chore: [SVLS-6279] make sure we are fipsing correctly

Author: apiarian-datadog

.gitlab/scripts/Dockerfile.go_agent.alpine.compile

@@ -13,9 +13,6 @@ ENV GOROOT=/usr/lib/go
 ENV GOPATH=/go
 ENV PATH=/go/bin:$PATH
 
-ENV CGO_ENABLED=${FIPS:+1}
-ENV GOEXPERIMENT=${FIPS:+boringcrypto}
-
 RUN mkdir -p ${GOPATH}/src ${GOPATH}/bin
 RUN mkdir -p /tmp/dd/datadog-agent
 
@@ -33,6 +30,12 @@ WORKDIR /tmp/dd/datadog-agent/cmd/serverless
 
 RUN --mount=type=cache,target=/go/pkg/mod \
     --mount=type=cache,target=/root/.cache/go-build \
+    if [ "$FIPS" = "1" ]; then \
+        export CGO_ENABLED=1; \
+        export GOEXPERIMENT=boringcrypto; \
+    fi; \
+    echo CGO_ENABLED=$CGO_ENABLED; \
+    echo GOEXPERIMENT=$GOEXPERIMENT; \
     if [ -z "$AGENT_VERSION" ]; then \
         /usr/lib/go/bin/go build -ldflags="-w -extldflags '-static' \
         -X github.com/DataDog/datadog-agent/pkg/serverless/tags.currentExtensionVersion=$EXTENSION_VERSION" \

.gitlab/scripts/Dockerfile.go_agent.compile

@@ -4,9 +4,6 @@ ARG AGENT_VERSION
 ARG BUILD_TAGS
 ARG FIPS
 
-ENV CGO_ENABLED=${FIPS:+1}
-ENV GOEXPERIMENT=${FIPS:+boringcrypto}
-
 RUN mkdir -p /tmp/dd/datadog-agent
 
 RUN yum install -y wget tar gzip gcc
@@ -34,6 +31,12 @@ WORKDIR /tmp/dd/datadog-agent/cmd/serverless
 
 RUN --mount=type=cache,target=/root/go/pkg/mod \
     --mount=type=cache,target=/root/.cache/go-build \
+    if [ "$FIPS" = "1" ]; then \
+        export CGO_ENABLED=1; \
+        export GOEXPERIMENT=boringcrypto; \
+    fi; \
+    echo CGO_ENABLED=$CGO_ENABLED; \
+    echo GOEXPERIMENT=$GOEXPERIMENT; \
     if [ -z "$AGENT_VERSION" ]; then \
         /usr/local/go/bin/go build -ldflags="-w \
         -X github.com/DataDog/datadog-agent/pkg/serverless/tags.currentExtensionVersion=$EXTENSION_VERSION" \