Workhorse: reduce ubi8 size by relocating chown/chgrp

See merge request gitlab-org/build/CNG!1065

Bump container registry to v3.51.1

See merge request gitlab-org/build/CNG!1073

Update gitlab-org/gitlab-exporter from 11.16.0 to 11.17.1

See merge request gitlab-org/build/CNG!1072

Workhorse: remove unbound variables flag

See merge request gitlab-org/build/CNG!1071

Use config file for Workhorse listeners

See merge request gitlab-org/build/CNG!1057

Enable rails metrics handling in our dev docker-compose environment

See merge request gitlab-org/build/CNG!1067

config: Remove mentions of deprecated `self_signed_cert` config

See merge request gitlab-org/build/CNG!1069

Bump GitLab Exporter version to 11.17.1

See merge request gitlab-org/build/CNG!1070

Bump container registry to v3.51.0

See merge request gitlab-org/build/CNG!1068

Add gitlab-metrics-exporter build definitions

See merge request gitlab-org/build/CNG!967

Fix DISABLE_PUMA_WORKER_KILLER check

See merge request gitlab-org/build/CNG!1042

Changelog: fixed

Reinstall Ruby grpc gem with system OpenSSL for FIPS builds

See merge request gitlab-org/build/CNG!1061

Update UBI to 8.6

See merge request gitlab-org/build/CNG!1033

Changelog: changed

Fix owner of public/uploads directory in UBI-8 Sidekiq image

See merge request gitlab-org/build/CNG!1063

The owner of the `public/uploads` directory on the `gitlab-sidekiq-ee`
UBI-8 image was owned by `root` instead of `git`. The directory was
being created via `mkdir -p public/uploads`, but the owner was never
set properly in the `gitlab-rails` `Dockerfile`. It was set properly
on `gitlab-webservice-ee`, however.

Relates to https://gitlab.com/gitlab-org/charts/gitlab/-/issues/3370

Changelog: fixed

A Ruby platform install of gRPC leaves several hundred megabytes of
unnecessary data. We can remove much of this data. This matches what
we do in Omnibus (in `config/projects/gitlab.rb`).

This is needed to compile the gprc gem.

By default, the Ruby grpc gem installs itself as a native gem and
bundles its own copy of BoringSSL. BoringSSL is a fork of OpenSSL, and
while there are FIPS-validated versions available, a BoringSSL FIPS
library is not generally available. However, we can ensure FIPS
compliance by building and linking against the system OpenSSL.

Unfortunately, the gRPC upstream has not made it possible to configure
the Ruby compilation options
(https://github.com/grpc/grpc/pull/27881).

To work around this, we patch the Ruby `extconf.rb` to link against
the system OpenSSL. This commit:

1. Determines which grpc gems have been installed in the system.
2. Uninstalls all versions. Note that it's possible to install the
   same version with both the Ruby and x86 native platforms.
3. For each version, download the gem, patch it with the handy
   `gem-patch` tool, and reinstall the patched gem.

Related Omnibus merge request:
https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/6172

Relates to https://gitlab.com/gitlab-org/omnibus-gitlab/-/issues/6687