zuul-jobs/roles/enable-fips
Ade Lee c22e4c1cc3 Changes to make fips work on ubuntu
Change-Id: Ibda3e9369a177151ce222f87bbf05fc5a37a47d6
2023-02-23 11:50:37 +01:00
..
tasks Changes to make fips work on ubuntu 2023-02-23 11:50:37 +01:00
README.rst Add ubuntu to enable-fips role 2023-02-09 19:02:00 +00:00

Enable FIPS on a node.

Set a node into FIPS mode, to test functionality when crypto policies are set to FIPS in RHEL/Centos >=8 or Ubuntu.

For Ubuntu nodes, the node is assumed to already have an Ubuntu Advantage subscription activated, as this is required to enable FIPS mode. The enable-ua-subscription role in this repo can be used to activate the subscription.

The role will set the node into FIPS mode, reboot the node, and then call the post-reboot-tasks role. This role requires a role parameter - nslookup_target.