Update to Go 1.24.3

Closes #102

See merge request https://gitlab.com/gitlab-org/gitlab-omnibus-builder/-/merge_requests/383



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Dustin Collins <714871-dustinmm80@users.noreply.gitlab.com>
Co-authored-by: dustinmm80 <dcollins@gitlab.com>
Co-authored-by: Robert Marshall <rmarshall@gitlab.com>

Closes https://gitlab.com/gitlab-org/gitlab-omnibus-builder/-/issues/102



Signed-off-by: Robert Marshall <rmarshall@gitlab.com>

Add arm64 variant of distribution_ci_tools

See merge request https://gitlab.com/gitlab-org/gitlab-omnibus-builder/-/merge_requests/386



Merged-by: Robert Marshall <rmarshall@gitlab.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Co-authored-by: Balasankar "Balu" C <balasankar@gitlab.com>

- Supports the goal of multi-arch container images in Omnibus GitLab
  via the inclusion of arm64 tools.

Related https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/5673



Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>

Remove Raspberry Pi builder images

See merge request https://gitlab.com/gitlab-org/gitlab-omnibus-builder/-/merge_requests/385



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: dustinmm80 <dcollins@gitlab.com>

Update to Go 1.23.9

See merge request https://gitlab.com/gitlab-org/gitlab-omnibus-builder/-/merge_requests/384



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Andrew Patterson <apatterson@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Robert Marshall <rmarshall@gitlab.com>

- Updates Go version to 1.23.9

Signed-off-by: Robert Marshall <rmarshall@gitlab.com>

Install Meson-compatible version of Ninja on Amazon Linux 2

See merge request https://gitlab.com/gitlab-org/gitlab-omnibus-builder/-/merge_requests/380



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Hossein Pursultani <hpursultani@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Patrick Steinhardt <psteinhardt@gitlab.com>

CI: Use gcr mirror in DinD

See merge request https://gitlab.com/gitlab-org/gitlab-omnibus-builder/-/merge_requests/379



Merged-by: Robert Marshall <rmarshall@gitlab.com>
Approved-by: Andrew Patterson <apatterson@gitlab.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Co-authored-by: Clemens Beck <cbeck@gitlab.com>

Update pipelines to use Docker in Docker from
the Google Container Registry instead of
Docker Hub.

On Amazon Linux 2 we install Meson 0.61.5. This version of Meson
requires Ninja 1.8.2 or new, but the version of Ninja that we install
from the repository is v1.7.2.2. Consequently, using Meson will fail on
these systems.

Fix the issue by installing "ninja-legacy" instead, which maps to
v1.11.1.1.

packages: Install Meson and Ninja for building Git

See merge request https://gitlab.com/gitlab-org/gitlab-omnibus-builder/-/merge_requests/375



Merged-by: Robert Marshall <rmarshall@gitlab.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Co-authored-by: Stan Hu <stanhu@gmail.com>
Co-authored-by: Patrick Steinhardt <psteinhardt@gitlab.com>

We have introduced new build infrastructure into Git using the Meson
build system. The intent is that Meson will replace autoconf-based and
CMake-based builds, and eventually also the Makefile. We want to start
dogfooding this build in Gitaly to detect issues and lacking features
with the new infrastructure.

Install both Meson and Ninja so that Gitaly can do so. Note that this
happens in two different ways:

  - Reasonably "modern" Linux distributions install both Meson (and the
    Ninja build system it depends on) via their package manager.

  - Older Linux distributions install Meson via PIP, but continue to
    install Ninja via their package manager.

This split exists because Git depends on Meson 0.61.0 or newer, which
has been released in January 2022. Consequently, a lot of the older
distributions don't yet have a version of Meson available that would
fulfill the requirement.

Furthermore, we only install Meson 0.61 and Ninja 1.11.1.1 via PIP
because these are the last versions that support Python 3.6. While
Python 3.7.0 has already been released in 2018, a subset of supported
distributions don't have that version of Python available yet.

Fix SLES 12sp5 builds

See merge request https://gitlab.com/gitlab-org/gitlab-omnibus-builder/-/merge_requests/378



Merged-by: Robert Marshall <rmarshall@gitlab.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Co-authored-by: Stan Hu <stanhu@gmail.com>

localedef was failing because `/usr/share/i18n/charmaps/UTF-8.gz`,
 provided by glibc-i18ndata, existed, but
 `/usr/share/i18n/charmaps/UTF-8` did not. The `gzip` package
is needed to uncompress this file.

Failing build:
https://dev.gitlab.org/cookbooks/gitlab-omnibus-builder/-/jobs/26020456

Related https://gitlab.com/gitlab-org/gitlab-omnibus-builder/-/merge_requests/375

Update FIPS Go from 1.23.4 to 1.23.6

See merge request https://gitlab.com/gitlab-org/gitlab-omnibus-builder/-/merge_requests/376



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Clemens Beck <cbeck@gitlab.com>

Ensure Rust is installed before Ruby

See merge request https://gitlab.com/gitlab-org/gitlab-omnibus-builder/-/merge_requests/377



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Stan Hu <stanhu@gmail.com>

This is needed to ensure the Ruby interpreter built has YJIT support.
I noticed when `RUBYOPT=-yjit` were set, we saw warnings:

```
ruby: warning: Ruby was built without YJIT support. You may need to
    install rustc to build Ruby with YJIT.
```

Relates https://gitlab.com/gitlab-org/gitlab-omnibus-builder/-/issues/96

Update Go from 1.23.4 to 1.23.6

Closes #96

See merge request https://gitlab.com/gitlab-org/gitlab-omnibus-builder/-/merge_requests/374



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Hossein Pursultani <hpursultani@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Clemens Beck <cbeck@gitlab.com>

Updates Go to 1.23.6. FIPS Go remains on 1.23.4 because there is
no new release yet.

Closes https://gitlab.com/gitlab-org/gitlab-omnibus-builder/-/issues/96

Changelog: changed

Document handling of newer SLES versions

See merge request https://gitlab.com/gitlab-org/gitlab-omnibus-builder/-/merge_requests/371



Merged-by: Robert Marshall <rmarshall@gitlab.com>
Approved-by: Jon Doveston <jdoveston@gitlab.com>
Approved-by: Evan Read <eread@gitlab.com>
Approved-by: Robert Marshall <rmarshall@gitlab.com>
Reviewed-by: Evan Read <eread@gitlab.com>
Co-authored-by: Clemens Beck <cbeck@gitlab.com>

- Newer SLES versions are binary compatible with OpenSUSE. Documents
  the shift in how GitLab builds SLES packages after this change.

Relates https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8814

Update golang to 1.23.4

See merge request https://gitlab.com/gitlab-org/gitlab-omnibus-builder/-/merge_requests/372



Merged-by: Andrew Patterson <apatterson@gitlab.com>
Approved-by: Clemens Beck <cbeck@gitlab.com>
Approved-by: Andrew Patterson <apatterson@gitlab.com>
Co-authored-by: Jason Plum <jplum@gitlab.com>

Drop OpenSUSE Leap 15.5 builders

See merge request https://gitlab.com/gitlab-org/gitlab-omnibus-builder/-/merge_requests/370



Merged-by: Ian Baum <ibaum@gitlab.com>
Approved-by: Jason Plum <jplum@gitlab.com>
Approved-by: Ian Baum <ibaum@gitlab.com>
Reviewed-by: Ian Baum <ibaum@gitlab.com>
Co-authored-by: Clemens Beck <cbeck@gitlab.com>

Add AmazonLinux 2023 FIPS builder

See merge request https://gitlab.com/gitlab-org/gitlab-omnibus-builder/-/merge_requests/368



Merged-by: Andrew Patterson <apatterson@gitlab.com>
Approved-by: Hossein Pursultani <hpursultani@gitlab.com>
Approved-by: Andrew Patterson <apatterson@gitlab.com>
Co-authored-by: Clemens Beck <cbeck@gitlab.com>

Relates https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8844

Remove CentOS 7 image

See merge request https://gitlab.com/gitlab-org/gitlab-omnibus-builder/-/merge_requests/357



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Co-authored-by: Clemens Beck <cbeck@gitlab.com>

Relates https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8778

Relates https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8714

Drop RaspberryPi Buster builder

See merge request https://gitlab.com/gitlab-org/gitlab-omnibus-builder/-/merge_requests/369



Merged-by: Ian Baum <ibaum@gitlab.com>
Approved-by: João Alexandre Cunha <j.a.cunha@gmail.com>
Approved-by: Ian Baum <ibaum@gitlab.com>
Co-authored-by: Clemens Beck <cbeck@gitlab.com>

Update go and golang-fips/go to 1.23.4

Related to https://gitlab.com/groups/gitlab-org/-/epics/15848

Bump Ruby to 3.2.6

See merge request https://gitlab.com/gitlab-org/gitlab-omnibus-builder/-/merge_requests/364



Merged-by: Andrew Patterson <apatterson@gitlab.com>
Approved-by: Andrew Patterson <apatterson@gitlab.com>
Co-authored-by: Balasankar "Balu" C <balasankar@gitlab.com>

Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>

Relates https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8821

ci: update workflow rules to handle protected tags

See merge request https://gitlab.com/gitlab-org/gitlab-omnibus-builder/-/merge_requests/367



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Stan Hu <stanhu@gmail.com>

https://gitlab.com/gitlab-org/gitlab-omnibus-builder has protected
tags set, so as a result `CI_COMMIT_REF_PROTECTED` is set to `true`
when a tag is pushed. This causes tag pushes to run with the
`CANONICAL_PROTECTED_BRANCH_PIPELINE` pipeline type instead of
`CANONICAL_TAG_PIPELINE`.

This doesn't happen in the mirror
(https://dev.gitlab.org/cookbooks/gitlab-omnibus-builder) because the
mirror doesn't have protected tags.

Update the CI workflow rules to apply
`CANONICAL_PROTECTED_BRANCH_PIPELINE` only if `CI_COMMIT_BRANCH` is
defined.

Enable gcc8 for SLES 12p5

See merge request https://gitlab.com/gitlab-org/gitlab-omnibus-builder/-/merge_requests/366



Merged-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Approved-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Reviewed-by: Balasankar 'Balu' C <balasankar@gitlab.com>
Co-authored-by: Stan Hu <stanhu@gmail.com>

gcc5 isn't sufficient for all the native gems needed by GitLab. For
example, grpc needs at least gcc8.

Relates to https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/8865