-
Story
-
Resolution: Done
-
Undefined
-
None
-
None
-
1
-
False
-
-
False
-
-
-
CoreOS West - 275
-
0
Test the revert of commit f21c511 (see https://github.com/openshift/os/pull/1855 as an example in 4.18) with one version of OpenShift based on 9.4 and one on 9.2.
This was fixed upstream in in RHEL so this patch is no longer needed.
9.4 - https://issues.redhat.com/browse/RHEL-104864
9.2 - https://issues.redhat.com/browse/RHEL-104863
This is to ensure fips is functioning correctly with the right algorithms.
How to test:
1. Use cosa (with corresponding rhcos-4.x tag) to initialize buildroot for the RHEL 9.x based OpenShift. i.e. coreos-assembler:rhcos-4.18 to cosa init https://github.com/openshift/os --branch release-4.18 --yumrepos https://www.gitlab.com/coreos/redhat-coreos)
2. cd to `src/config` and look for the commit that added fips.so
3. git revert that commit
4. cosa fetch and cosa build
5. exit out of cosa
6. use coreos-assembler:latest so we can get the new fips test that was added in https://github.com/coreos/coreos-assembler/pull/4181 and run `kola run fips.failure` and verify it passes.
- incorporates
-
OCPBUGS-60201 [release-4.18] Remove fips.so overlay in the initrd
-
- Closed
-