Add FIPS download for gitlab-runner

When FIPS is available on the host system, we should download the FIPS
binary for `gitlab-runner` by default. Users who do not want the FIPS
binary for some reason can use the non-FIPS binary by setting the
`ENABLE_FIPS` build-arg to `false`.
This commit is contained in:
Ryan Egesdahl
2024-04-08 00:06:30 -07:00
parent 1afb2496a0
commit 89457026c7
2 changed files with 11 additions and 1 deletions

View File

@@ -53,6 +53,9 @@ ARG GITLAB_URL=https://gitlab.com/
# container images using podman or buildah. Otherwise may be set 'false'.
ARG NESTED_PRIVILEGED=true
# Download the FIPS version of gitlab-runner when enabled on the host system.
ARG ENABLE_FIPS=true
# The registration runlabel may be called multiple times to register more than
# one runner. Each expects a REGISTRATION_TOKEN secret to be pre-defined and
# the file './config.toml' to exist (may be empty). A local-cache volume