Project

General

Profile

Bug #24889

Docker repository sync on FIPS system fails with TypeError: can't quote ActiveSupport::HashWithIndifferentAccess

Added by Peter Ondrejka about 2 years ago. Updated about 2 years ago.

Status:
Resolved
Priority:
High
Assignee:
-
Category:
-
Target version:
Difficulty:
Triaged:
Yes
Bugzilla link:
Pull request:
Fixed in Releases:
Found in Releases:

Description

Testing on CentOS 7.5 with FIPS environment enabled using katello-3.9.0-8.el7.noarch, docker repository synchronization ends with failed subtask and the message:

TypeError: can't quote ActiveSupport::HashWithIndifferentAccess

According to dynflow, this happens Actions::Katello::Repository::IndexContent task, full trace in supplement. No such error appears on non-FIPS system.

To reproduce, create a docker repository (mine had upstream name 'busybox' and url https://registry-1.docker.io), attempt to synchronize the repo.

trace.txt trace.txt 20.8 KB Peter Ondrejka, 09/11/2018 11:33 AM
task-export-1537534546.tar.gz task-export-1537534546.tar.gz 569 KB task export from Katello system which has this problem Amit Upadhye, 09/21/2018 01:18 PM
foreman-debug-iJi4s.tar.xz foreman-debug-iJi4s.tar.xz 1.88 MB foreman-debug from katello system which has this issue Amit Upadhye, 09/21/2018 01:18 PM

Related issues

Related to Foreman - Feature #3511: As a security person, I would like Foreman to run in FIPS modeResolved

History

#1 Updated by Peter Ondrejka about 2 years ago

  • Related to Feature #3511: As a security person, I would like Foreman to run in FIPS mode added

#2 Updated by Jonathon Turel about 2 years ago

  • Triaged changed from No to Yes
  • Target version set to Katello 3.10.0

#3 Updated by Amit Upadhye about 2 years ago

Peter Ondrejka wrote:

Testing on CentOS 7.5 with FIPS environment enabled using katello-3.9.0-8.el7.noarch, docker repository synchronization ends with failed subtask and the message:

TypeError: can't quote ActiveSupport::HashWithIndifferentAccess

According to dynflow, this happens Actions::Katello::Repository::IndexContent task, full trace in supplement. No such error appears on non-FIPS system.

To reproduce, create a docker repository (mine had upstream name 'busybox' and url https://registry-1.docker.io), attempt to synchronize the repo.

#4 Updated by Peter Ondrejka about 2 years ago

Reporting that I no longer see this issue on CentOS 7.5 with FIPS, katello-3.9.0-9.el7.noarch. Docker repository is synced as expected.

#5 Updated by Peter Ondrejka about 2 years ago

  • Status changed from New to Resolved

Tested again with katello-3.9.0-11.el7.noarch, the issue no longer occurs, closing now

Also available in: Atom PDF