From 0897f495763a0d9ac7abe4527007d2640d6e2b2b Mon Sep 17 00:00:00 2001 From: Wade Simmons Date: Mon, 1 Jun 2026 10:36:05 -0400 Subject: [PATCH] default GODEBUG=fips140=only --- Makefile | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/Makefile b/Makefile index e69c2f4f..0d1a8d94 100644 --- a/Makefile +++ b/Makefile @@ -188,15 +188,15 @@ build/linux-arm64-boringcrypto/%: LDFLAGS += -checklinkname=0 # fips140 build/linux-amd64-fips140/%: GOENV += GOFIPS140=v1.0.0 -build/linux-amd64-fips140/%: LDFLAGS += -checklinkname=0 +build/linux-amd64-fips140/%: LDFLAGS += -checklinkname=0 -X runtime.godebugDefault=fips140=only build/linux-arm64-fips140/%: GOENV += GOFIPS140=v1.0.0 -build/linux-arm64-fips140/%: LDFLAGS += -checklinkname=0 +build/linux-arm64-fips140/%: LDFLAGS += -checklinkname=0 -X runtime.godebugDefault=fips140=only build/darwin-arm64-fips140/%: GOENV += GOFIPS140=v1.0.0 -build/darwin-arm64-fips140/%: LDFLAGS += -checklinkname=0 +build/darwin-arm64-fips140/%: LDFLAGS += -checklinkname=0 -X runtime.godebugDefault=fips140=only build/windows-amd64-fips140/%: GOENV += GOFIPS140=v1.0.0 -build/windows-amd64-fips140/%: LDFLAGS += -checklinkname=0 +build/windows-amd64-fips140/%: LDFLAGS += -checklinkname=0 -X runtime.godebugDefault=fips140=only build/windows-arm64-fips140/%: GOENV += GOFIPS140=v1.0.0 -build/windows-arm64-fips140/%: LDFLAGS += -checklinkname=0 +build/windows-arm64-fips140/%: LDFLAGS += -checklinkname=0 -X runtime.godebugDefault=fips140=only build/%/nebula: .FORCE GOOS=$(firstword $(subst -, , $*)) \ @@ -280,7 +280,7 @@ endif fips140: @echo > $(NULL_FILE) $(eval GOENV += GOFIPS140=v1.0.0) - $(eval LDFLAGS += -checklinkname=0) + $(eval LDFLAGS += -checklinkname=0 -X runtime.godebugDefault=fips140=only) $(eval TEST_FLAGS += -ldflags -checklinkname=0) $(eval TEST_ENV += $(GOENV)) ifeq ($(words $(MAKECMDGOALS)),1)