Open
Description
It would be nice to test in upstream also ruby container in case of FIPS is enabled on host machine.
- First of all the GitHub Action should be present in the directory
.github/workflows
. The content should be similar like this https://github.com/sclorg/s2i-nodejs-container/blob/master/.github/workflows/container-fips-tests.yml - The second one are alone tests.
- In case of FIPS mode is disabled on host, then Ruby FIPS mode should not be executed at all or it should fail.
- In case of FIPS mode is enabled on host, then detection if FIPS mode from ruby point of view has to passed.
The detection of FIPS mode is present in this file /proc/sys/crypto/fips_enabled
.
It would be nice to have two test cases.
- check FIPS from ruby code like it is here: https://github.com/sclorg/s2i-nodejs-container/blob/master/test/test-lib-nodejs.sh#L485
- check FIPS from ruby application point of view.
A similar pull request in s2i-nodejs-container is here: github.com/sclorg/s2i-nodejs-container/pull/493, where you can take inspiration.
Metadata
Metadata
Assignees
Labels
No labels