Skip to content

ci: add fips to release draft and publish#406

Merged
mailo-nr merged 1 commit intomainfrom
marsac/fips-release
Oct 6, 2025
Merged

ci: add fips to release draft and publish#406
mailo-nr merged 1 commit intomainfrom
marsac/fips-release

Conversation

@mailo-nr
Copy link
Contributor

@mailo-nr mailo-nr commented Oct 1, 2025

Adds build/publish step for fips on draft and copies the manifest on on publish

@mailo-nr mailo-nr requested a review from a team as a code owner October 1, 2025 18:49
- name: Verify build
run: make ci DISTRIBUTIONS=${{ matrix.distribution }}

- name: Install cross-compilation toolchain
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Wondering if we should think about maintaining a runner image that bundles all dependencies instead of having to copy&pasta it everywhere (potentially running into drift). Not relevant for this PR, just curious what your thoughts are.

args: --clean --skip=announce --timeout 2h
workdir: distributions/${{ matrix.distribution }}

- name: Build FIPS binaries & packages with GoReleaser
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

As this steps reuses the dist dir, should we clean it up after the non-fips build?

Copy link
Contributor

@kb-newrelic kb-newrelic Oct 2, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Another options would be to override the dist folder for fips

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

the --clean flag should empty the folder, the only reason i might advocate for keeping the same folder is to have a cleaner path to merging the goreleaser configs.

Copy link
Contributor

@kb-newrelic kb-newrelic left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@mailo-nr mailo-nr merged commit f1dee30 into main Oct 6, 2025
18 checks passed
@mailo-nr mailo-nr deleted the marsac/fips-release branch October 6, 2025 16:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants