Project

General

Profile

Actions

Bug #23130

closed

unable to install theforeman-foreman_scap_client in FIPS-enabled environment

Added by Peter Ondrejka over 6 years ago. Updated about 6 years ago.

Status:
Rejected
Priority:
Normal
Assignee:
-
Target version:
-
Difficulty:
Triaged:
No
Fixed in Releases:
Found in Releases:

Description

Following the installation steps from https://www.theforeman.org/plugins/foreman_openscap/0.8/index.html#2.Installation, installation of puppet-foreman_scap_client in step 2.3 fails as follows:

]# puppet module install theforeman-foreman_scap_client -d
Debug: Runtime environment: puppet_version=5.5.0, ruby_version=2.4.3, run_mode=user, default_encoding=UTF-8
Notice: Preparing to install into /etc/puppetlabs/code/environments/production/modules ...
Debug: Facter: searching for custom fact "fips_enabled".
Debug: Facter: searching for fips_enabled.rb in /opt/puppetlabs/puppet/cache/lib/facter.
Debug: Facter: searching for fips_enabled.rb in /opt/puppetlabs/puppet/cache/facts.
Debug: Facter: fact "facterversion" has resolved to "3.11.0".
Debug: Facter: fact "aio_agent_version" has resolved to "5.5.0".
Debug: Facter: searching "/opt/puppetlabs/facter/facts.d" for external facts.
Debug: Facter: skipping external facts for "/etc/facter/facts.d": No such file or directory
Debug: Facter: skipping external facts for "/etc/puppetlabs/facter/facts.d": No such file or directory
Debug: Facter: no external facts were found.
Debug: Facter: resolving fips facts.
Debug: Facter: fact "fips_enabled" has resolved to true.
Error: Module install is prohibited in FIPS mode.
Error: Try 'puppet help module install' for usage

The installation with foreman-installer --enable-foreman-plugin-openscap proceeds as expected


Related issues 1 (0 open1 closed)

Blocks Foreman - Feature #3511: As a security person, I would like Foreman to run in FIPS modeResolvedActions
Actions

Also available in: Atom PDF