Add AlmaLinux 10 FIPS

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 5ece4230be5da3f299c64ea1ada474374a8833a4..9635893d82a09ba062ada7eac3caaf59e21ff602 100644 (file)
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -125,6 +125,15 @@ stages:
     - fips
     - shell
 
+.almalinux-10fips-amd64-image: &almalinux_10fips_amd64_image
+  tags:
+    - almalinux-10
+    - amd64
+    - autoscaler
+    - aws
+    - fips
+    - shell
+
 # Autoscaling GitLab Runner on AWS EC2 (amd64)
 
 .linux-amd64: &linux_amd64
@@ -315,7 +324,14 @@ stages:
   - cd bind-*
 
 .fips-feature-test: &fips_feature_test
-    - if build/feature-test --have-fips-mode; then fips-mode-setup --check; fips-mode-setup --is-enabled; fi
+    - if build/feature-test --have-fips-mode; then
+        if [ "$(cat /proc/sys/crypto/fips_enabled)" = "1" ]; then
+          echo "FIPS is enabled";
+        else
+          echo "FIPS is disabled";
+          exit 1;
+        fi
+      fi
 
 .check_for_junit_xml: &check_for_junit_xml
     # test if junit.xml file exists and is longer 40 bytes
@@ -937,6 +953,33 @@ unit:gcc:9fips:amd64:
     - job: gcc:9fips:amd64
       artifacts: true
 
+gcc:10fips:amd64:
+  variables:
+    CC: gcc
+    CFLAGS: "${CFLAGS_COMMON}"
+    EXTRA_CONFIGURE: "-Didn=enabled -Dfips=enabled -Dleak-detection=disabled"
+    GIT_CLONE_PATH: "${GIT_CLONE_PATH_INSTANCE_EXECUTOR}"
+  <<: *almalinux_10fips_amd64_image
+  <<: *build_job
+
+system:gcc:10fips:amd64:
+  <<: *almalinux_10fips_amd64_image
+  <<: *system_test_job
+  variables:
+    GIT_CLONE_PATH: "${GIT_CLONE_PATH_INSTANCE_EXECUTOR}"
+  needs:
+    - job: gcc:10fips:amd64
+      artifacts: true
+
+unit:gcc:10fips:amd64:
+  <<: *almalinux_10fips_amd64_image
+  <<: *unit_test_job
+  variables:
+    GIT_CLONE_PATH: "${GIT_CLONE_PATH_INSTANCE_EXECUTOR}"
+  needs:
+    - job: gcc:10fips:amd64
+      artifacts: true
+
 gcc:tarball:nosphinx:
   variables:
     CC: gcc