Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

FIPS #267

Merged
merged 34 commits into from
Mar 12, 2024
Merged

FIPS #267

merged 34 commits into from
Mar 12, 2024

Conversation

TingDaoK
Copy link
Contributor

@TingDaoK TingDaoK commented Jan 11, 2024

  • Add a helper to import golang
  • install golang>1.18 for ubuntu x64 images, I had a super weird tar extraction failure for those. So, just install them from docker file
  • Cmake magic to cross build with FIPS.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

@TingDaoK TingDaoK changed the title Fips support Add a helper to import golang Jan 11, 2024
@TingDaoK TingDaoK marked this pull request as ready for review January 11, 2024 23:48
import builder.core.util as util

URLs = {
'linux-armv6': 'https://go.dev/dl/go1.21.5.linux-armv6l.tar.gz',
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

any specific reason for 1.25.5?

if we just want latest versions, looks like we can them up here https://go.dev/dl/?mode=json

@@ -24,6 +24,12 @@ RUN apt-get update -qq \
ca-certificates \
&& apt-get clean

# Add the longsleep/golang-backports PPA
RUN apt-get update && apt-get install -y software-properties-common && add-apt-repository ppa:longsleep/golang-backports && apt-get update
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

debatable: I would rather investigate the failure on x64 instead of having two different methods for installing GO.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I did spend half a day to investigate it, and I don't know.

The issue is when we extract the go.tar.gz something failed. I tried different packages, and different ways to extract, no luck.

It only happens for ubuntu, and I gave up

@TingDaoK TingDaoK marked this pull request as draft January 19, 2024 21:15
@TingDaoK TingDaoK changed the title Add a helper to import golang FIPS Feb 19, 2024
@TingDaoK TingDaoK marked this pull request as ready for review February 19, 2024 22:01
@@ -18,7 +18,8 @@ RUN apk add \
ca-certificates \
cmake \
bash \
aws-cli
aws-cli \
perl-strictures
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why do we need this weird specific package?

https://metacpan.org/pod/strictures

strictures - Turn on strict and make most warnings fatal

Is there something more basic, named like perl?

Copy link
Contributor Author

@TingDaoK TingDaoK Mar 5, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

yeah, but aws-lc needs strict module for perl.

anyway, we are not turning fips on by default now. I can remove this

@TingDaoK TingDaoK merged commit 36ef287 into main Mar 12, 2024
74 checks passed
@TingDaoK TingDaoK deleted the fips branch March 12, 2024 22:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants