As of writing, CBL-Mariner downloads the upstream Go source archives and builds them. A possible next step is CBL-Mariner downloading our release branch source archives and building those, instead. The goal is for CBL-Mariner to download the source archives of our FIPS-compatible branch and include that in the distro.
We need to deliver source archives (status: complete, via GitHub releases as requested by CBL-Mariner team #398), and work with CBL-Mariner to have them switch over.
It might make sense for Mariner to build both FIPS and non-FIPS source archives and use alternatives (or some alternative to alternatives 😄) so CBL-Mariner users can pick the version they need.
As of writing, CBL-Mariner downloads the upstream Go source archives and builds them. A possible next step is CBL-Mariner downloading our release branch source archives and building those, instead. The goal is for CBL-Mariner to download the source archives of our FIPS-compatible branch and include that in the distro.
We need to deliver source archives (status: complete, via GitHub releases as requested by CBL-Mariner team #398), and work with CBL-Mariner to have them switch over.
It might make sense for Mariner to build both FIPS and non-FIPS source archives and use alternatives (or some alternative to alternatives 😄) so CBL-Mariner users can pick the version they need.