fix: cilium nightly pipeline set boringcrypto arg in build (#4063)

* skip goimg override

* test build go 1.25.0

* test go 1.25.0-1

* set nosystemcrypto

* test

* test

* set cgo

* try patching dockerfile

* insert patch differt loc

* update env

* update env 2

* update env 3

* set condtion for operator

* set condtion for operator fix

* set condtion for operator fix 2

* set condtion for operator fix 3

* add back build args

* test cgo 0

* set systemcrypto

* set systemcrypto test

* set goexperiment for microsoft img only

* replace nosystemcrypto with  boringcrypto

* cleanup docker no cache

* cleanup

* test

Author: camrynl

.pipelines/cni/cilium/nightly-release-test.yml

@@ -35,6 +35,7 @@ stages:
         steps:
           - bash: |
               set -ex
+              
               cd .pipelines/
               git clone https://github.com/cilium/cilium.git
               cd cilium
@@ -62,10 +63,20 @@ stages:
                 echo "alpine MCR image: ${alpineACR}"
                 ALPINE_ARGS="--build-arg ALPINE_IMAGE=${alpineACR} "
               fi
-              BUILD_ARGS=${GO_ARGS}${ALPINE_ARGS}
 
+              if [ "$(type)" = "docker-operator-generic-image" ]; then
+                # Apply patch to Dockerfile  
+                DOCKERFILE_PATH="./images/$(directory)/Dockerfile"
+                echo "Patching Dockerfile: $DOCKERFILE_PATH"
+                  
+                # Add ARG and ENV statements to disable systemcrypto for Microsoft Go
+                sed -i '/^FROM.*builder/a ARG GOEXPERIMENT=boringcrypto \nENV GOEXPERIMENT=${GOEXPERIMENT}' "$DOCKERFILE_PATH"
+              fi
+
+              BUILD_ARGS=${GO_ARGS}${ALPINE_ARGS}
               DOCKER_FLAGS="$BUILD_ARGS" \
               make $(type)
+              
             name: BuildCiliumImage
             displayName: "Build Cilium Image"
           - task: AzureCLI@2