Enable FIPS support

Signed-off-by: clyang82 <[email protected]>
openshift-online · Dec 11, 2024 · 9589009 · 9589009
1 parent dc339d3
commit 9589009
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 16 deletions.
diff --git a/Containerfile.rhtap b/Containerfile.rhtap
@@ -4,25 +4,15 @@ ENV SOURCE_DIR=/maestro
 WORKDIR $SOURCE_DIR
 COPY . $SOURCE_DIR
 
-ENV GOFLAGS=""
-RUN make binary
-RUN pwd
+ENV GOEXPERIMENT=strictfipsruntime
+ENV CGO_ENABLED=1
+RUN make binary BUILD_OPTS="-tags strictfipsruntime"
 
 FROM registry.access.redhat.com/ubi9/ubi-minimal:latest
 
-RUN \
-    microdnf update -y \
-    && \
-    microdnf install -y util-linux \
-    && \
-    microdnf clean all
-
-COPY --from=builder \
-    /maestro/maestro \
-    /usr/local/bin/
-
+RUN microdnf update -y && microdnf install -y util-linux && microdnf clean all
+COPY --from=builder /maestro/maestro /usr/local/bin/
 EXPOSE 8000
-
 ENTRYPOINT ["/usr/local/bin/maestro", "server"]
 
 LABEL name="maestro" \

diff --git a/Makefile b/Makefile
@@ -178,7 +178,7 @@ lint:
 # Build binaries
 # NOTE it may be necessary to use CGO_ENABLED=0 for backwards compatibility with centos7 if not using centos7
 binary: check-gopath
-	${GO} build ./cmd/maestro
+	${GO} build $(BUILD_OPTS) ./cmd/maestro
 .PHONY: binary
 
 # Install