From 50ebbbf25b30c742a5454722ac0584badc3bd7d9 Mon Sep 17 00:00:00 2001
From: mornyx <mornyx.z@gmail.com>
Date: Thu, 16 Nov 2023 00:16:48 +0800
Subject: [PATCH] *: add fips build support

Signed-off-by: mornyx <mornyx.z@gmail.com>
---
 Makefile              | 28 +++++++++++++++++++++-------
 utils/printer/fips.go |  6 ++++++
 2 files changed, 27 insertions(+), 7 deletions(-)
 create mode 100644 utils/printer/fips.go

diff --git a/Makefile b/Makefile
index a0a78d6..5af44eb 100644
--- a/Makefile
+++ b/Makefile
@@ -5,19 +5,33 @@ PACKAGES_TESTS ?= $$($(PACKAGE_LIST_TESTS))
 PACKAGE_DIRECTORIES := $(PACKAGE_LIST) | sed 's|github.com/pingcap/ng-monitoring/||'
 FILES     := $$(find $$($(PACKAGE_DIRECTORIES)) -name "*.go")
 FAIL_ON_STDOUT := awk '{ print } END { if (NR > 0) { exit 1 } }'
-
-LDFLAGS += -X "github.com/pingcap/ng-monitoring/utils/printer.NGMBuildTS=$(shell date -u '+%Y-%m-%d %H:%M:%S')"
-LDFLAGS += -X "github.com/pingcap/ng-monitoring/utils/printer.NGMGitHash=$(shell git rev-parse HEAD)"
-LDFLAGS += -X "github.com/pingcap/ng-monitoring/utils/printer.NGMGitBranch=$(shell git rev-parse --abbrev-ref HEAD)"
-
-GO              := GO111MODULE=on go
+BUILD_TS := $(shell date -u '+%Y-%m-%d %H:%M:%S')
+GIT_HASH := $(shell git rev-parse HEAD)
+GIT_BRANCH := $(shell git rev-parse --abbrev-ref HEAD)
+
+BUILD_GOEXPERIMENT ?=
+BUILD_CGO_ENABLED ?=
+BUILD_TAGS ?=
+ifeq ("${ENABLE_FIPS}", "1")
+	GIT_HASH := $(GIT_HASH) (with fips)
+	GIT_BRANCH := $(GIT_BRANCH) (with fips)
+	BUILD_TAGS += boringcrypto
+	BUILD_GOEXPERIMENT = GOEXPERIMENT=boringcrypto
+	BUILD_CGO_ENABLED = CGO_ENABLED=1
+endif
+
+LDFLAGS += -X "github.com/pingcap/ng-monitoring/utils/printer.NGMBuildTS=$(BUILD_TS)"
+LDFLAGS += -X "github.com/pingcap/ng-monitoring/utils/printer.NGMGitHash=$(GIT_HASH)"
+LDFLAGS += -X "github.com/pingcap/ng-monitoring/utils/printer.NGMGitBranch=$(GIT_BRANCH)"
+
+GO              := $(BUILD_GOEXPERIMENT) $(BUILD_CGO_ENABLED) GO111MODULE=on go
 GOBUILD         := $(GO) build
 GOTEST          := $(GO) test -p 8
 
 
 
 default:
-	$(GOBUILD) -ldflags '$(LDFLAGS)' -o bin/ng-monitoring-server ./main.go
+	$(GOBUILD) -ldflags '$(LDFLAGS)' -tags '${BUILD_TAGS}' -o bin/ng-monitoring-server ./main.go
 	@echo Build successfully!
 
 fmt:
diff --git a/utils/printer/fips.go b/utils/printer/fips.go
new file mode 100644
index 0000000..e9cebe9
--- /dev/null
+++ b/utils/printer/fips.go
@@ -0,0 +1,6 @@
+//go:build boringcrypto
+// +build boringcrypto
+
+package printer
+
+import _ "crypto/tls/fipsonly"