Disable micrsoft/go build telemetry (#5037)

* Disable micrsoft/go build telemetry

* update docs

Author: michel-laterman

Dockerfile.fips

@@ -17,6 +17,7 @@ ENV PATH="$PATH:/go/bin"
 ENV FIPS=true
 ENV CGO_ENABLED=1
 ENV MAGEFILE_CACHE=/fleet-server/build/.magefile
+ENV MS_GOTOOLCHAIN_TELEMETRY_ENABLED=0
 ENTRYPOINT [ "mage" ]
 CMD [ "build:release" ]
 
@@ -41,7 +42,7 @@ ARG DEV=""
 ARG SNAPSHOT=""
 ARG TARGETPLATFORM
 
-RUN FIPS=true CGO_ENABLED=1 GCFLAGS="${GCFLAGS}" LDFLAGS="${LDFLAGS}" SNAPSHOT="${SNAPSHOT}" DEV="${DEV}" PLATFORMS="${TARGETPLATFORM}" mage build:release
+RUN MS_GOTOOLCHAIN_TELEMETRY_ENABLED=0 FIPS=true CGO_ENABLED=1 GCFLAGS="${GCFLAGS}" LDFLAGS="${LDFLAGS}" SNAPSHOT="${SNAPSHOT}" DEV="${DEV}" PLATFORMS="${TARGETPLATFORM}" mage build:release
 
 FROM docker.elastic.co/wolfi/chainguard-base-fips:latest
 ARG VERSION

docs/fips.md

@@ -14,6 +14,7 @@ As we are using micrsoft/go as a base we follow their conventions.
 
 Our FIPS changes require the `requirefips` and `ms_tls13kdf` buildtags.
 When compiling `GOEXPERIMENT=systemcrypto` and `CGO_ENABLED=1` must be set.
+Additionally the `MS_GOTOOLCHAIN_TELEMETRY_ENABLED=0` env var is set to disable telemetry for [microsoft/go](https://github.com/microsoft/go).
 
 The `FIPS=true` env var is used by our magefile as the FIPS toggle.
 This env var applies to all targets, at a minimum the `requirefips` and `ms_tls13kdf` tags will be set.

magefile.go

@@ -363,6 +363,7 @@ func environMap() map[string]string {
 func addFIPSEnvVars(env map[string]string) {
 	env["GOEXPERIMENT"] = "systemcrypto"
 	env["CGO_ENABLED"] = "1"
+	env["MS_GOTOOLCHAIN_TELEMETRY_ENABLED"] = "0"
 }
 
 // teeCommand runs the specified command, stdout and stederr will be written to stdout and will be collected and returned.