Add hardening flags to CI builds.

.gitlab-ci.yml

@@ -34,16 +34,17 @@ format:
 
 compile:
   stage: build
-  only:
-    - tags
+    #only:
+    #- tags
   script:
     - echo "${CI_JOB_ID}" > CI_JOB_ID.txt
-    - env GOOS=linux GOARCH=amd64 go build -race -ldflags "-extldflags '-static'" -o $CI_PROJECT_DIR/linux-amd64/go-sendxmpp
-    - env GOOS=linux GOARCH=arm64 go build -ldflags "-extldflags '-static'" -o $CI_PROJECT_DIR/linux-arm64/go-sendxmpp
-    - env GOOS=linux GOARCH=386 go build -ldflags "-extldflags '-static'" -o $CI_PROJECT_DIR/linux-386/go-sendxmpp
-    - env GOOS=linux GOARCH=arm go build -ldflags "-extldflags '-static'" -o $CI_PROJECT_DIR/linux-arm/go-sendxmpp
-    - env GOOS=windows GOARCH=386 go build -ldflags "-extldflags '-static'" -o $CI_PROJECT_DIR/win386/go-sendxmpp.exe
-    - env GOOS=windows GOARCH=amd64 go build -ldflags "-extldflags '-static'" -o $CI_PROJECT_DIR/win64/go-sendxmpp.exe
+      -buildmode=pie -ldflags -extldflags=-Wl,-z,now,-z,relro
+    - env GOOS=linux GOARCH=amd64 go build -buildmode=pie -race -ldflags "-extldflags=-Wl,-z,now,-z,relro '-static'" -o $CI_PROJECT_DIR/linux-amd64/go-sendxmpp
+    - env GOOS=linux GOARCH=arm64 go build -buildmode=pie -ldflags "-extldflags=-Wl,-z,now,-z,relro '-static'" -o $CI_PROJECT_DIR/linux-arm64/go-sendxmpp
+    - env GOOS=linux GOARCH=386 go build -buildmode=pie -ldflags "-extldflags=-Wl,-z,now,-z,relro '-static'" -o $CI_PROJECT_DIR/linux-386/go-sendxmpp
+    - env GOOS=linux GOARCH=arm go build -buildmode=pie -ldflags "-extldflags=-Wl,-z,now,-z,relro '-static'" -o $CI_PROJECT_DIR/linux-arm/go-sendxmpp
+    - env GOOS=windows GOARCH=386 go build -buildmode=pie -ldflags "-extldflags=-Wl,-z,now,-z,relro '-static'" -o $CI_PROJECT_DIR/win386/go-sendxmpp.exe
+    - env GOOS=windows GOARCH=amd64 go build -buildmode=pie -ldflags "-extldflags=-Wl,-z,now,-z,relro '-static'" -o $CI_PROJECT_DIR/win64/go-sendxmpp.exe
   artifacts:
     paths:
       - linux-amd64/go-sendxmpp