snapcraft: verify that we are using Go FIPS toolchain

Signed-off-by: Maciej Borzecki <[email protected]>
canonical · Sep 12, 2024 · 6f7de3b · 6f7de3b
1 parent 2704cbd
commit 6f7de3b
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/build-aux/snap/snapcraft.yaml b/build-aux/snap/snapcraft.yaml
@@ -235,6 +235,11 @@ parts:
       if [ -f fips-build ] ; then
           # use the fips channel of Go
           snap refresh --channel "$GO_TOOLCHAIN_FIPS_CHANNEL" go
+          # make sure it is really the Go FIPS toolchain
+          if ! test -f /snap/go/current/src/crypto/internal/backend/openssl_linux.go; then
+              echo "Go 1.21 FIPS toolchain not found"
+              exit 1
+          fi
       fi
       # make sure to set the version we declared in pull
       ./mkversion.sh "$VERSION"