Project

General

Profile

Actions

action #173716

open

[security] fips_setup: FIPS mode is disabled

Added by frantisek.simorda about 1 month ago. Updated 12 days ago.

Status:
Blocked
Priority:
Normal
Assignee:
Category:
Bugs in existing tests
Target version:
-
Start date:
2024-12-04
Due date:
% Done:

10%

Estimated time:
Difficulty:

Description

Observation

openQA test in scenario sle-15-SP7-Online-aarch64-fips_ker_mode_tests_crypt_web@aarch64 fails in
fips_setup

FIPS mode is disabled.

Actions #1

Updated by amanzini about 1 month ago

  • Status changed from New to In Progress
  • Assignee set to amanzini
  • % Done changed from 0 to 10

at first we can observe an error after ramdisk build step:

https://openqa.suse.de/tests/16090585/logfile?filename=serial_terminal.txt#line-525

Note: System-wide crypto policies are applied on application start-up.
It is recommended to restart the system for the change of policies
to fully take place.
FIPS mode will be enabled.
/usr/lib/bootloader/include/library: line 318: syntax error near unexpected token `<'
/usr/lib/bootloader/include/library: line 318: `    done < <(echo "$efi_distro_entry")'
Generating grub configuration file ...
Found theme: /boot/grub2/themes/SLE/theme.txt
Found linux image: /boot/Image-6.4.0-150700.38-default
Found initrd image: /boot/initrd-6.4.0-150700.38-default

but on next build it does not occur anymore.

Actions #2

Updated by amanzini about 1 month ago

  • Status changed from In Progress to Blocked
Actions #3

Updated by openqa_review 12 days ago

This is an autogenerated message for openQA integration by the openqa_review script:

This bug is still referenced in a failing openQA test: fips_ker_mariadb_ssl_server
https://openqa.suse.de/tests/16288584#step/fips_setup/1

To prevent further reminder comments one of the following options should be followed:

  1. The test scenario is fixed by applying the bug fix to the tested product or the test is adjusted
  2. The openQA job group is moved to "Released" or "EOL" (End-of-Life)
  3. The bugref in the openQA scenario is removed or replaced, e.g. label:wontfix:boo1234

Expect the next reminder at the earliest in 28 days if nothing changes in this ticket.

Actions

Also available in: Atom PDF