Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

image: add support for FIPS customization to BootcDiskImage #1035

Closed
wants to merge 1 commit into from

Conversation

mvo5
Copy link
Contributor

@mvo5 mvo5 commented Nov 12, 2024

[draft as I think we want to double check if this makes sense in the bootc world first]

This commit is a followup for
osbuild/bootc-image-builder#709 and adds support for FIPS to the BootcDiskImage image type.

One open question is if this should be done at this level or if the container itself should set the kernel cmdline to FIPS and bib would not bother.

This commit is a followup for
osbuild/bootc-image-builder#709 and adds
support for FIPS to the `BootcDiskImage` image type.

One open question is if this should be done at this level or
if the container itself should set the kernel cmdline to FIPS
and bib would not bother.
@ondrejbudai
Copy link
Member

I don't think this is neccessary, the fips=1 kernel argument should be set inside the source container image, see https://docs.fedoraproject.org/en-US/bootc/security-and-hardening/

@mvo5
Copy link
Contributor Author

mvo5 commented Nov 12, 2024

Excellent, less work

@mvo5 mvo5 closed this Nov 12, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants