Note: In this file, do not use the hard wrap in the middle of a sentence for com
 
 ## [Unreleased]
 
+## [1.17.3] - 2022-12-22
+
+- Update `wasmtime@latest` to 4.0.0.
+
+## [1.17.2] - 2022-12-17
+
+- Update `mdbook@latest` to 0.4.25.
+
+## [1.17.1] - 2022-12-15
+
+- Update `mdbook@latest` to 0.4.23.
+- Support `mdbook` on Linux (musl).
+- Update `cargo-llvm-cov@latest` to 0.5.3.
+
+## [1.17.0] - 2022-12-14
+
+- Update `protoc@latest` to 3.21.12.
+- Support aarch64 self-hosted runners (Linux, macOS, Windows).
+- Improve support for Fedora/RHEL based containers/self-hosted runners.
+
+## [1.16.0] - 2022-12-14
+
+- Update `cargo-binstall@latest` to 0.18.1. ([#32](https://github.com/taiki-e/install-action/pull/32), thanks @NobodyXu)
+
+- If the host environment lacks packages required for installation, such as `curl` or `tar`, install them if possible.
+
+  It is mainly intended to make the use of this action easy on containers or self-hosted runners, and currently supports Debian-based distributions (including Ubuntu) and Alpine.
+
+  The system's package manager is used for these installations. However, `bash`, which is an execution requirement of the action itself, and `cargo`, which is usually preferred for installation by rustup rather than the system's package manager, are *not* covered by these installations.
+
+  See also the [compatibility note in readme](https://github.com/taiki-e/install-action#compatibility).
+
+## [1.15.5] - 2022-12-13
+
+- Update `shellcheck@latest` to 0.9.0.
+
+## [1.15.4] - 2022-12-12
+
+- Update `shfmt@latest` to 3.6.0.
+- Update `cargo-binstall@latest` to 0.18.0.
+- Support installing `cargo-binstall` on linux with custom host targets such as x86_64-alpine-linux-musl.
+
+## [1.15.3] - 2022-12-11
+
+- Fix bug regarding musl host detection. ([#29](https://github.com/taiki-e/install-action/issues/29))
+
 ## [1.15.2] - 2022-12-10
 
 - Update `mdbook-linkcheck@latest` to 0.7.7.
@@ -415,7 +461,15 @@ Note: In this file, do not use the hard wrap in the middle of a sentence for com
 
 Initial release
 
-[Unreleased]: https://github.com/taiki-e/install-action/compare/v1.15.2...HEAD
+[Unreleased]: https://github.com/taiki-e/install-action/compare/v1.17.3...HEAD
+[1.17.3]: https://github.com/taiki-e/install-action/compare/v1.17.2...v1.17.3
+[1.17.2]: https://github.com/taiki-e/install-action/compare/v1.17.1...v1.17.2
+[1.17.1]: https://github.com/taiki-e/install-action/compare/v1.17.0...v1.17.1
+[1.17.0]: https://github.com/taiki-e/install-action/compare/v1.16.0...v1.17.0
+[1.16.0]: https://github.com/taiki-e/install-action/compare/v1.15.5...v1.16.0
+[1.15.5]: https://github.com/taiki-e/install-action/compare/v1.15.4...v1.15.5
+[1.15.4]: https://github.com/taiki-e/install-action/compare/v1.15.3...v1.15.4
+[1.15.3]: https://github.com/taiki-e/install-action/compare/v1.15.2...v1.15.3
 [1.15.2]: https://github.com/taiki-e/install-action/compare/v1.15.1...v1.15.2
 [1.15.1]: https://github.com/taiki-e/install-action/compare/v1.15.0...v1.15.1
 [1.15.0]: https://github.com/taiki-e/install-action/compare/v1.14.7...v1.15.0

README.md

@@ -1,6 +1,6 @@
 # install-action
 
-[![build status](https://img.shields.io/github/workflow/status/taiki-e/install-action/CI/main?style=flat-square&logo=github)](https://github.com/taiki-e/install-action/actions)
+[![build status](https://img.shields.io/github/actions/workflow/status/taiki-e/install-action/ci.yml?branch=main&style=flat-square&logo=github)](https://github.com/taiki-e/install-action/actions)
 
 GitHub Action for installing development tools (mainly from GitHub Releases).
 
@@ -9,6 +9,7 @@ GitHub Action for installing development tools (mainly from GitHub Releases).
   - [Example workflow](#example-workflow)
 - [Supported tools](#supported-tools)
 - [Security](#security)
+- [Compatibility](#compatibility)
 - [Related Projects](#related-projects)
 - [License](#license)
 
@@ -101,6 +102,14 @@ When installing the tool from GitHub Releases, this action will download the too
 
 If you want a higher level of security, consider working on [#1](https://github.com/taiki-e/install-action/issues/1).
 
+## Compatibility
+
+This action has been tested for GitHub-hosted runners (Ubuntu, macOS, Windows) and containers (Ubuntu, Debian, Alpine, Fedora, CentOS, Rocky).
+To use this action in self-hosted runners or in containers, you will need to install at least the following:
+
+- bash
+- cargo (if you install cargo subcommands or use cargo-binstall fallback)
+
 ## Related Projects
 
 - [create-gh-release-action]: GitHub Action for creating GitHub Releases based on changelog.

main.sh

@@ -47,14 +47,34 @@ download() {
     local tar_args=()
     case "${url}" in
         *.tar.gz | *.tgz) tar_args+=("xzf") ;;
-        *.tar.bz2 | *.tbz2) tar_args+=("xjf") ;;
+        *.tar.bz2 | *.tbz2)
-        *.tar.xz | *.txz) tar_args+=("xJf") ;;
+            tar_args+=("xjf")
+            if ! type -P bzip2 &>/dev/null; then
+                case "${base_distro}" in
+                    debian | alpine | fedora) sys_install bzip2 ;;
+                esac
+            fi
+            ;;
+        *.tar.xz | *.txz)
+            tar_args+=("xJf")
+            if ! type -P xz &>/dev/null; then
+                case "${base_distro}" in
+                    debian) sys_install xz-utils ;;
+                    alpine | fedora) sys_install xz ;;
+                esac
+            fi
+            ;;
         *.zip)
+            if ! type -P unzip &>/dev/null; then
+                case "${base_distro}" in
+                    debian | alpine | fedora) sys_install unzip ;;
+                esac
+            fi
             mkdir -p .install-action-tmp
             (
                 cd .install-action-tmp
                 info "downloading ${url}"
-                retry curl --proto '=https' --tlsv1.2 -fsSL --retry 10 --retry-connrefused "${url}" -o tmp.zip
+                retry curl --proto '=https' --tlsv1.2 -fsSL --retry 10 "${url}" -o tmp.zip
                 unzip tmp.zip
                 mv "${bin}" "${bin_dir}/"
             )
@@ -70,17 +90,12 @@ download() {
         tar_args+=(--strip-components "${components}")
     fi
     info "downloading ${url}"
-    retry curl --proto '=https' --tlsv1.2 -fsSL --retry 10 --retry-connrefused "${url}" \
+    retry curl --proto '=https' --tlsv1.2 -fsSL --retry 10 "${url}" \
         | tar "${tar_args[@]}" -C "${bin_dir}" "${bin}"
 }
-host_triple() {
-    if [[ -z "${host:-}" ]]; then
-        host="$(rustc -vV | grep host | cut -c 7-)"
-    fi
-}
 install_cargo_binstall() {
     # https://github.com/cargo-bins/cargo-binstall/releases
-    local binstall_version="0.17.0"
+    local binstall_version="0.18.1"
     local install_binstall='1'
     if [[ -f "${cargo_bin}/cargo-binstall${exe}" ]]; then
         if [[ "$(cargo binstall -V)" == "cargo-binstall ${binstall_version}" ]]; then
@@ -95,25 +110,12 @@ install_cargo_binstall() {
     if [[ -n "${install_binstall}" ]]; then
         info "installing cargo-binstall"
 
-        host_triple
         base_url="https://github.com/cargo-bins/cargo-binstall/releases/download/v${binstall_version}/cargo-binstall"
-        case "${host}" in
+        case "${OSTYPE}" in
-            x86_64-unknown-linux-gnu) url="${base_url}-x86_64-unknown-linux-musl.tgz" ;;
+            linux*) url="${base_url}-${host_arch}-unknown-linux-musl.tgz" ;;
-            x86_64-unknown-linux-musl) url="${base_url}-x86_64-unknown-linux-musl.tgz" ;;
+            darwin*) url="${base_url}-${host_arch}-apple-darwin.zip" ;;
-
+            cygwin* | msys*) url="${base_url}-x86_64-pc-windows-msvc.zip" ;;
-            armv7-unknown-linux-gnueabihf) url="${base_url}-armv7-unknown-linux-musleabihf.tgz" ;;
+            *) bail "unsupported OSTYPE '${OSTYPE}' for cargo-binstall" ;;
-            armv7-unknown-linux-musleabihf) url="${base_url}-armv7-unknown-linux-musleabihf.tgz" ;;
-
-            aarch64-unknown-linux-gnu) url="${base_url}-aarch64-unknown-linux-musl.tgz" ;;
-            aarch64-unknown-linux-musl) url="${base_url}-aarch64-unknown-linux-musl.tgz" ;;
-
-            x86_64-pc-windows-gnu) url="${base_url}-x86_64-pc-windows-msvc.zip" ;;
-
-            x86_64-apple-darwin | aarch64-apple-darwin | x86_64-pc-windows-msvc)
-                url="${base_url}-${host}.zip"
-                ;;
-
-            *) bail "unsupported target '${host}' for cargo-binstall" ;;
         esac
 
         download "${url}" "${cargo_bin}" "cargo-binstall${exe}"
@@ -137,6 +139,59 @@ cargo_binstall() {
         *) cargo binstall --force --no-confirm --version "${version}" "${tool}" ;;
     esac
 }
+apt_update() {
+    if type -P sudo &>/dev/null; then
+        retry sudo apt-get -o Acquire::Retries=10 -qq update
+    else
+        retry apt-get -o Acquire::Retries=10 -qq update
+    fi
+    apt_updated=1
+}
+apt_install() {
+    if [[ -z "${apt_updated:-}" ]]; then
+        apt_update
+    fi
+    if type -P sudo &>/dev/null; then
+        retry sudo apt-get -o Acquire::Retries=10 -qq -o Dpkg::Use-Pty=0 install -y --no-install-recommends "$@"
+    else
+        retry apt-get -o Acquire::Retries=10 -qq -o Dpkg::Use-Pty=0 install -y --no-install-recommends "$@"
+    fi
+}
+apt_remove() {
+    if type -P sudo &>/dev/null; then
+        sudo apt-get -qq -o Dpkg::Use-Pty=0 remove -y "$@"
+    else
+        apt-get -qq -o Dpkg::Use-Pty=0 remove -y "$@"
+    fi
+}
+snap_install() {
+    if type -P sudo &>/dev/null; then
+        retry sudo snap install "$@"
+    else
+        retry snap install "$@"
+    fi
+}
+apk_install() {
+    if type -P doas &>/dev/null; then
+        doas apk add "$@"
+    else
+        apk add "$@"
+    fi
+}
+dnf_install() {
+    if type -P sudo &>/dev/null; then
+        retry sudo "${dnf}" install -y "$@"
+    else
+        retry "${dnf}" install -y "$@"
+    fi
+}
+sys_install() {
+    case "${base_distro}" in
+        debian) apt_install "$@" ;;
+        alpine) apk_install "$@" ;;
+        fedora) dnf_install "$@" ;;
+    esac
+}
 
 if [[ $# -gt 0 ]]; then
     bail "invalid argument '$1'"
@@ -151,8 +206,60 @@ if [[ -n "${tool}" ]]; then
     while read -rd,; do tools+=("${REPLY}"); done <<<"${tool},"
 fi
 
+# Refs: https://github.com/rust-lang/rustup/blob/HEAD/rustup-init.sh
+case "$(uname -m)" in
+    aarch64 | arm64) host_arch="aarch64" ;;
+    xscale | arm | armv6l | armv7l | armv8l)
+        # Ignore arm for now, as we need to consider the version and whether hard-float is supported.
+        # https://github.com/rust-lang/rustup/pull/593
+        # https://github.com/cross-rs/cross/pull/1018
+        # Does it seem only armv7l is supported?
+        # https://github.com/actions/runner/blob/6b9e8a6be411a6e63d5ccaf3c47e7b7622c5ec49/src/Misc/externals.sh#L174
+        bail "32-bit ARM runner is not supported yet by this action"
+        ;;
+    # GitHub Actions Runner supports Linux (x86_64, aarch64, arm), Windows (x86_64, aarch64),
+    # and macOS (x86_64, aarch64).
+    # https://github.com/actions/runner
+    # https://docs.github.com/en/actions/hosting-your-own-runners/about-self-hosted-runners#supported-architectures-and-operating-systems-for-self-hosted-runners
+    # So we can assume x86_64 unless it is aarch64 or arm.
+    *) host_arch="x86_64" ;;
+esac
+base_distro=""
 exe=""
 case "${OSTYPE}" in
+    linux*)
+        host_env="gnu"
+        if (ldd --version 2>&1 || true) | grep -q 'musl'; then
+            host_env="musl"
+        fi
+        if grep -q '^ID_LIKE=' /etc/os-release; then
+            base_distro="$(grep '^ID_LIKE=' /etc/os-release | sed 's/^ID_LIKE=//')"
+            case "${base_distro}" in
+                *debian*) base_distro=debian ;;
+                *alpine*) base_distro=alpine ;;
+                *fedora*) base_distro=fedora ;;
+            esac
+        else
+            base_distro="$(grep '^ID=' /etc/os-release | sed 's/^ID=//')"
+        fi
+        case "${base_distro}" in
+            fedora)
+                dnf=dnf
+                if ! type -P dnf &>/dev/null; then
+                    if type -P microdnf &>/dev/null; then
+                        # fedora-based distributions have "minimal" images that
+                        # use microdnf instead of dnf.
+                        dnf=microdnf
+                    else
+                        # If neither dnf nor microdnf is available, it is
+                        # probably an RHEL7-based distribution that does not
+                        # have dnf installed by default.
+                        dnf=yum
+                    fi
+                fi
+                ;;
+        esac
+        ;;
     cygwin* | msys*) exe=".exe" ;;
 esac
 
@@ -161,15 +268,11 @@ if [[ ! -d "${cargo_bin}" ]]; then
     cargo_bin=/usr/local/bin
 fi
 
-# Refs: https://github.com/rust-lang/rustup/blob/HEAD/rustup-init.sh
+if ! type -P curl &>/dev/null || ! type -P tar &>/dev/null; then
-case "${OSTYPE}" in
+    case "${base_distro}" in
-    linux*)
+        debian | alpine | fedora) sys_install ca-certificates curl tar ;;
-        host_env="gnu"
+    esac
-        if ldd --version 2>&1 | grep -q 'musl'; then
+fi
-            host_env="musl"
-        fi
-        ;;
-esac
 
 for tool in "${tools[@]}"; do
     if [[ "${tool}" == *"@"* ]]; then
@@ -189,7 +292,7 @@ for tool in "${tools[@]}"; do
                 # https://github.com/taiki-e/cargo-hack/releases
                 cargo-hack) latest_version="0.5.24" ;;
                 # https://github.com/taiki-e/cargo-llvm-cov/releases
-                cargo-llvm-cov) latest_version="0.5.2" ;;
+                cargo-llvm-cov) latest_version="0.5.3" ;;
                 # https://github.com/taiki-e/cargo-minimal-versions/releases
                 cargo-minimal-versions) latest_version="0.1.8" ;;
                 # https://github.com/taiki-e/parse-changelog/releases
@@ -201,9 +304,14 @@ for tool in "${tools[@]}"; do
                 latest) version="${latest_version}" ;;
             esac
             case "${OSTYPE}" in
-                linux*) target="x86_64-unknown-linux-musl" ;;
+                linux*) target="${host_arch}-unknown-linux-musl" ;;
-                darwin*) target="x86_64-apple-darwin" ;;
+                darwin*) target="${host_arch}-apple-darwin" ;;
-                cygwin* | msys*) target="x86_64-pc-windows-msvc" ;;
+                cygwin* | msys*)
+                    case "${tool}" in
+                        cargo-llvm-cov) target="x86_64-pc-windows-msvc" ;;
+                        *) target="${host_arch}-pc-windows-msvc" ;;
+                    esac
+                    ;;
                 *) bail "unsupported OSTYPE '${OSTYPE}' for ${tool}" ;;
             esac
             url="https://github.com/${repo}/releases/download/v${version}/${tool}-${target}.tar.gz"
@@ -236,7 +344,7 @@ for tool in "${tools[@]}"; do
             download "${url}" "${cargo_bin}" "./${tool}-v${version}-${target}/${tool}${exe}"
             ;;
         cargo-valgrind)
-            # https://github.com/jfrimmel/cargo-valgrind
+            # https://github.com/jfrimmel/cargo-valgrind/releases
             latest_version="2.1.0"
             repo="jfrimmel/${tool}"
             case "${version}" in
@@ -269,7 +377,7 @@ for tool in "${tools[@]}"; do
             esac
             case "${OSTYPE}" in
                 linux*) target="x86_64-unknown-linux-musl" ;;
-                darwin*) target="x86_64-apple-darwin" ;;
+                darwin*) target="${host_arch}-apple-darwin" ;;
                 cygwin* | msys*) target="x86_64-pc-windows-msvc" ;;
                 *) bail "unsupported OSTYPE '${OSTYPE}' for ${tool}" ;;
             esac
@@ -300,6 +408,8 @@ for tool in "${tools[@]}"; do
             # https://nexte.st/book/pre-built-binaries.html
             case "${OSTYPE}" in
                 linux*)
+                    # musl build of nextest is slow, so use glibc build if host_env is gnu.
+                    # https://github.com/taiki-e/install-action/issues/13
                     case "${host_env}" in
                         gnu) url="https://get.nexte.st/${version}/linux" ;;
                         *) url="https://get.nexte.st/${version}/linux-musl" ;;
@@ -310,19 +420,19 @@ for tool in "${tools[@]}"; do
                 *) bail "unsupported OSTYPE '${OSTYPE}' for ${tool}" ;;
             esac
             info "downloading ${url}"
-            retry curl --proto '=https' --tlsv1.2 -fsSL --retry 10 --retry-connrefused "${url}" \
+            retry curl --proto '=https' --tlsv1.2 -fsSL --retry 10 "${url}" \
                 | tar xzf - -C "${cargo_bin}"
             ;;
         protoc)
             # https://github.com/protocolbuffers/protobuf/releases
-            latest_version="3.21.11"
+            latest_version="3.21.12"
             repo="protocolbuffers/protobuf"
             case "${version}" in
                 latest) version="${latest_version}" ;;
             esac
             miner_patch_version="${version#*.}"
             base_url="https://github.com/${repo}/releases/download/v${miner_patch_version}/protoc-${miner_patch_version}"
-            # Copying files to /usr/local/include requires sudo.
+            # Copying files to /usr/local/include requires sudo, so do not use it.
             bin_dir="${HOME}/.install-action/bin"
             include_dir="${HOME}/.install-action/include"
             if [[ ! -d "${bin_dir}" ]]; then
@@ -332,16 +442,21 @@ for tool in "${tools[@]}"; do
                 export PATH="${PATH}:${bin_dir}"
             fi
             case "${OSTYPE}" in
-                linux*) url="${base_url}-linux-x86_64.zip" ;;
+                linux*) url="${base_url}-linux-${host_arch/aarch/aarch_}.zip" ;;
-                darwin*) url="${base_url}-osx-x86_64.zip" ;;
+                darwin*) url="${base_url}-osx-${host_arch/aarch/aarch_}.zip" ;;
                 cygwin* | msys*) url="${base_url}-win64.zip" ;;
                 *) bail "unsupported OSTYPE '${OSTYPE}' for ${tool}" ;;
             esac
+            if ! type -P unzip &>/dev/null; then
+                case "${base_distro}" in
+                    debian | alpine | fedora) sys_install unzip ;;
+                esac
+            fi
             mkdir -p .install-action-tmp
             (
                 cd .install-action-tmp
                 info "downloading ${url}"
-                retry curl --proto '=https' --tlsv1.2 -fsSL --retry 10 --retry-connrefused "${url}" -o tmp.zip
+                retry curl --proto '=https' --tlsv1.2 -fsSL --retry 10 "${url}" -o tmp.zip
                 unzip tmp.zip
                 mv "bin/protoc${exe}" "${bin_dir}/"
                 mkdir -p "${include_dir}/"
@@ -358,7 +473,7 @@ for tool in "${tools[@]}"; do
             ;;
         shellcheck)
             # https://github.com/koalaman/shellcheck/releases
-            latest_version="0.8.0"
+            latest_version="0.9.0"
             repo="koalaman/${tool}"
             case "${version}" in
                 latest) version="${latest_version}" ;;
@@ -368,9 +483,9 @@ for tool in "${tools[@]}"; do
             case "${OSTYPE}" in
                 linux*)
                     if type -P shellcheck &>/dev/null; then
-                        sudo apt-get -qq -o Dpkg::Use-Pty=0 remove -y shellcheck
+                        apt_remove shellcheck
                     fi
-                    url="${base_url}.linux.x86_64.tar.xz"
+                    url="${base_url}.linux.${host_arch}.tar.xz"
                     ;;
                 darwin*) url="${base_url}.darwin.x86_64.tar.xz" ;;
                 cygwin* | msys*)
@@ -383,15 +498,25 @@ for tool in "${tools[@]}"; do
             ;;
         shfmt)
             # https://github.com/mvdan/sh/releases
-            latest_version="3.5.1"
+            latest_version="3.6.0"
             repo="mvdan/sh"
             case "${version}" in
                 latest) version="${latest_version}" ;;
             esac
             bin_dir="/usr/local/bin"
             case "${OSTYPE}" in
-                linux*) target="linux_amd64" ;;
+                linux*)
-                darwin*) target="darwin_amd64" ;;
+                    case "${host_arch}" in
+                        aarch64) target="linux_arm64" ;;
+                        *) target="linux_amd64" ;;
+                    esac
+                    ;;
+                darwin*)
+                    case "${host_arch}" in
+                        aarch64) target="darwin_arm64" ;;
+                        *) target="darwin_amd64" ;;
+                    esac
+                    ;;
                 cygwin* | msys*)
                     target="windows_amd64"
                     bin_dir="${HOME}/.install-action/bin"
@@ -405,7 +530,7 @@ for tool in "${tools[@]}"; do
             esac
             url="https://github.com/${repo}/releases/download/v${version}/${tool}_v${version}_${target}${exe}"
             info "downloading ${url}"
-            retry curl --proto '=https' --tlsv1.2 -fsSL --retry 10 --retry-connrefused -o "${bin_dir}/${tool}${exe}" "${url}"
+            retry curl --proto '=https' --tlsv1.2 -fsSL --retry 10 -o "${bin_dir}/${tool}${exe}" "${url}"
             case "${OSTYPE}" in
                 linux* | darwin*) chmod +x "${bin_dir}/${tool}${exe}" ;;
             esac
@@ -420,12 +545,11 @@ for tool in "${tools[@]}"; do
                 darwin* | cygwin* | msys*) bail "${tool} for non-linux is not supported yet by this action" ;;
                 *) bail "unsupported OSTYPE '${OSTYPE}' for ${tool}" ;;
             esac
-            retry sudo apt-get -o Acquire::Retries=10 -qq update
             # libc6-dbg is needed to run Valgrind
-            retry sudo apt-get -o Acquire::Retries=10 -qq -o Dpkg::Use-Pty=0 install -y libc6-dbg
+            apt_install libc6-dbg
             # Use snap to install the latest Valgrind
             # https://snapcraft.io/install/valgrind/ubuntu
-            retry sudo snap install valgrind --classic
+            snap_install valgrind --classic
             ;;
         wasm-pack)
             # https://github.com/rustwasm/wasm-pack/releases
@@ -435,7 +559,7 @@ for tool in "${tools[@]}"; do
                 latest) version="${latest_version}" ;;
             esac
             case "${OSTYPE}" in
-                linux*) target="x86_64-unknown-linux-musl" ;;
+                linux*) target="${host_arch}-unknown-linux-musl" ;;
                 darwin*) target="x86_64-apple-darwin" ;;
                 cygwin* | msys*) target="x86_64-pc-windows-msvc" ;;
                 *) bail "unsupported OSTYPE '${OSTYPE}' for ${tool}" ;;
@@ -445,7 +569,7 @@ for tool in "${tools[@]}"; do
             ;;
         wasmtime)
             # https://github.com/bytecodealliance/wasmtime/releases
-            latest_version="3.0.1"
+            latest_version="4.0.0"
             repo="bytecodealliance/${tool}"
             case "${version}" in
                 latest) version="${latest_version}" ;;
@@ -453,11 +577,11 @@ for tool in "${tools[@]}"; do
             base_url="https://github.com/${repo}/releases/download/v${version}/${tool}-v${version}"
             case "${OSTYPE}" in
                 linux*)
-                    target="x86_64-linux"
+                    target="${host_arch}-linux"
                     url="${base_url}-${target}.tar.xz"
                     ;;
                 darwin*)
-                    target="x86_64-macos"
+                    target="${host_arch}-macos"
                     url="${base_url}-${target}.tar.xz"
                     ;;
                 cygwin* | msys*)
@@ -470,14 +594,19 @@ for tool in "${tools[@]}"; do
             ;;
         mdbook)
             # https://github.com/rust-lang/mdBook/releases
-            latest_version="0.4.22"
+            latest_version="0.4.25"
             repo="rust-lang/mdBook"
             case "${version}" in
                 latest) version="${latest_version}" ;;
             esac
             base_url="https://github.com/${repo}/releases/download/v${version}/${tool}-v${version}"
             case "${OSTYPE}" in
-                linux*) url="${base_url}-x86_64-unknown-linux-gnu.tar.gz" ;;
+                linux*)
+                    case "${version}" in
+                        0.[1-3].* | 0.4.? | 0.4.1? | 0.4.2[0-1]) url="${base_url}-x86_64-unknown-linux-gnu.tar.gz" ;;
+                        *) url="${base_url}-${host_arch}-unknown-linux-musl.tar.gz" ;;
+                    esac
+                    ;;
                 darwin*) url="${base_url}-x86_64-apple-darwin.tar.gz" ;;
                 cygwin* | msys*) url="${base_url}-x86_64-pc-windows-msvc.zip" ;;
                 *) bail "unsupported OSTYPE '${OSTYPE}' for ${tool}" ;;