mirror of
https://github.com/VictoriaMetrics/VictoriaMetrics.git
synced 2026-05-17 08:36:55 +03:00
cbc2d536c1
This commit adds the following changes to the enterprise version: - add make target for testing in FIPS mode - disallow using OVH in FIPS mode. OVH is using SHA1 for authentication via headers and SHA1 is not allowed to be used in FIPS mode. There is no option to switch to another hashing algorithm in OVH API, so disabling it completely. - build fips binaries together with regular ones. This will allow to make sure that FIPS builds are always up to date and compatible with regular ones. - disable CGO in FIPS builds for vmagent, since vmagent imports Kafka library which uses CGO imports. This might lead to using OpenSSL version which is not certified for FIPS mode. Using pure Go implementation allows to avoid this and keep all validations on Go build process side.
13 lines
495 B
Docker
13 lines
495 B
Docker
# See https://medium.com/on-docker/use-multi-stage-builds-to-inject-ca-certs-ad1e8f01de1b
|
|
ARG certs_image=non-existing
|
|
ARG root_image=non-existing
|
|
FROM $certs_image AS certs
|
|
RUN apk update && apk upgrade && apk --update --no-cache add ca-certificates
|
|
|
|
FROM $root_image
|
|
COPY --from=certs /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
|
|
ENTRYPOINT ["/vmctl-prod"]
|
|
ARG TARGETARCH
|
|
ARG BINARY_SUFFIX=non-existing
|
|
COPY vmctl-linux-${TARGETARCH}-prod${BINARY_SUFFIX} ./vmctl-prod
|