Uploaded image for project: 'CoreOS OCP'
  1. CoreOS OCP
  2. COS-3502

Manually test removal of fips.so patch

XMLWordPrintable

    • Icon: Story Story
    • Resolution: Done
    • Icon: Undefined Undefined
    • None
    • None
    • 1
    • False
    • Hide

      None

      Show
      None
    • False
    • CoreOS West - 275
    • 0

      Test the revert of commit f21c511 (see https://github.com/openshift/os/pull/1855 as an example in 4.18) with one version of OpenShift based on 9.4 and one on 9.2.

      This was fixed upstream in in RHEL so this patch is no longer needed.

      9.4 - https://issues.redhat.com/browse/RHEL-104864
      9.2 - https://issues.redhat.com/browse/RHEL-104863

      This is to ensure fips is functioning correctly with the right algorithms.

      How to test:
      1. Use cosa (with corresponding rhcos-4.x tag) to initialize buildroot for the RHEL 9.x based OpenShift. i.e. coreos-assembler:rhcos-4.18 to cosa init https://github.com/openshift/os --branch release-4.18 --yumrepos https://www.gitlab.com/coreos/redhat-coreos)
      2. cd to `src/config` and look for the commit that added fips.so
      3. git revert that commit
      4. cosa fetch and cosa build
      5. exit out of cosa
      6. use coreos-assembler:latest so we can get the new fips test that was added in https://github.com/coreos/coreos-assembler/pull/4181 and run `kola run fips.failure` and verify it passes.

              aaradhak@redhat.com Aashish Radhakrishnan
              mnguyen@redhat.com Michael Nguyen
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: