From 688b69a7a8059a36e8eb2dde8638597a1e2f44bd Mon Sep 17 00:00:00 2001 From: rambohe-ch Date: Wed, 17 Jun 2026 14:33:50 +1000 Subject: [PATCH] fix: unblock image build with Microsoft Go 1.26 systemcrypto Set GOEXPERIMENT=nosystemcrypto for the CGO_ENABLED=0 Docker build. This fixes the GitHub Actions build failure in run 27665616025 (build-scan-publish-gh-images, job 81818886651) where Microsoft Go 1.26 defaults to systemcrypto on Linux, which otherwise requires CGO_ENABLED=1. Also normalize FROM/AS casing in Dockerfile. --- Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 5a04fb9e..95d780a6 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,5 +1,5 @@ # Build the manager binary -FROM --platform=$BUILDPLATFORM mcr.microsoft.com/oss/go/microsoft/golang:1.26.4 as builder +FROM --platform=$BUILDPLATFORM mcr.microsoft.com/oss/go/microsoft/golang:1.26.4 AS builder ARG TARGETOS ARG TARGETARCH ARG KARPENTERVER @@ -28,7 +28,7 @@ COPY vendor/ vendor/ # by leaving it empty we can ensure that the container and binary shipped on it will have the same platform. RUN --mount=type=cache,target=${GOCACHE} \ --mount=type=cache,id=gpu-provisioner-controller,sharing=locked,target=/go/pkg/mod \ - CGO_ENABLED=0 GOOS=${TARGETOS:-linux} GOARCH=${TARGETARCH} GO111MODULE=on go build -a -o manager -ldflags "-X sigs.k8s.io/karpenter/pkg/operator.Version=${KARPENTERVER}" cmd/main.go + GOEXPERIMENT=nosystemcrypto CGO_ENABLED=0 GOOS=${TARGETOS:-linux} GOARCH=${TARGETARCH} GO111MODULE=on go build -a -o manager -ldflags "-X sigs.k8s.io/karpenter/pkg/operator.Version=${KARPENTERVER}" cmd/main.go # Use distroless as minimal base image to package the manager binary # Refer to https://github.com/GoogleContainerTools/distroless for more details