Actions
Bug #23130
closedunable to install theforeman-foreman_scap_client in FIPS-enabled environment
Status:
Rejected
Priority:
Normal
Assignee:
-
Target version:
-
Description
Following the installation steps from https://www.theforeman.org/plugins/foreman_openscap/0.8/index.html#2.Installation, installation of puppet-foreman_scap_client in step 2.3 fails as follows:
]# puppet module install theforeman-foreman_scap_client -d Debug: Runtime environment: puppet_version=5.5.0, ruby_version=2.4.3, run_mode=user, default_encoding=UTF-8 Notice: Preparing to install into /etc/puppetlabs/code/environments/production/modules ... Debug: Facter: searching for custom fact "fips_enabled". Debug: Facter: searching for fips_enabled.rb in /opt/puppetlabs/puppet/cache/lib/facter. Debug: Facter: searching for fips_enabled.rb in /opt/puppetlabs/puppet/cache/facts. Debug: Facter: fact "facterversion" has resolved to "3.11.0". Debug: Facter: fact "aio_agent_version" has resolved to "5.5.0". Debug: Facter: searching "/opt/puppetlabs/facter/facts.d" for external facts. Debug: Facter: skipping external facts for "/etc/facter/facts.d": No such file or directory Debug: Facter: skipping external facts for "/etc/puppetlabs/facter/facts.d": No such file or directory Debug: Facter: no external facts were found. Debug: Facter: resolving fips facts. Debug: Facter: fact "fips_enabled" has resolved to true. Error: Module install is prohibited in FIPS mode. Error: Try 'puppet help module install' for usage
The installation with foreman-installer --enable-foreman-plugin-openscap proceeds as expected
Updated by Peter Ondrejka almost 7 years ago
- Blocks Feature #3511: As a security person, I would like Foreman to run in FIPS mode added
Updated by Ivan Necas almost 7 years ago
- Project changed from Foreman to OpenSCAP
- Triaged set to No
Updated by Marek Hulán almost 7 years ago
We should update the docs, could you please try installing the module using package from our repos?
Updated by Peter Ondrejka almost 7 years ago
Marek Hulán wrote:
We should update the docs, could you please try installing the module using package from our repos?
rpm installation worked as expected
Updated by Marek Hulán over 6 years ago
- Status changed from New to Rejected
yes, thanks, the rpm is mentioned in the manual too
Actions