We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
40rhcos-fips
See https://fedoraproject.org/wiki/Changes/RemoveFipsModeSetup. The idea there is that the fips=1 karg becomes the source of truth. This is something that should work in image-mode RHEL/CentOS Stream already and we just inherit from that. On the MCO side, long-term on-cluster layering should do the equivalent of https://gitlab.com/fedora/bootc/examples/-/blob/main/fips/Containerfile?ref_type=heads to enable it at layering time. Short-term, at the very least, we should be able to get rid of this bit since calling fips-mode-setup should no longer be necessary. See also conversation in coreos/ignition#1323.
fips=1
fips-mode-setup
The text was updated successfully, but these errors were encountered:
No branches or pull requests
See https://fedoraproject.org/wiki/Changes/RemoveFipsModeSetup. The idea there is that the
fips=1
karg becomes the source of truth. This is something that should work in image-mode RHEL/CentOS Stream already and we just inherit from that. On the MCO side, long-term on-cluster layering should do the equivalent of https://gitlab.com/fedora/bootc/examples/-/blob/main/fips/Containerfile?ref_type=heads to enable it at layering time. Short-term, at the very least, we should be able to get rid of this bit since callingfips-mode-setup
should no longer be necessary. See also conversation in coreos/ignition#1323.The text was updated successfully, but these errors were encountered: