-
Bug
-
Resolution: Done
-
Critical
-
None
-
None
-
False
-
-
False
-
-
-
AIPCC Application Platform 7
-
Proposed
Fips checks against the instructlab-nvidia-rhel9 image are failing on a statically compiled golang binary ...
registry.redhat.io/rhelai1/instructlab-nvidia-rhel9@sha256:3e6eb035c69b204746a44b3a58b2751c20050cfb6af2ba7989ba327809f87c0b rhel-els-container,/opt/app-root/lib/python3.11/site-packages/wandb/bin/wandb-core,go binary is not CGO_ENABLED
This binary is distributed within a python package and appears to be built within that project via subprocess calls to "go build" ...
https://github.com/wandb/wandb/blob/ace5b46bf68098bbb44d7ad8e5c70bea3f9f2d5f/core/hatch.py#L9
For fips compliance in RHOAI we need this binary to be build with a Red Hat distribution of golang and with the CGO_ENABLED=1 environment variable.
slack thread: https://redhat-internal.slack.com/archives/C08R88NFXCL/p1748439285793809
- relates to
-
AIPCC-2001 Ask wandb upstream to drop CGO_ENABLED=0
-
- Closed
-
-
AIPCC-833 "Design for FIPS" for ilab container
-
- Closed
-
- mentioned on