getsops / getsops/sops

SOPS RPM No Digest on RHEL 8 VM with FIPS Enabled

Open
#916 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Go
Stars
23.1k
Forks
1.1k
Avg merge
1d 11h
Merged PRs (30d)
9

Description

When trying to install the SOPS RPM on a RHEL 8 VM with FIPS enabled, the installation with fail. This is because there have been changes to RPM validation on RHEL 8.

According to RHEL there are three options:
1. Disable FIPS (obviously a no)
2. Use the workaround --nodigest --nofiledigest when FIPS is enabled
3. Have the package rebuilt with rpm >=4.14

The bug report - must be a subscriber to see response but high level the answer is.

Rebuilding the RPM with rpm >=4.14 should rectify the issue. Request that new RPM's be built with rpm version 4.14+

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by locating the SOPS RPM build configuration and packaging entry point; no specific file or test is named in the issue. The work is complete when new RPMs are built with rpm 4.14 or newer and installation succeeds on a RHEL 8 VM with FIPS enabled.

Written by the indexing model from the issue text.

Assessment

Domain
release
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
38/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.