defenseunicorns / uds-rke2-image-builder

Packer builds to produce STIG'd RKE2 images
7 stars 0 forks source link

Enable FIPS on RHEL #31

Open mjnagel opened 10 months ago

mjnagel commented 10 months ago

RedHat documentation says that a system may not be fully compliant unless the install was started in FIPS mode. This leaves us with a few options for handling FIPS on RHEL:

There may be other viable options but these are the most prominent/apparent options.

jacobbmay commented 1 month ago

Realized I never circled back on this. My solution for on prem images was to build our own base RHEL image by installing from ISO in FIPS mode and then use that as the base image for this packer builder in Nutanix. Probably doesn't help with AWS environments due to cloud licensing concerns, but at least for on prem systems it is a workable solution since RedHat's cloud-image builder doesn't support producing a FIPS enabled cloud image.