draios / sysdig

Linux system exploration and troubleshooting tool with first class support for containers
http://www.sysdig.com/
Other
7.79k stars 728 forks source link

Red Hat 9 isn't supported - SHA 1 deprecated #2038

Closed SilverPlate3 closed 12 months ago

SilverPlate3 commented 1 year ago

Red Hat 9 have deprecated SHA-1 and looks like this severely effects the product. 1 - We can't install sysdig 2 - After finding a workaround and installing sysdig. we can't do things like: rpm -qi sysdig image

What is the workaround:

update-crypto-policies --set DEFAULT:SHA1
reboot 

reboot is a must for some capabilities

this goes against the security best practices. https://www.redhat.com/en/blog/rhel-security-sha-1-package-signatures-distrusted-rhel-9

Please sign the package with sha256 as well.

nick2432 commented 12 months ago

can i work on this?

therealbobo commented 12 months ago

Hi @nick2432! Sadly this has already been resolved! I'll release a new version as soon as the new libs are out. Feel free to look around in the issue, maybe you'll find something interesting! If you need help, ping me! 😄