Building from source for pkcs11 support

[jwomackgsa]

I am trying to build step-ca with pkcs11 support on RHEL 7.9. I am following https://github.com/smallstep/certificates/blob/master/docs/CONTRIBUTING.md#build-step-ca-using-cgo.

I cloned the master branch of step-ca and running the make bootstrap I get Error 35
Is docker required to run the builds? When I run the make bootstrap I get

[root@server01 certificates]# make bootstrap
which: no docker in (/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/go/bin:/root/bin)
# Using a released version of golangci-lint to take into account custom replacements in their go.mod
golangci/golangci-lint info checking GitHub for tag 'v1.39.0'
golangci/golangci-lint info found version: 1.39.0 for v1.39.0/linux/amd64
make: *** [bootstrap] Error 35

I am running the build on RHEL 7.9

make -d bootstrap

Invoking recipe from Makefile:30 to update target `bootstrap'.
# Using a released version of golangci-lint to take into account custom replacements in their go.mod
Putting child 0x22082e0 (bootstrap) PID 17724 on the chain.
Live child 0x22082e0 (bootstrap) PID 17724
Reaping winning child 0x22082e0 PID 17724
Live child 0x22082e0 (bootstrap) PID 17725
golangci/golangci-lint info checking GitHub for tag 'v1.39.0'
golangci/golangci-lint info found version: 1.39.0 for v1.39.0/linux/amd64
Reaping losing child 0x22082e0 PID 17725
make: *** [bootstrap] Error 35
Removing child 0x22082e0 PID 17725 from chain.

[maraino]

You're right, we did some changes to make the releases easier, and we broke things. You can generate custom builds using:

CGO_ENABLED=1 go build -o bin/step-ca github.com/smallstep/certificates/cmd/step-ca

And the same for the init script if you need them:

CGO_ENABLED=1 go build -o bin/step-yubikey-init github.com/smallstep/certificates/cmd/step-yubikey-init
CGO_ENABLED=1 go build -o bin/step-pkcs11-init github.com/smallstep/certificates/cmd/step-pkcs11-init

[maraino]

@jwomackgsa I was trying the wrong command. The proper command is make build GOFLAGS="", it might require docker in your path, so if you have problems, then try the commands above.

[jwomackgsa]

Works great!