Add support for optional prebuilt Go binaries in Dockerfiles

Author: hbelmiro

backend/Dockerfile

@@ -31,8 +31,15 @@ RUN GO111MODULE=on go mod download
 # Copy the source
 COPY ${SOURCE_CODE}/ ./
 
-RUN GO111MODULE=on CGO_ENABLED=1 GOEXPERIMENT=strictfipsruntime go build -tags strictfipsruntime -o /bin/apiserver ./backend/src/apiserver/ && \
-    dnf clean all
+# Accept an optional prebuilt Go binary
+ARG PREBUILT_BINARY="unset"
+
+RUN if [ "$PREBUILT_BINARY" = "unset" ]; then \
+      GO111MODULE=on CGO_ENABLED=1 GOEXPERIMENT=strictfipsruntime go build -tags strictfipsruntime -o /bin/apiserver ./backend/src/apiserver/ ;\
+    else \
+      cp "${PREBUILT_BINARY}" /bin/apiserver ;\
+    fi \
+    && dnf clean all
 
 # 2. Compile preloaded pipeline samples
 FROM registry.access.redhat.com/ubi9/python-39:9.5 as compiler

backend/Dockerfile.driver

@@ -20,6 +20,7 @@ FROM registry.access.redhat.com/ubi9/go-toolset:1.23 as builder
 
 ## Build args to be used at this step
 ARG SOURCE_CODE
+ARG PREBUILT_BINARY="unset"
 
 ## Switch to root as required for some operations
 USER root
@@ -34,7 +35,15 @@ RUN GO111MODULE=on go mod download
 # Copy the source
 COPY ${SOURCE_CODE}/ ./
 
-RUN GO111MODULE=on CGO_ENABLED=1 GOOS=linux GOARCH=amd64 GOEXPERIMENT=strictfipsruntime go build -tags 'netgo strictfipsruntime' -o /bin/driver ./backend/src/v2/cmd/driver/*.go
+# Accept an optional prebuilt Go binary
+COPY ${PREBUILT_BINARY} /tmp/prebuilt-driver
+
+# If PREBUILT_BINARY is set, use it; otherwise, build from source
+RUN if [ "$PREBUILT_BINARY" = "unset" ]; then \
+      GO111MODULE=on CGO_ENABLED=1 GOOS=linux GOARCH=amd64 GOEXPERIMENT=strictfipsruntime go build -tags 'netgo strictfipsruntime' -o /bin/driver ./backend/src/v2/cmd/driver/*.go; \
+    else \
+      cp /tmp/prebuilt-driver /bin/driver; \
+    fi
 
 FROM registry.access.redhat.com/ubi9/ubi-minimal:9.5
 

backend/Dockerfile.launcher

@@ -36,8 +36,16 @@ RUN GO111MODULE=on go mod download
 # Copy the source
 COPY ${SOURCE_CODE}/ ./
 
-RUN GO111MODULE=on CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -tags netgo -ldflags '-extldflags "-static"' -o /bin/launcher-v2 ./backend/src/v2/cmd/launcher-v2/*.go
-RUN GO111MODULE=on CGO_ENABLED=1 GOOS=linux GOARCH=amd64 GOEXPERIMENT=strictfipsruntime go build -tags 'netgo strictfipsruntime' -o /bin/launcher-v2-fips ./backend/src/v2/cmd/launcher-v2/*.go
+# Accept an optional prebuilt Go binary
+ARG PREBUILT_BINARY="unset"
+
+RUN if [ "$PREBUILT_BINARY" = "unset" ]; then \
+      GO111MODULE=on CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -tags netgo -ldflags '-extldflags "-static"' -o /bin/launcher-v2 ./backend/src/v2/cmd/launcher-v2/*.go && \
+      GO111MODULE=on CGO_ENABLED=1 GOOS=linux GOARCH=amd64 GOEXPERIMENT=strictfipsruntime go build -tags 'netgo strictfipsruntime' -o /bin/launcher-v2-fips ./backend/src/v2/cmd/launcher-v2/*.go ;\
+    else \
+      cp "${PREBUILT_BINARY}" /bin/launcher-v2 && \
+      cp "${PREBUILT_BINARY}" /bin/launcher-v2-fips ;\
+    fi
 
 FROM registry.access.redhat.com/ubi9/ubi-minimal:9.5
 

backend/Dockerfile.persistenceagent

@@ -35,7 +35,16 @@ RUN GO111MODULE=on go mod download
 # Copy the source
 COPY ${SOURCE_CODE}/ ./
 
-RUN GO111MODULE=on CGO_ENABLED=1 GOEXPERIMENT=strictfipsruntime go build -tags strictfipsruntime -o /bin/persistence_agent backend/src/agent/persistence/*.go
+# Accept an optional prebuilt Go binary
+ARG PREBUILT_BINARY="unset"
+COPY ${PREBUILT_BINARY} /tmp/prebuilt-persistence-agent
+
+# If PREBUILT_BINARY is set, use it; otherwise, build from source
+RUN if [ "$PREBUILT_BINARY" = "unset" ]; then \
+      GO111MODULE=on CGO_ENABLED=1 GOEXPERIMENT=strictfipsruntime go build -tags strictfipsruntime -o /bin/persistence_agent backend/src/agent/persistence/*.go; \
+    else \
+      cp /tmp/prebuilt-persistence-agent /bin/persistence_agent; \
+    fi
 
 FROM registry.access.redhat.com/ubi9/ubi-minimal:9.5
 WORKDIR /bin

backend/Dockerfile.scheduledworkflow

@@ -40,7 +40,16 @@ RUN GO111MODULE=on go mod download
 # Copy the source
 COPY ${SOURCE_CODE}/ ./
 
-RUN GO111MODULE=on CGO_ENABLED=1 GOEXPERIMENT=strictfipsruntime go build -tags strictfipsruntime -o /bin/controller backend/src/crd/controller/scheduledworkflow/*.go
+# Accept an optional prebuilt Go binary
+ARG PREBUILT_BINARY="unset"
+COPY ${PREBUILT_BINARY} /tmp/prebuilt-controller
+
+# If PREBUILT_BINARY is set, use it; otherwise, build from source
+RUN if [ "$PREBUILT_BINARY" = "unset" ]; then \
+      GO111MODULE=on CGO_ENABLED=1 GOEXPERIMENT=strictfipsruntime go build -tags strictfipsruntime -o /bin/controller backend/src/crd/controller/scheduledworkflow/*.go; \
+    else \
+      cp /tmp/prebuilt-controller /bin/controller; \
+    fi
 
 FROM registry.access.redhat.com/ubi9/ubi-minimal:9.5
 WORKDIR /bin