diskimage-builder/releasenotes/notes/add-fips-element-a5a3e0e3c653f923.yaml

13 lines
501 B
YAML
Raw Normal View History

---
features:
- |
Adds a ``fips`` element which attempts to enable FIPS mode configuration
into the disk image being created.
fixes:
- |
Fixes a possible case with a FIPS enabled disk image where the
cryptographic policies may be applied for enforcement of FIPS mode,
but the underlying kernel command line may be missing. This in particular
was discovered when testing on Rocky Linux. We now test, and add the FIPS
kernel command line flag if it is otherwise enabled.