feat: enable multi platform build

.tekton/tuf-tool-pull-request.yaml

@@ -44,15 +44,25 @@ spec:
     value: "true"
   - name: fips-check
     value: "true"
+  - name: path-context
+    value: .
+  - name: image-version
+    value: "0.0.1"
+  - name: build-platforms
+    value:
+      - linux/x86_64
+      - linux/arm64
+      - linux/ppc64le
+      - linux/s390x
   pipelineRef:
-    params:
-    - name: url
-      value: https://github.com/securesign/pipelines.git
-    - name: revision
-      value: main
-    - name: pathInRepo
-      value: pipelines/docker-build-oci-ta.yaml
     resolver: git
+    params:
+      - name: url
+        value: 'https://github.com/securesign/pipelines.git'
+      - name: revision
+        value: 'main'
+      - name: pathInRepo
+        value: 'pipelines/docker-build-multi-platform-oci-ta.yaml'
   taskRunTemplate:
     serviceAccountName: build-pipeline-tuf-tool
   workspaces:

.tekton/tuf-tool-push.yaml

@@ -32,6 +32,10 @@ spec:
     value: quay.io/securesign/cli-tuftool:{{revision}}
   - name: dockerfile
     value: Dockerfile.rh
+  - name: path-context
+    value: .
+  - name: image-version
+    value: "0.0.1"
   - name: build-source-image
     value: "true"
   - name: prefetch-input
@@ -42,15 +46,21 @@ spec:
     value: "true"
   - name: fips-check
     value: "true"
+  - name: build-platforms
+    value:
+      - linux/x86_64
+      - linux/arm64
+      - linux/ppc64le
+      - linux/s390x
   pipelineRef:
-    params:
-    - name: url
-      value: https://github.com/securesign/pipelines.git
-    - name: revision
-      value: main
-    - name: pathInRepo
-      value: pipelines/docker-build-oci-ta.yaml
     resolver: git
+    params:
+      - name: url
+        value: 'https://github.com/securesign/pipelines.git'
+      - name: revision
+        value: 'main'
+      - name: pathInRepo
+        value: 'pipelines/docker-build-multi-platform-oci-ta.yaml'
   taskRunTemplate:
     serviceAccountName: build-pipeline-tuf-tool
   workspaces:

Dockerfile.rh

@@ -4,11 +4,13 @@ ENV CGO_ENABLED=1 \
 
 USER root
 
-RUN dnf install -y perl gcc openssl openssl-devel cmake gcc-c++ git curl-minimal unzip cyrus-sasl-devel rust cargo
+RUN dnf install -y perl gcc openssl openssl-devel cmake gcc-c++ git curl-minimal unzip cyrus-sasl-devel rust cargo \
+    $(case "$(uname -m)" in ppc64le|s390x) echo clang ;; esac)
 
 RUN mkdir /tmp/tuftool
 COPY . /tmp/tuftool
-RUN cd /tmp/tuftool && cargo build --release --features fips
+RUN case "$(uname -m)" in s390x) export CFLAGS="-Wno-error=string-compare" ;; esac && \
+    cd /tmp/tuftool && cargo build --release --features fips
 
 FROM registry.access.redhat.com/ubi9/ubi:latest@sha256:9e6e193bfc3596a84d2a32f42d6b1552398ec9735b9a4e893a0fc3c6fbccb381 as deploy
 

rpms.in.yaml

@@ -1,4 +1,4 @@
-packages: [perl, gcc, openssl, openssl-devel, cmake, gcc-c++, git, curl-minimal, unzip, cyrus-sasl-devel, rust, cargo]
+packages: [perl, gcc, openssl, openssl-devel, cmake, gcc-c++, git, curl-minimal, unzip, cyrus-sasl-devel, rust, cargo, clang]
 contentOrigin:
   repofiles: ["./ubi.repo"]
-arches: [x86_64]
+arches: [x86_64, aarch64, ppc64le, s390x]