Added fips packages, dest prefix

Author: rahulreddy15

.github/workflows/on_prerelease.yaml

@@ -14,4 +14,7 @@ jobs:
       tag: ${{ github.event.release.tag_name }}
       integration: "f5"
       run_integration_nix: false
+      upload_fips_packages: true
+      dest_prefix: fips-test-nri-f5-rahul/
+      test_package: false
     secrets: inherit

.github/workflows/on_release.yaml

@@ -13,4 +13,5 @@ jobs:
     with:
       integration: f5
       tag: ${{ github.event.release.tag_name }}
+      upload_fips_packages: true
     secrets: inherit

CHANGELOG.md

@@ -9,6 +9,9 @@ Unreleased section should follow [Release Toolkit](https://github.com/newrelic/r
 
 ## Unreleased
 
+### enhancements
+- Add FIPS compliant packages
+
 ## v2.8.7 - 2025-08-07
 
 ### ⛓️ Dependencies

Makefile

@@ -6,6 +6,8 @@ GOFLAGS          = -mod=readonly
 GOLANGCI_LINT    = github.com/golangci/golangci-lint/cmd/golangci-lint
 GOCOV            = github.com/axw/gocov/gocov
 GOCOV_XML        = github.com/AlekSi/gocov-xml
+GO_VERSION 		 ?= $(shell grep '^go ' go.mod | awk '{print $$2}')
+BUILDER_IMAGE 	 ?= "ghcr.io/newrelic/coreint-automation:latest-go$(GO_VERSION)-ubuntu16.04"
 
 all: build
 

build/.goreleaser.yml

@@ -1,3 +1,6 @@
+---
+version: 2
+project_name: nri-f5
 builds:
   - id: nri-nix
     main: ./src
@@ -18,6 +21,26 @@ builds:
       - goos: darwin
         goarch: 386
 
+  - id: nri-f5-nix-fips
+    main: ./src
+    binary: nri-f5
+    ldflags:
+      - -s -w -X main.integrationVersion={{.Version}} -X main.gitCommit={{.Commit}} -X main.buildDate={{.Date}}
+    env:
+      - CGO_ENABLED=1
+      - GOEXPERIMENT=boringcrypto
+      - >-
+        {{- if eq .Arch "arm64" -}}
+        CC=aarch64-linux-gnu-gcc
+        {{- end }}
+    goos:
+      - linux
+    goarch:
+      - amd64
+      - arm64
+    tags:
+      - fips
+
   - id: nri-win
     main: ./src
     binary: nri-f5
@@ -35,6 +58,7 @@ builds:
 
 nfpms:
   - id: linux
+    package_name: nri-f5
     file_name_template: "{{ .ProjectName }}_{{ .Version }}-1_{{ .Arch }}"
     vendor: "New Relic, Inc."
     homepage: "https://www.newrelic.com/infrastructure"
@@ -64,15 +88,62 @@ nfpms:
 
     overrides:
       rpm:
-        file_name_template: "{{ .ProjectName }}-{{ .Version }}-1.{{ .Arch }}"
-        replacements:
-          amd64: x86_64
+        file_name_template: >-
+          {{- .ProjectName }}-
+          {{- .Version }}-1.
+          {{- if eq .Arch "amd64" -}}x86_64
+          {{- else -}}
+          {{ .Arch }}
+          {{- end }}
 
     # Formats to be generated.
     formats:
       - deb
       - rpm
 
+  - id: linux-fips
+    package_name: nri-f5-fips
+    file_name_template: "{{ .PackageName }}_{{ .Version }}-1_{{ .Arch }}"
+    vendor: "New Relic, Inc."
+    homepage: "https://www.newrelic.com/infrastructure"
+    maintainer: "New Relic Infrastructure Team <infrastructure-eng@newrelic.com>"
+    description: "New Relic Infrastructure f5 Integration extend the core New Relic\nInfrastructure agent's capabilities to allow you to collect metric and\nlive state data from f5 components."
+    license: "https://newrelic.com/terms (also see LICENSE installed with this package)"
+
+    builds:
+      - nri-f5-nix-fips
+
+    dependencies:
+      - newrelic-infra-fips (>= 1.60.0)
+
+    bindir: "/var/db/newrelic-infra/newrelic-integrations/bin"
+
+    contents:
+      - src: "f5-config.yml.sample"
+        dst: "/etc/newrelic-infra/integrations.d/f5-config.yml.sample"
+      - src: "CHANGELOG.md"
+        dst: "/usr/share/doc/nri-f5/CHANGELOG.md"
+      - src: "README.md"
+        dst: "/usr/share/doc/nri-f5/README.md"
+      - src: "LICENSE"
+        dst: "/usr/share/doc/nri-f5/LICENSE"
+      - src: "legacy/f5-definition.yml"
+        dst: "/var/db/newrelic-infra/newrelic-integrations/f5-definition.yml"
+        type: config
+
+    overrides:
+      rpm:
+        file_name_template: >-
+          {{- .ProjectName }}-fips-
+          {{- .Version }}-1.
+          {{- if eq .Arch "amd64" -}}x86_64
+          {{- else -}}
+          {{ .Arch }}
+          {{- end }}
+    formats:
+      - deb
+      - rpm
+
 archives:
   - id: nri-nix
     builds:
@@ -85,6 +156,17 @@ archives:
         strip_parent: true
     format: tar.gz
 
+  - id: nri-f5-nix-fips
+    builds:
+      - nri-f5-nix-fips
+    name_template: "{{ .ProjectName }}-fips_{{ .Os }}_{{ .Version }}_{{ .Arch }}_dirty"
+    files:
+      - f5-config.yml.sample
+      - src: 'legacy/f5-definition.yml'
+        dst: .
+        strip_parent: true
+    format: tar.gz
+
   - id: nri-win
     builds:
       - nri-win

build/Dockerfile

@@ -1,8 +1,9 @@
-BUILDER_TAG ?= nri-$(INTEGRATION)-builder
+.PHONY : ci/pull-builder-image
+ci/pull-builder-image:
+	@docker pull $(BUILDER_IMAGE)
 
 .PHONY : ci/deps
-ci/deps:
-	@docker build -t $(BUILDER_TAG) -f $(CURDIR)/build/Dockerfile $(CURDIR)
+ci/deps: ci/pull-builder-image
 
 .PHONY : ci/debug-container
 ci/debug-container: ci/deps
@@ -17,15 +18,15 @@ ci/debug-container: ci/deps
 			-e GPG_MAIL \
 			-e GPG_PASSPHRASE \
 			-e GPG_PRIVATE_KEY_BASE64 \
-			$(BUILDER_TAG) bash
+			$(BUILDER_IMAGE) bash
 
 .PHONY : ci/test
 ci/test: ci/deps
 	@docker run --rm -t \
 			--name "nri-$(INTEGRATION)-test" \
 			-v $(CURDIR):/go/src/github.com/newrelic/nri-$(INTEGRATION) \
 			-w /go/src/github.com/newrelic/nri-$(INTEGRATION) \
-			$(BUILDER_TAG) make test
+			$(BUILDER_IMAGE) make test
 
 .PHONY : ci/snyk-test
 ci/snyk-test:
@@ -46,7 +47,7 @@ ifdef TAG
 			-w /go/src/github.com/newrelic/nri-$(INTEGRATION) \
 			-e INTEGRATION \
 			-e TAG \
-			$(BUILDER_TAG) make release/build
+			$(BUILDER_IMAGE) make release/build
 else
 	@echo "===> $(INTEGRATION) ===  [ci/build] TAG env variable expected to be set"
 	exit 1
@@ -67,7 +68,7 @@ ifdef TAG
 			-e GPG_MAIL \
 			-e GPG_PASSPHRASE \
 			-e GPG_PRIVATE_KEY_BASE64 \
-			$(BUILDER_TAG) make release
+			$(BUILDER_IMAGE) make release
 else
 	@echo "===> $(INTEGRATION) ===  [ci/prerelease] TAG env variable expected to be set"
 	exit 1

build/ci.mk

@@ -1,5 +1,5 @@
 BUILD_DIR    := ./bin/
-GORELEASER_VERSION := v0.174.1
+GORELEASER_VERSION := v2.4.4
 GORELEASER_BIN ?= bin/goreleaser
 
 bin:
@@ -27,10 +27,10 @@ release/deps: $(GORELEASER_BIN)
 release/build: release/deps release/clean
 ifeq ($(PRERELEASE), true)
 	@echo "===> $(INTEGRATION) === [release/build] PRE-RELEASE compiling all binaries, creating packages, archives"
-	@$(GORELEASER_BIN) release --config $(CURDIR)/build/.goreleaser.yml --rm-dist
+	@$(GORELEASER_BIN) release --config $(CURDIR)/build/.goreleaser.yml --clean
 else
 	@echo "===> $(INTEGRATION) === [release/build] build compiling all binaries"
-	@$(GORELEASER_BIN) build --config $(CURDIR)/build/.goreleaser.yml --snapshot --rm-dist
+	@$(GORELEASER_BIN) build --config $(CURDIR)/build/.goreleaser.yml --snapshot --clean
 endif
 
 .PHONY : release/fix-archive
@@ -43,7 +43,7 @@ release/fix-archive:
 .PHONY : release/sign/nix
 release/sign/nix:
 	@echo "===> $(INTEGRATION) === [release/sign] signing packages"
-	@bash $(CURDIR)/build/nix/sign.sh
+	@bash sign.sh
 
 
 .PHONY : release/publish

build/nix/sign.sh

@@ -0,0 +1,11 @@
+// Copyright 2025 New Relic Corporation. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
+//go:build fips
+// +build fips
+
+package main
+
+import (
+	_ "crypto/tls/fipsonly"
+)