Microsoft/vscode

Support for RHEL 8 in FIPS mode

Open

#82,425 创建于 2019年10月12日

在 GitHub 查看
 (21 评论) (8 反应) (2 负责人)TypeScript (10,221 fork)batch import
feature-requesthelp wantedinstall-updatelinuxpackagingrpm

仓库指标

Star
 (74,848 star)
PR 合并指标
 (平均合并 11小时 43分钟) (30 天内合并 1,000 个 PR)

描述

  • VSCode Version: 1.39.1
  • OS Version: RHEL 8 (Red Hat Enterprise Linux 8)

Steps to Reproduce:

  1. Enable FIPS in RHEL 8
  2. Attempt to install VS Code

Does this issue occur when all extensions are disabled?: n/a

Most likely causes:

  • VS Code may not officially support RHEL 8
  • VS Code's RPM uses a non-FIPS algorithm for the per-file digest and other cryptographic operations, most likely MD5.
[root@rhel8 ~]# dnf install code
Updating Subscription Management repositories.
Dependencies resolved.
==========================================================================================================================================================================
 Package                             Arch                                  Version                                              Repository                           Size
==========================================================================================================================================================================
Installing:
 code                                x86_64                                1.39.1-1570750844.el7                                code                                 77 M

Transaction Summary
==========================================================================================================================================================================
Install  1 Package

Total download size: 77 M
Installed size: 77 M
Is this ok [y/N]: y
Downloading Packages:
code-1.39.1-1570750844.el7.x86_64.rpm                                                                                                     5.6 MB/s |  77 MB     00:13    
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total                                                                                                                                     5.6 MB/s |  77 MB     00:13     
Running transaction check
Transaction check succeeded.
Running transaction test
The downloaded packages were saved in cache until the next successful transaction.
You can remove cached packages by executing 'dnf clean packages'.
Error: Transaction check error:
  package code-1.39.1-1570750844.el7.x86_64 does not verify: no digest

Error Summary
-------------

Workaround (with RPM in current directory):

[root@rhel8 ~]# rpm --nofiledigest --nodigest --install code-1.39.1-1570750844.el7.x86_64.rpm

贡献者指南