Put the fips binary in the fips runner image

Axel von Bertoldirequested to merge
avonbertoldi/38890/binary-in-fips-image into main

Looks like when we refactored the runner images back in circa 17.8, we started injecting the wrong (non-fips) runner binary into the ubi-fips runner image. Correct that now.

The helper image is OK though.

Related to though does not fix Runners fails after 18.1.0 in FIPS mode (#38890 - closed)

Testing

I tested the image generated by the MR pipeline:

> docker run registry.gitlab.com/gitlab-org/gitlab-runner/gitlab-runner-dev:ubi-fips-39e46cb5 --version
Version:      18.2.0~pre.41.g39e46cb5
Git revision: 39e46cb5
Git branch:   refs/pipelines/1885314002 <--- second pipeline in this MR
GO version:   go1.24.3 X:boringcrypto <--- :thumbsup: 
Built:        2025-06-23T20:48:29Z
OS/Arch:      linux/amd64
time="2025-06-25T17:47:15Z" level=info msg="Binary was compiled with FIPS mode, but an external SSL library was not enabled."
Edited by Axel von Bertoldi

Merge request reports