Uploaded image for project: 'Puppet'
  1. Puppet
  2. PUP-10859

Red Hat and CentOS 8.3 cannot install RPMs in FIPS mode

    XMLWordPrintable

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • PUP 6.18.0, PUP 7.1.0, PUP 6.19.1
    • PUP 7.6.0
    • None
    • Needs Assessment

    Description

      Puppet Version: All
      Puppet Server Version: All
      OS Name/Version: CentOS and RHEL 8.3+ in FIPS mode

      CentOS and RHEL 8.3+, when running in FIPS mode, require SHA-256 signatures on both repository metadata and RPMs.

      StarLab has a good summary of the issue and I can confirm that resigning the RPMs using a CentOS 8.3+ base container/image will allow for correct installation.

      Desired Behavior: Ability to install puppet RPMs on an EL8 system in FIPS mode.

      Actual Behavior: RPMs fail to install.

      Docs: An example of the failure can be found in the pupmod-simp-pupmod beaker tests.

      How To Test:

      fips-mode-setup --enable
      reboot
      fips-mode-setup --check (should say enabled)
      dnf -y install  https://yum.puppet.com/puppet-release-el-8.noarch.rpm
      dnf -y install puppetserver

       

      Attachments

        Issue Links

          Activity

            People

              morgan Morgan Rhodes
              peiriannydd Trevor Vaughan
              Votes:
              1 Vote for this issue
              Watchers:
              9 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Zendesk Support