Skip to content

[ART-14883] Migrate rhel-8 golang builder to hermetic builds#10003

Draft
lgarciaaco wants to merge 2 commits into
openshift-eng:rhel-8-golang-1.25from
lgarciaaco:rhel-8-golang-1.25
Draft

[ART-14883] Migrate rhel-8 golang builder to hermetic builds#10003
lgarciaaco wants to merge 2 commits into
openshift-eng:rhel-8-golang-1.25from
lgarciaaco:rhel-8-golang-1.25

Conversation

@lgarciaaco
Copy link
Copy Markdown
Contributor

Summary

Migrates rhel-8-golang-1.25 golang builder configuration to hermetic builds by removing network_mode: open. This enables network isolation during the build process while maintaining cross-compilation capabilities through pre-staged artifacts.

Changes

  • Remove network_mode: open from openshift-golang-builder.yml (RHEL 8 variant)
  • Maintain existing cachi2 artifact lockfile configuration
  • Supports OpenShift versions 4.21-5.0

Test Plan

  • Verify hermetic build compliance in Konflux
  • Confirm cross-compilation artifacts are accessible
  • Validate build success across supported architectures

JIRA: ART-14883

@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci Bot commented Apr 15, 2026

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

@openshift-ci openshift-ci Bot added the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Apr 15, 2026
@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci Bot commented Apr 15, 2026

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

Remove network_mode: open from rhel-8-golang-1.25 golang builder
configuration to enable hermetic builds. The existing cachi2
artifact lockfile will handle pre-staged cross-compilation
dependencies during the build process.

Addresses: ART-14883

rh-pre-commit.version: 2.3.2
rh-pre-commit.check-secrets: ENABLED
…builds

Add module stream configurations for python36:3.6, perl, perl-IO-Socket-SSL,
and perl-libwww-perl to resolve modular metadata dependency failures in
hermetic builds. These modules enable cachi2 to properly resolve RHEL 8
modular packages required by the golang builder Dockerfile.

Addresses: ART-14883

rh-pre-commit.version: 2.3.2
rh-pre-commit.check-secrets: ENABLED
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant