1
0
mirror of https://github.com/siderolabs/kres.git synced 2026-02-05 09:45:35 +01:00

fix: disable ML-KEM/X25519 in FIPS-140 strict mode

See https://github.com/golang/go/issues/75166

This is a workaround for now with Go 1.25, a proper fix might come from
the Go side.

Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com>
This commit is contained in:
Andrey Smirnov
2025-08-27 18:38:07 +04:00
parent 058c60fe06
commit 4a927f766c

View File

@@ -153,7 +153,7 @@ func (tests *UnitTests) CompileDockerfile(output *dockerfile.Output) error {
MountCache(filepath.Join(tests.meta.GoPath, "pkg"), tests.meta.GitHubRepository).
MountCache("/tmp", tests.meta.GitHubRepository).
Env("GOFIPS140", "latest").
Env("GODEBUG", "fips140=only")))
Env("GODEBUG", "fips140=only,tlsmlkem=0")))
}
return nil