Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

add fips compliant packages #506

Open
wants to merge 2 commits into
base: main
Choose a base branch
from

Conversation

rajrohanyadav
Copy link
Contributor

@rajrohanyadav rajrohanyadav commented Dec 3, 2024

Summary

We need to support creating FIPS packages. For initial release we don't need FIPS images. Currently, goreleaser is being used to create and tag docker images for nri-prometheus. For FIPS, we need to create the binaries inside a container built using the centralized builder image: ghcr.io/newrelic/coreint-automation:latest-go1.23.4-ubuntu16.04.
We'll have to add docker and buildx dependencies to the image which are additional dependencies to maintain. It was tried with this PR.
I've tried to balance the mess and keep it only in this repo until we can fix it rather than adding unnecessary things to other repos.

Note:

  • Will close this PR without merging.
  • There are some code-duplication, but it makes sure we are not breaking anything for current customers in terms of image updates.
  • Added a TODO to remove image creation from goreleaser and potentially use reusable workflow here.

Testing

Prerelease test
image

@rajrohanyadav rajrohanyadav force-pushed the NR-287123-add-fips-compliant-pkgs branch 8 times, most recently from cc3f01e to 738b9a2 Compare December 6, 2024 04:55
@rajrohanyadav rajrohanyadav marked this pull request as ready for review December 6, 2024 05:24
@rajrohanyadav rajrohanyadav requested a review from a team as a code owner December 6, 2024 05:24
build/ci.mk Outdated Show resolved Hide resolved
build/release.mk Outdated Show resolved Hide resolved
build/release.mk Outdated Show resolved Hide resolved
build/release.mk Outdated Show resolved Hide resolved
build/release.mk Outdated Show resolved Hide resolved
@rajrohanyadav rajrohanyadav force-pushed the NR-287123-add-fips-compliant-pkgs branch from 2cebdd4 to e6b10e4 Compare December 6, 2024 12:34
@rajrohanyadav rajrohanyadav force-pushed the NR-287123-add-fips-compliant-pkgs branch from e6b10e4 to 4db3204 Compare December 11, 2024 11:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants