Actions
Issue #8834
closedPulp_installer refuses to install in non-devel mode with FIPS enabled
Status:
CLOSED - CURRENTRELEASE
Priority:
Normal
Assignee:
Category:
Installer - Moved to GitHub issues
Sprint/Milestone:
Start date:
Due date:
Estimated time:
Severity:
2. Medium
Version:
Platform Release:
OS:
Triaged:
No
Groomed:
No
Sprint Candidate:
No
Tags:
Sprint:
Sprint 97
Quarter:
Description
This is enforced in roles/pulp_common/tasks/main.yml
- name: Check required roles if FIPS detected
assert:
that:
- "'pulp_devel' in role_names"
fail_msg: >
Pulp cannot run in a FIPS environment because Django (a dependency) is not FIPS
compatible
when: ansible_facts.fips
However, the user can know this and be using a patched Django. We need to be able to ignore or bypass this if we've handled the necessary requirements outside the installer.
Currently blocking galaxy_ng 4.3 related release steps.
Related issues
Actions
Problem: pulp_installer refuses to install in
packages mode and non-devel mode when FIPS is enabled
Solution: Check for either devel mode (with pip) or packages mode. (#8258 checked for devel mode only)
fixes: #8834 https://pulp.plan.io/issues/8834