Make FIPS image locally buildable

[andriisoldatenko]

Description

resolves https://dt-rnd.atlassian.net/browse/DAQ-6756

Also this change is based on what we had before for CGO=1 builds.

!Note: Warning
By default it will build FIPS images using local platform, bc cross-compile takes long and useless for local debug.

Locally, you can build fips image via:

# this will build correct image name with `-fips` suffix for tag
OPERATOR_DEV_BUILD_PLATFORM="linux/arm64" make image/build/fips

# and will deploy this image to your cluster
make deploy/fips

first time it will be slow, and then when podman will cache layer, we are good and quick.

NOTE: It took 1h:05mins or my machine to build and image without cache by removing all cache
using podman system prune --all

How can this be tested?

build/deploy and run some standard tests, for example test/e2e/standard

also you can exec to operator pod and check envs:

bash-5.1$ env | grep -i fips
GOFIPS=1
LIBGCRYPT_FORCE_FIPS_MODE=1
bash-5.1$

[0sewa0]

Tried it, it works but wouldn't it make sense to:

• have a make target for it, like make images/build/fips or something
  • similar to

    dynatrace-operator/hack/make/deploy/deploy.mk

    Lines 8 to 9 in f5c6938

    	deploy/fips:
    	@make IMAGE_URI="$(IMAGE_URI)"-fips $(@D)

• As cross-compiling takes an AGE (1h), I don't see anyone actually using it like that. So I would make the default platfrom the same as the system when building FIPS locally

[andriisoldatenko]

Tried it, it works but wouldn't it make sense to:

• have a make target for it, like make images/build/fips or something

  • similar to

    dynatrace-operator/hack/make/deploy/deploy.mk

    Lines 8 to 9 in f5c6938

    	deploy/fips:
    	@make IMAGE_URI="$(IMAGE_URI)"-fips $(@D)

• As cross-compiling takes an AGE (1h), I don't see anyone actually using it like that. So I would make the default platfrom the same as the system when building FIPS locally

@0sewa0 tried to fix in 251d2da

[0sewa0]

ran OPERATOR_DEV_BUILD_PLATFORM="linux/arm64" make images/build/fips
worked