Project

General

Profile

Actions

Bug #24889

closed

Docker repository sync on FIPS system fails with TypeError: can't quote ActiveSupport::HashWithIndifferentAccess

Added by Peter Ondrejka over 5 years ago. Updated over 5 years ago.

Status:
Resolved
Priority:
High
Assignee:
-
Category:
-
Target version:
Difficulty:
Triaged:
Yes
Fixed in Releases:
Found in Releases:

Description

Testing on CentOS 7.5 with FIPS environment enabled using katello-3.9.0-8.el7.noarch, docker repository synchronization ends with failed subtask and the message:

TypeError: can't quote ActiveSupport::HashWithIndifferentAccess

According to dynflow, this happens Actions::Katello::Repository::IndexContent task, full trace in supplement. No such error appears on non-FIPS system.

To reproduce, create a docker repository (mine had upstream name 'busybox' and url https://registry-1.docker.io), attempt to synchronize the repo.


Files

trace.txt trace.txt 20.8 KB Peter Ondrejka, 09/11/2018 11:33 AM
task-export-1537534546.tar.gz task-export-1537534546.tar.gz 569 KB task export from Katello system which has this problem Amit Upadhye, 09/21/2018 01:18 PM
foreman-debug-iJi4s.tar.xz foreman-debug-iJi4s.tar.xz 1.88 MB foreman-debug from katello system which has this issue Amit Upadhye, 09/21/2018 01:18 PM

Related issues 1 (0 open1 closed)

Related to Foreman - Feature #3511: As a security person, I would like Foreman to run in FIPS modeResolvedActions
Actions #1

Updated by Peter Ondrejka over 5 years ago

  • Related to Feature #3511: As a security person, I would like Foreman to run in FIPS mode added
Actions #2

Updated by Jonathon Turel over 5 years ago

  • Target version set to Katello 3.10.0
  • Triaged changed from No to Yes

Updated by Amit Upadhye over 5 years ago

Peter Ondrejka wrote:

Testing on CentOS 7.5 with FIPS environment enabled using katello-3.9.0-8.el7.noarch, docker repository synchronization ends with failed subtask and the message:

TypeError: can't quote ActiveSupport::HashWithIndifferentAccess

According to dynflow, this happens Actions::Katello::Repository::IndexContent task, full trace in supplement. No such error appears on non-FIPS system.

To reproduce, create a docker repository (mine had upstream name 'busybox' and url https://registry-1.docker.io), attempt to synchronize the repo.

Actions #4

Updated by Peter Ondrejka over 5 years ago

Reporting that I no longer see this issue on CentOS 7.5 with FIPS, katello-3.9.0-9.el7.noarch. Docker repository is synced as expected.

Actions #5

Updated by Peter Ondrejka over 5 years ago

  • Status changed from New to Resolved

Tested again with katello-3.9.0-11.el7.noarch, the issue no longer occurs, closing now

Actions

Also available in: Atom PDF