From 60e50c6e15b9c9bcb8c6d1a91f069ef47aecfb8e Mon Sep 17 00:00:00 2001
From: Michal Nowak <mnowak@isc.org>
Date: Wed, 9 Dec 2020 12:04:38 +0100
Subject: [PATCH] Add scheduled FIPS mode jobs

---
 .gitlab-ci.yml | 60 ++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 60 insertions(+)

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index a1f1692dfc..3935aa44d4 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -116,10 +116,18 @@ stages:
   image: "$CI_REGISTRY_IMAGE:oraclelinux-8-amd64"
   <<: *linux_amd64
 
+.oraclelinux-8fips-amd64: &oraclelinux_8fips_amd64_image
+  image: "oraclelinux-8fips-x86_64"
+  <<: *libvirt_amd64
+
 .oraclelinux-9-amd64: &oraclelinux_9_amd64_image
   image: "$CI_REGISTRY_IMAGE:oraclelinux-9-amd64"
   <<: *linux_amd64
 
+.oraclelinux-9fips-amd64: &oraclelinux_9fips_amd64_image
+  image: "oraclelinux-9fips-x86_64"
+  <<: *libvirt_amd64
+
 # Debian
 
 .debian-bullseye-amd64: &debian_bullseye_amd64_image
@@ -625,6 +633,58 @@ unit:gcc:oraclelinux9:amd64:
   <<: *unit_test_job
   needs:
     - job: gcc:oraclelinux9:amd64
+
+# Jobs for scheduled GCC builds on Oracle Linux 8 & 9 FIPS-aware images with
+# FIPS mode in BIND 9 enabled
+
+gcc:8fips:amd64:
+  variables:
+    CC: gcc
+    CFLAGS: "${CFLAGS_COMMON}"
+    EXTRA_CONFIGURE: "--with-libidn2 --enable-fips-mode"
+  <<: *oraclelinux_8fips_amd64_image
+  <<: *build_job
+  <<: *api_schedules_tags_triggers_web_triggering_rules
+
+system:gcc:8fips:amd64:
+  <<: *oraclelinux_8fips_amd64_image
+  <<: *system_test_job
+  <<: *api_schedules_tags_triggers_web_triggering_rules
+  needs:
+    - job: gcc:8fips:amd64
+      artifacts: true
+
+unit:gcc:8fips:amd64:
+  <<: *oraclelinux_8fips_amd64_image
+  <<: *unit_test_job
+  <<: *api_schedules_tags_triggers_web_triggering_rules
+  needs:
+    - job: gcc:8fips:amd64
+      artifacts: true
+
+gcc:9fips:amd64:
+  variables:
+    CC: gcc
+    CFLAGS: "${CFLAGS_COMMON}"
+    EXTRA_CONFIGURE: "--with-libidn2 --enable-fips-mode"
+  <<: *oraclelinux_9fips_amd64_image
+  <<: *build_job
+  <<: *api_schedules_tags_triggers_web_triggering_rules
+
+system:gcc:9fips:amd64:
+  <<: *oraclelinux_9fips_amd64_image
+  <<: *system_test_job
+  <<: *api_schedules_tags_triggers_web_triggering_rules
+  needs:
+    - job: gcc:9fips:amd64
+      artifacts: true
+
+unit:gcc:9fips:amd64:
+  <<: *oraclelinux_9fips_amd64_image
+  <<: *unit_test_job
+  <<: *api_schedules_tags_triggers_web_triggering_rules
+  needs:
+    - job: gcc:9fips:amd64
       artifacts: true
 
 gcc:tarball:nosphinx: