chore: remove stale gitlab ssh and gowork config

Signed-off-by: Jingxiang Zhang <jingzhang@nvidia.com>

Author: jingxiang-z

.github/workflows/ci.yml

@@ -9,10 +9,6 @@ on:
 env:
   GO_VERSION: '1.24.13'
   GOFLAGS: '-trimpath'
-  GOPRIVATE: gitlab-master.nvidia.com/*
-  GONOPROXY: gitlab-master.nvidia.com/*
-  GONOSUMDB: gitlab-master.nvidia.com/*
-  GOWORK: off
 
 jobs:
   secret-detection:
@@ -67,10 +63,6 @@ jobs:
         with:
           go-version: ${{ env.GO_VERSION }}
 
-      - name: Configure Git for private repositories
-        run: |
-          git config --global url."https://git:${{ secrets.GITLAB_TOKEN }}@gitlab-master.nvidia.com/".insteadOf "https://gitlab-master.nvidia.com/"
-
       - name: Download dependencies
         run: go mod download
 
@@ -81,8 +73,6 @@ jobs:
 
       - name: Run golangci-lint
         uses: golangci/golangci-lint-action@v8
-        env:
-          GOWORK: off
         with:
           version: latest
           args: --timeout=5m
@@ -102,10 +92,6 @@ jobs:
         with:
           go-version: ${{ env.GO_VERSION }}
 
-      - name: Configure Git for private repositories
-        run: |
-          git config --global url."https://git:${{ secrets.GITLAB_TOKEN }}@gitlab-master.nvidia.com/".insteadOf "https://gitlab-master.nvidia.com/"
-
       - name: Download dependencies
         run: go mod download
 
@@ -141,10 +127,6 @@ jobs:
         with:
           go-version: ${{ env.GO_VERSION }}
 
-      - name: Configure Git for private repositories
-        run: |
-          git config --global url."https://git:${{ secrets.GITLAB_TOKEN }}@gitlab-master.nvidia.com/".insteadOf "https://gitlab-master.nvidia.com/"
-
       - name: Download dependencies
         run: go mod download
 
@@ -192,10 +174,6 @@ jobs:
         with:
           go-version: ${{ env.GO_VERSION }}
 
-      - name: Configure Git for private repositories
-        run: |
-          git config --global url."https://git:${{ secrets.GITLAB_TOKEN }}@gitlab-master.nvidia.com/".insteadOf "https://gitlab-master.nvidia.com/"
-
       - name: Download dependencies
         run: go mod download
 
@@ -231,10 +209,6 @@ jobs:
         with:
           go-version: ${{ env.GO_VERSION }}
 
-      - name: Configure Git for private repositories
-        run: |
-          git config --global url."https://git:${{ secrets.GITLAB_TOKEN }}@gitlab-master.nvidia.com/".insteadOf "https://gitlab-master.nvidia.com/"
-
       - name: Download dependencies
         run: go mod download
 

.github/workflows/release.yml

@@ -7,7 +7,6 @@ on:
 
 env:
   GO_VERSION: '1.24.13'
-  GOWORK: off
 
 permissions:
   contents: write  # Needed for creating GitHub releases
@@ -139,7 +138,6 @@ jobs:
           tags: |
             ${{ steps.agent_image.outputs.tags }}
             ${{ steps.agent_image_ghcr.outputs.tags }}
-          ssh: default
           build-args: |
             VERSION=${{ steps.version.outputs.version }}
             REVISION=${{ steps.version.outputs.commit }}

Dockerfile

@@ -1,35 +1,20 @@
-# This repo depends on a private module on gitlab-master.nvidia.com (see go.mod replace),
-# so you must provide credentials at build time via SSH agent forwarding:
-#     eval "$(ssh-agent -s)"; ssh-add ~/.ssh/id_ed25519
-#     DOCKER_BUILDKIT=1 docker build --ssh default -t fleet-intelligence-agent:dev .
 ARG DCGM_VERSION="4.4.2-1-ubuntu22.04"
 
 FROM golang:1.24.13 AS build
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
     ca-certificates \
     git \
-    openssh-client \
     build-essential \
   && rm -rf /var/lib/apt/lists/*
 
 WORKDIR /src
 
-RUN git config --global url."ssh://git@gitlab-master.nvidia.com:12051/".insteadOf "https://gitlab-master.nvidia.com/"
-RUN mkdir -p /root/.ssh && ssh-keyscan -p 12051 gitlab-master.nvidia.com >> /root/.ssh/known_hosts
-
-ARG GOPRIVATE=gitlab-master.nvidia.com
-ENV GOPRIVATE=${GOPRIVATE}
-ENV GONOSUMDB=${GOPRIVATE}
-# Ignore local go.work during container builds (no ../gpud in context)
-ENV GOWORK=off
-
 COPY go.mod go.sum ./
 # Local replace target must exist before go mod download (replace => ./third_party/fleet-intelligence-sdk).
 COPY third_party/fleet-intelligence-sdk ./third_party/fleet-intelligence-sdk
 
-# Download modules with ephemeral credentials (not persisted in image layers).
-RUN --mount=type=ssh /bin/sh -ceu 'go mod download'
+RUN go mod download
 
 COPY . .
 

Dockerfile.citests

@@ -52,7 +52,6 @@ RUN go install golang.org/x/vuln/cmd/govulncheck@latest && mv /go/bin/govulnchec
 
 WORKDIR /src
 
-ENV GOWORK=off
 ENV CGO_ENABLED=1
 ENV GOFLAGS=-trimpath
 

Makefile

@@ -10,9 +10,6 @@ DOCKER ?= docker
 IMAGE ?= fleet-intelligence-agent:dev
 DOCKER_BUILDKIT ?= 1
 DOCKER_BUILD_PROGRESS ?= auto
-# By default, use ssh-agent forwarding for private module access during `docker build`.
-# Set DOCKER_SSH= to disable (e.g. when using --secret/netrc in CI).
-DOCKER_SSH ?= default
 DOCKER_BUILD_EXTRA_FLAGS ?=
 
 # Root directory of the project (absolute path).
@@ -104,22 +101,20 @@ bin/%: cmd/% FORCE
 binaries: $(BINARIES) ## build binaries
 	@echo "Built binaries: $(BINARIES)"
 
-# Build container image (requires BuildKit for --ssh/--secret mounts used in Dockerfile)
+# Build container image (BuildKit enabled by default)
 docker-build: ## build container image (IMAGE=fleet-intelligence-agent:dev)
 	@echo "Building container image: $(IMAGE)"
 	@DOCKER_BUILDKIT=$(DOCKER_BUILDKIT) $(DOCKER) build \
-		$(if $(DOCKER_SSH),--ssh $(DOCKER_SSH),) \
 		--progress=$(DOCKER_BUILD_PROGRESS) \
 		-t $(IMAGE) \
 		$(DOCKER_BUILD_EXTRA_FLAGS) \
 		.
 
-# Build test image and run tests in container (requires SSH for private modules)
+# Build test image and run tests in container
 TEST_IMAGE ?= fleet-intelligence-agent:test
 docker-test: ## build test image and run tests in container
 	@echo "Building test image: $(TEST_IMAGE)"
 	@DOCKER_BUILDKIT=$(DOCKER_BUILDKIT) $(DOCKER) build -f Dockerfile.citests \
-		$(if $(DOCKER_SSH),--ssh $(DOCKER_SSH),) \
 		-t $(TEST_IMAGE) \
 		.
 	@echo "Running tests..."
@@ -132,15 +127,15 @@ fleetint: bin/fleetint ## build fleetint binary
 lint: ## run linting tools
 	@echo "Running linting..."
 	@if command -v $(GOLANGCI_LINT) >/dev/null 2>&1; then \
-		GOWORK=off $(GOLANGCI_LINT) run ./...; \
+		$(GOLANGCI_LINT) run ./...; \
 	else \
 		echo "golangci-lint not found, running basic checks..."; \
 		$(GOFMT) -l -s . | tee /tmp/gofmt.out; \
 		if [ -s /tmp/gofmt.out ]; then \
 			echo "Code formatting issues found. Run 'make fmt' to fix."; \
 			exit 1; \
 		fi; \
-		GOWORK=off go vet ./...; \
+		go vet ./...; \
 	fi
 
 fmt: ## format Go code

docs/development.md

@@ -15,14 +15,6 @@ cd fleetint
 - **GoReleaser**: For building packages (install from [goreleaser.com](https://goreleaser.com/install/))
 - **For ARM64 cross-compilation** (optional): `gcc-aarch64-linux-gnu` and `g++-aarch64-linux-gnu`
 
-### Configure Go Environment
-
-For NVIDIA internal development, configure Go for private repository access:
-
-```bash
-go env -w GOPRIVATE=gitlab-master.nvidia.com/*
-```
-
 ### Build
 
 ```bash
@@ -200,4 +192,3 @@ make package-snapshot  # Build packages (no git tag required)
 ## Contributing
 
 See [CONTRIBUTING.md](../CONTRIBUTING.md) for detailed contribution guidelines.
-