Merge pull request #761 from spectrocloud/fips-static-link-fix-4.0

Fips changes for Static Linking

Author: zulfilee

.github/workflows/spectro-release.yaml

@@ -20,11 +20,11 @@ jobs:
         uses: mukunku/[email protected]
         id: checkTag
         with:
-          tag: spectro-v${{ github.event.inputs.release_version }}
+          tag: v${{ github.event.inputs.release_version }}-spectro
       -
         if: ${{ steps.checkTag.outputs.exists == 'true' }}
         run: |
-          echo "Tag already exists for spectro-v${{ github.event.inputs.release_version }}..."
+          echo "Tag already exists for v${{ github.event.inputs.release_version }}-spectro..."
           exit 1
       -
         uses: actions/checkout@v3
@@ -60,9 +60,9 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
-          tag_name: spectro-v${{ github.event.inputs.release_version }}
-          release_name: Release spectro-v${{ github.event.inputs.release_version }}
+          tag_name: v${{ github.event.inputs.release_version }}-spectro
+          release_name: Release v${{ github.event.inputs.release_version }}-spectro
           body: |
-            Release version ${{ github.event.inputs.release_version }}
+            Release version v${{ github.event.inputs.release_version }}-spectro
           draft: false
           prerelease: false

Dockerfile

@@ -15,7 +15,7 @@
 # limitations under the License.
 
 # Build the manager binary
-FROM golang:1.19.8 as toolchain
+FROM golang:1.19.10-alpine3.18 as toolchain
 
 # Run this with docker build --build_arg $(go env GOPROXY) to override the goproxy
 ARG goproxy=https://proxy.golang.org
@@ -28,6 +28,9 @@ ENV GOEXPERIMENT=${CRYPTO_LIB:+boringcrypto}
 FROM toolchain as builder
 WORKDIR /workspace
 
+RUN apk update
+RUN apk add git gcc g++ curl
+
 # Copy the Go Modules manifests
 COPY go.mod go.mod
 COPY go.sum go.sum
@@ -44,10 +47,15 @@ COPY ./ ./
 ARG package=.
 ARG ARCH
 ARG LDFLAGS
-RUN --mount=type=cache,target=/root/.cache/go-build \
+RUN  --mount=type=cache,target=/root/.cache/go-build \ 
     --mount=type=cache,target=/go/pkg/mod \
     --mount=type=cache,target=/root/.local/share/golang \
-    CGO_ENABLED=0 GOOS=linux GOARCH=${ARCH} go build -ldflags "${LDFLAGS} -extldflags '-static'"  -o manager ${package}
+    if [ ${CRYPTO_LIB} ]; \
+    then \
+    CGO_ENABLED=1 GOOS=linux GOARCH=${ARCH} go build -ldflags "${LDFLAGS} -linkmode=external  -extldflags '-static'"  -o manager ${package}; \
+    else \
+    CGO_ENABLED=0 GOOS=linux GOARCH=${ARCH} go build -ldflags "${LDFLAGS} -extldflags '-static'"  -o manager ${package}; \
+    fi
 ENTRYPOINT [ "/start.sh", "/workspace/manager" ]
 
 # Copy the controller-manager into a thin image