Commit fcc0d2b
committed
Fix trixie FIPS Go package: correct version and robust changelog update
The GOLANG_VERSOIN variable was set to '1.24~2' but the golang-debian
submodule changelog has version '1.24.4-1'. This caused the sed command
in src/golang/Makefile to silently fail:
sed -i 's/1.24~2/1.24~2+fips/' debian/changelog
Since '1.24~2' doesn't appear in the changelog, the +fips suffix was
never added, and the published package was effectively stock Debian Go
without sonic-fips patches (sonic_fips detection, symcryptprovider).
Fixes:
1. Update GOLANG_VERSOIN to match actual debian changelog version
2. Use dpkg-parsechangelog in Makefile for robust version detection,
preventing this class of bug when the debian submodule is updated
This fixes FIPS test failures (fips/test_fips.py) for trixie containers
with Go binaries, where the telemetry process doesn't load symcrypt
because the Go runtime can't detect SONiC FIPS mode.
Fixes: #83
Signed-off-by: Dawei Huang <daweihuang@microsoft.com>1 parent 17168d7 commit fcc0d2b
2 files changed
Lines changed: 3 additions & 2 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
2 | 2 | | |
3 | 3 | | |
4 | 4 | | |
5 | | - | |
| 5 | + | |
6 | 6 | | |
7 | 7 | | |
8 | 8 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
16 | 16 | | |
17 | 17 | | |
18 | 18 | | |
19 | | - | |
| 19 | + | |
| 20 | + | |
20 | 21 | | |
21 | 22 | | |
22 | 23 | | |
| |||
0 commit comments