feat: add fips option for aws-lc

[yuhao-su]

I hereby agree to the terms of the RisingWave Labs, Inc. Contributor License Agreement.

What's changed and what's your intention?

add fips option for aws-lc

Manually tested in ci and locally.

Need to add a pipeline to build fips images

Checklist

• I have written necessary rustdoc comments.
• I have added necessary unit tests and integration tests.
• I have added test labels as necessary.
• I have added fuzzing tests or opened an issue to track them.
• My PR contains breaking changes.
• My PR changes performance-critical code, so I will run (micro) benchmarks and present the results.
• My PR contains critical fixes that are necessary to be merged into the latest release.

Documentation

• My PR needs documentation updates.

Release note

[gru-agent]

This pull request has been modified. If you want me to regenerate unit test for any of the files related, please find the file in "Files Changed" tab and add a comment @gru-agent. (The github "Comment on this file" feature is in the upper right corner of each file in "Files Changed" tab.)

[xxchan]

Why not enable it by default?

[yuhao-su]

I don't have a strong reason against doing so. It's simply because I didn't see any other product enabling this option by default.

[tabVersion]

+1 for trying enable it by default.It does not bring us any additional cost I think.

[cyliu0]

Need to add a pipeline to build fips images

Which images need to enable this? nightly? stable version?

[yuhao-su]

Need to add a pipeline to build fips images

Which images need to enable this? nightly? stable version?

For now I guess there is no need to release with this option. But can we just build the image with the option and run a e2e test in our release pipeline? cc @lmatz

[lmatz]

Need to add a pipeline to build fips images

Which images need to enable this? nightly? stable version?

For now I guess there is no need to release with this option. But can we just build the image with the option and run a e2e test in our release pipeline? cc @lmatz

One potential customer is requesting fips compliance and we may need to deliver the image, not 100% sure but could be soon

but we can add the test first

And if nothing serious happens after some testing period, I suggest we enable it by default in the future.