Fips changes for Static Linking

Dockerfile

@@ -5,15 +5,20 @@ FROM golang:1.21.4-alpine3.18 as dev
 ARG CRYPTO_LIB
 ENV GOEXPERIMENT=${CRYPTO_LIB:+boringcrypto}
 
-RUN apk add --no-cache git ca-certificates make
+RUN apk add --no-cache git ca-certificates make  gcc g++
 RUN adduser -D appuser
 COPY . /src/
 WORKDIR /src
 
 ENV GO111MODULE=on
 RUN --mount=type=cache,sharing=locked,id=gomod,target=/go/pkg/mod/cache \
     --mount=type=cache,sharing=locked,id=goroot,target=/root/.cache/go-build \
-    CGO_ENABLED=0 GOOS=linux make build
+    if [ ${CRYPTO_LIB} ]; \
+    then \
+    CGO_ENABLED=1 FIPS_ENABLE=yes GOOS=linux make build ;\
+    else \
+    CGO_ENABLED=0 GOOS=linux make build ;\
+    fi
 
 FROM scratch
 # Add Certificates into the image, for anything that does API calls

Makefile

@@ -24,6 +24,9 @@ TARGETOS=linux
 
 # Use linker flags to provide version/build settings to the target
 LDFLAGS=-ldflags "-s -w -X=main.Version=$(VERSION) -X=main.Build=$(BUILD) -extldflags -static"
+ifeq ($(FIPS_ENABLE),yes)
+  LDFLAGS=-ldflags "-s -w -X=main.Version=$(VERSION) -X=main.Build=$(BUILD) -linkmode=external  -extldflags -static"
+endif
 DOCKERTAG ?= $(VERSION)
 REPOSITORY ?= plndr
 
@@ -84,7 +87,7 @@ dockerx86:
 
 docker:
 	@-rm ./kube-vip
-	@docker buildx build --build-arg CRYPTO_LIB=${FIPS_ENABLE}  --platform linux/amd64 --push -t ${IMG} .
+	@docker buildx build --build-arg CRYPTO_LIB=${FIPS_ENABLE} --push  --platform linux/amd64 -t ${IMG} .
 	@echo New Multi Architecture Docker image created
 
 ## Local (docker load of images)