new: ci: Add AlmaLinux 10 FIPS

Merge branch 'mnowak/add-almalinux-10-fips' into 'main'

See merge request isc-projects/bind9!10722

.gitlab-ci.yml

@@ -125,6 +125,15 @@ stages:
     - fips
     - shell
 
+.almalinux-10fips-amd64-image: &almalinux_10fips_amd64_image
+  tags:
+    - almalinux-10
+    - amd64
+    - autoscaler
+    - aws
+    - fips
+    - shell
+
 # Autoscaling GitLab Runner on AWS EC2 (amd64)
 
 .linux-amd64: &linux_amd64
@@ -315,7 +324,14 @@ stages:
   - cd bind-*
 
 .fips-feature-test: &fips_feature_test
-    - if build/feature-test --have-fips-mode; then fips-mode-setup --check; fips-mode-setup --is-enabled; fi
+    - if build/feature-test --have-fips-mode; then
+        if [ "$(cat /proc/sys/crypto/fips_enabled)" = "1" ]; then
+          echo "FIPS is enabled";
+        else
+          echo "FIPS is disabled";
+          exit 1;
+        fi
+      fi
 
 .check_for_junit_xml: &check_for_junit_xml
     # test if junit.xml file exists and is longer 40 bytes
@@ -891,6 +907,7 @@ gcc:8fips:amd64:
 system:gcc:8fips:amd64:
   <<: *almalinux_8fips_amd64_image
   <<: *system_test_job
+  <<: *api_pipelines_schedules_tags_triggers_web_triggering_rules
   variables:
     GIT_CLONE_PATH: "${GIT_CLONE_PATH_INSTANCE_EXECUTOR}"
   needs:
@@ -900,6 +917,7 @@ system:gcc:8fips:amd64:
 unit:gcc:8fips:amd64:
   <<: *almalinux_8fips_amd64_image
   <<: *unit_test_job
+  <<: *api_pipelines_schedules_tags_triggers_web_triggering_rules
   variables:
     GIT_CLONE_PATH: "${GIT_CLONE_PATH_INSTANCE_EXECUTOR}"
   needs:
@@ -935,6 +953,33 @@ unit:gcc:9fips:amd64:
     - job: gcc:9fips:amd64
       artifacts: true
 
+gcc:10fips:amd64:
+  variables:
+    CC: gcc
+    CFLAGS: "${CFLAGS_COMMON}"
+    EXTRA_CONFIGURE: "-Didn=enabled -Dfips=enabled -Dleak-detection=disabled"
+    GIT_CLONE_PATH: "${GIT_CLONE_PATH_INSTANCE_EXECUTOR}"
+  <<: *almalinux_10fips_amd64_image
+  <<: *build_job
+
+system:gcc:10fips:amd64:
+  <<: *almalinux_10fips_amd64_image
+  <<: *system_test_job
+  variables:
+    GIT_CLONE_PATH: "${GIT_CLONE_PATH_INSTANCE_EXECUTOR}"
+  needs:
+    - job: gcc:10fips:amd64
+      artifacts: true
+
+unit:gcc:10fips:amd64:
+  <<: *almalinux_10fips_amd64_image
+  <<: *unit_test_job
+  variables:
+    GIT_CLONE_PATH: "${GIT_CLONE_PATH_INSTANCE_EXECUTOR}"
+  needs:
+    - job: gcc:10fips:amd64
+      artifacts: true
+
 gcc:tarball:nosphinx:
   variables:
     CC: gcc