-
Notifications
You must be signed in to change notification settings - Fork 9
feat: [SVLS-6242] bottlecap fips builds #644
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: [SVLS-6242] bottlecap fips builds #644
Conversation
This does not yet work for alpine, unfortunately. We're seeing errors similar to aws/aws-lc-rs#762 so maybe this is not just us. |
e6f60f4
to
d6522d9
Compare
aeca829
to
1e97cd9
Compare
|
||
[features] | ||
default = ["reqwest/rustls-tls", "dogstatsd/default"] | ||
fips = [ |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
unfortunately, as written, the default feature is incompatible with the fips feature. so in order to build the fips feature correctly we have to disable the default feature. this is fine for normal builds where we don't care about fips, but it means that when building or checking the fips feature we have to remember to say --no-default-features
in addition to --features=fips
. our build scripts take care of this, but maybe there's a better way to do this?
f1b2982
to
5496e2b
Compare
25a6976
to
eea5a5b
Compare
f6c439d
to
a37ca6e
Compare
73c8b7e
to
323f346
Compare
37637a1
to
ebad2a7
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM – left a couple nits, but overall amazing job with this
16f91e8
to
d561651
Compare
…le for reqwest::Client::builder
d561651
to
57a6119
Compare
Building bottlecap with fips mode.
This is entirely focused on removing
ring
(and other non-FIPS-compliant dependencies from ourfips
-featured builds.)