Harden kafka_consumer CI librdkafka install with SHA256 verification (#23375)

* Harden kafka_consumer CI librdkafka install with SHA256 verification

* Fix up

Author: alexeypilyugin

.ddev/ci/scripts/kafka_consumer/linux/32_install_kerberos.sh

@@ -6,9 +6,14 @@ sudo apt update
 sudo apt install -y --no-install-recommends build-essential libkrb5-dev libzstd-dev wget software-properties-common lsb-release gcc make python3 python3-pip python3-dev libsasl2-modules-gssapi-mit krb5-user
 
 # Install librdkafka from source since no binaries are available for the distribution we use on the CI:
-git clone https://github.com/confluentinc/librdkafka
-cd librdkafka
-git checkout v2.13.2
+LIBRDKAFKA_VERSION="v2.13.2"
+LIBRDKAFKA_SHA256="14972092e4115f6e99f798a7cb420cbf6daa0c73502b3c52ae42fb5b418eea8f"
+LIBRDKAFKA_TARBALL="${LIBRDKAFKA_VERSION}.tar.gz"
+
+wget "https://github.com/confluentinc/librdkafka/archive/refs/tags/${LIBRDKAFKA_TARBALL}"
+echo "${LIBRDKAFKA_SHA256}  ${LIBRDKAFKA_TARBALL}" | sha256sum -c -
+tar -xzf "${LIBRDKAFKA_TARBALL}"
+cd "librdkafka-${LIBRDKAFKA_VERSION#v}"
 sudo ./configure --install-deps --prefix=/usr
 make
 sudo make install