Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

MacOS FIPS crossbuild CI runner is broken #285

Closed
evanrittenhouse opened this issue Oct 17, 2024 · 0 comments · Fixed by #290
Closed

MacOS FIPS crossbuild CI runner is broken #285

evanrittenhouse opened this issue Oct 17, 2024 · 0 comments · Fixed by #290

Comments

@evanrittenhouse
Copy link
Contributor

Looks like:

warning: [email protected]: Compiler family detection failed due to error: ToolNotFound: Failed to find tool. Is `x86_64-unknown-linux-gnu-gcc` installed?
[221](https://github.com/cloudflare/boring/actions/runs/11025392135/job/30620183456#step:11:222)warning: [email protected]: Compiler family detection failed due to error: ToolNotFound: Failed to find tool. Is `x86_64-unknown-linux-gnu-g++` installed?
[222](https://github.com/cloudflare/boring/actions/runs/11025392135/job/30620183456#step:11:223)warning: [email protected]: Compiler family detection failed due to error: ToolNotFound: Failed to find tool. Is `x86_64-unknown-linux-gnu-gcc` installed?

First started failing in https://github.com/cloudflare/boring/actions/runs/11025392135/job/30620183456

rushilmehra added a commit that referenced this issue Oct 24, 2024
It seems we need to manually symlink the x86_64-unknown-linux-gnu
toolchain for the macos13 runner. Also, we don't need to overwrite the
python version anymore

Fixes #285
rushilmehra added a commit that referenced this issue Oct 24, 2024
It seems we need to manually symlink the x86_64-unknown-linux-gnu
toolchain for the macos13 runner. Also, we don't need to overwrite the
python version anymore

Fixes #285
rushilmehra added a commit that referenced this issue Oct 24, 2024
It seems we need to manually symlink the x86_64-unknown-linux-gnu
toolchain for the macos13 runner. Also, we don't need to overwrite the
python version anymore

Fixes #285
0x676e67 added a commit to 0x676e67/boring2 that referenced this issue Nov 3, 2024
* Release 4.10.3 (#280)

* Create semgrep.yml

Creating Semgrep.yml file - Semgrep is a tool that will be used to scan Cloudflare's public repos for Supply chain, code and secrets. This work is part of Application & Product Security team's initiative to onboard Semgrep onto all of Cloudflare's public repos.

In case of any questions, please reach out to "Hrushikesh Deshpande" on cf internal chat.

* Add "fips-compat" feature (#286)

This adds a feature to build against a BoringSSL version compatible with
the current boringssl-fips, but _without_ actually enabling the `fips`
feature.

This can be useful to use with `fips-link-precompiled` while using a
custom BoringSSL version based on the older FIPS branch.

* boring-sys: include HPKE header file for bindgen

BoringSSL doesn't expose these APIs for FIPs builds, so we gate them
here as well

* Release 4.11.0

* Add `set_cert_verify_callback` (`SSL_CTX_set_cert_verify`)

Add a wrapper for `SSL_CTX_set_cert_verify`, which allows consumers to
override the default certificate verification behavior.

The binding resembles `SSL_CTX_set_verify`'s.

See
https://docs.openssl.org/master/man3/SSL_CTX_set_cert_verify_callback/
for more details.

* Skip bindgen 0.70's layout tests before Rust 1.77

* (ci): brew link x86 toolchain for macos13 runner

It seems we need to manually symlink the x86_64-unknown-linux-gnu
toolchain for the macos13 runner. Also, we don't need to overwrite the
python version anymore

Fixes cloudflare/boring#285

* feat(boring): Add SSL_CURVE_X25519_MLKEM768 curve binding

---------

Co-authored-by: Rushil Mehra <[email protected]>
Co-authored-by: Hrushikesh Deshpande <[email protected]>
Co-authored-by: Alessandro Ghedini <[email protected]>
Co-authored-by: Evan Rittenhouse <[email protected]>
Co-authored-by: James Larisch <[email protected]>
Co-authored-by: Jordan Rose <[email protected]>
Co-authored-by: Rushil Mehra <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant