fixup! Use Signed Binaries for Docker Build

Author: sheylatrudo

.pipelines/build/images.jobs.yaml

@@ -54,13 +54,6 @@ jobs:
       inputs:
         scriptPath: $(REPO_ROOT)/${{ job_data.templateContext.buildScript }}
 
-#    - task: ExtractFiles@1
-#      inputs:
-#        archiveFilePatterns: '**/*.?(tgz|tgz.gz|zip)'
-#        destinationFolder: $(OUT_DIR)
-#        cleanDestinationFolder: false
-#        overwriteExistingFiles: true
-
     - script: |
         ls -la "$SOURCE"
         cp "$SOURCE" "$DEST"

.pipelines/build/scripts/azure-ipam.sh

@@ -8,11 +8,12 @@ export CGO_ENABLED=0
 mkdir -p "$OUT_DIR"/bin
 mkdir -p "$OUT_DIR"/files
 
-pushd "$ROOT_DIR"/azure-ipam
+pushd "$REPO_ROOT"/azure-ipam
   go build -v -a -trimpath \
     -o "$OUT_DIR"/bin/azure-ipam \
-     -ldflags "-X github.com/Azure/azure-container-networking/azure-ipam/internal/buildinfo.Version="$AZURE_IPAM_VERSION" -X main.version="$AZURE_IPAM_VERSION"" \
-     -gcflags="-dwarflocationlists=true" \
+    -ldflags "-X github.com/Azure/azure-container-networking/azure-ipam/internal/buildinfo.Version="$AZURE_IPAM_VERSION" -X main.version="$AZURE_IPAM_VERSION"" \
+    -gcflags="-dwarflocationlists=true" \
+    main.go
 
   cp *.conflist "$OUT_DIR"/files/
 popd

.pipelines/build/scripts/dropgz.sh

@@ -2,19 +2,34 @@ export GOOS=$OS
 export GOARCH=$ARCH
 export CGO_ENABLED=0 
 
-DROPGZ_VERSION="${DROPGZ_VERSION:-v0.0.12}"
 DROPGZ_BUILD_DIR=$(mktemp -d -p "$GEN_DIR")
+PAYLOAD_DIR=$(mktemp -d -p "$GEN_DIR")
+DROPGZ_VERSION="${DROPGZ_VERSION:-v0.0.12}"
 DROPGZ_MOD_DOWNLOAD_PATH=""$ACN_PACKAGE_PATH"/dropgz@"$DROPGZ_VERSION""
 
 mkdir -p "$OUT_DIR"/bin
 mkdir -p "$DROPGZ_BUILD_DIR"
 
+echo >&2 "##[section]Construct DropGZ Embedded Payload"
+pushd "$PAYLOAD_DIR"
+  [[ -n $(stat "$OUT_DIR"/files 2>/dev/null || true) ]] && cp "$OUT_DIR"/files/* .
+  [[ -n $(stat "$OUT_DIR"/bin 2>/dev/null || true) ]] && cp "$OUT_DIR"/bin/* .
+  
+  sha256sum * > sum.txt
+  gzip --verbose --best --recursive .
+
+  for file in $(find . -name '*.gz'); do 
+    mv "$file" "${file%%.gz}"
+  done
+popd
+
+echo >&2 "##[section]Download DropGZ ($DROPGZ_VERSION)"
 GOPATH="$DROPGZ_BUILD_DIR" \
   go mod download "$DROPGZ_MOD_DOWNLOAD_PATH"
 
+echo >&2 "##[section]Build DropGZ with Embedded Payload"
 pushd "$DROPGZ_BUILD_DIR"/pkg/mod/"$DROPGZ_MOD_DOWNLOAD_PATH"
-  [[ -n $(stat "$OUT_DIR"/files 2>/dev/null || true) ]] && cp "$OUT_DIR"/files/* pkg/embed/fs/
-  [[ -n $(stat "$OUT_DIR"/bin 2>/dev/null || true) ]] && cp "$OUT_DIR"/bin/* pkg/embed/fs/
+  mv "$PAYLOAD_DIR"/* pkg/embed/fs/
   go build -v -trimpath -a \
     -o "$OUT_DIR"/bin/dropgz \
     -ldflags "-X github.com/Azure/azure-container-networking/dropgz/internal/buildinfo.Version="$DROPGZ_VERSION"" \

.pipelines/build/scripts/npm.sh

@@ -8,7 +8,7 @@ export CGO_ENABLED=0
 mkdir -p "$OUT_DIR"/files
 mkdir -p "$OUT_DIR"/bin
 
-pushd "$ROOT_DIR"/npm
+pushd "$REPO_ROOT"/npm
   go build -a -v -trimpath \
     -o "$OUT_DIR"/bin/azure-npm \
     -ldflags "-X main.version="$NPM_VERSION" -X "$NPM_AI_PATH"="$NPM_AI_ID"" \