Description
Our containernetworking-plugins submodule is compiled and shipped with our operator. But it is compiled by explicitly setting CGO_ENABLED=0 which is not FIPS compliant. We need to remediate this.
Since we are cross-compiling (building Windows binary on a Linux system), we will likely need to use a Windows-compatible C compiler “CC=gcc-mingw-w64” in go build command. I found
- gcc-mingw-w64 - GNU C compiler for MinGW-w64
Acceptance Criteria
- All submodules are built in a FIPS compliant manner
- It is possible to build all submodules with both Dockerfile.ci and the Konflux Dockerfile
- links to
-
RHBA-2024:137899 Red Hat OpenShift for Windows Containers 10.18.0 product release
- mentioned on