Details
-
Bug
-
Status: Closed
-
Major
-
Resolution: Fixed
-
PUP 6.18.0, PUP 7.1.0, PUP 6.19.1
-
None
-
Other
-
Release Engineering
-
Needs Assessment
-
Needs Assessment
Description
Puppet Version: All
Puppet Server Version: All
OS Name/Version: CentOS and RHEL 8.3+ in FIPS mode
CentOS and RHEL 8.3+, when running in FIPS mode, require SHA-256 signatures on both repository metadata and RPMs.
StarLab has a good summary of the issue and I can confirm that resigning the RPMs using a CentOS 8.3+ base container/image will allow for correct installation.
Desired Behavior: Ability to install puppet RPMs on an EL8 system in FIPS mode.
Actual Behavior: RPMs fail to install.
Docs: An example of the failure can be found in the pupmod-simp-pupmod beaker tests.
How To Test:
fips-mode-setup --enable
|
reboot
|
fips-mode-setup --check (should say enabled)
|
dnf -y install https://yum.puppet.com/puppet-release-el-8.noarch.rpm |
dnf -y install puppetserver
|