Add test suite in case of FIPS is enabled
还没有人认领这个 Issue。
评估
- 难度
- 3/5
- 预计耗时
- 1-2 天
- 新手友好度
- 35/100
- Issue 类型
- 功能
- 描述清晰度
- 基本清楚
- 活跃度
- 停滞
- 领域
- ci-cd, security, testing-qa
调研方向
Start by comparing the existing .github/workflows files with the referenced s2i-nodejs-container FIPS workflow and review test/test-lib-nodejs.sh. Check /proc/sys/crypto/fips_enabled and define tests for both host-disabled and host-enabled FIPS cases, including Python application detection. Done means the workflow runs and both requested test cases pass or fail as specified.
由索引模型根据 Issue 内容生成。
描述
It would be nice to test in upstream also python container in case of FIPS is enabled on host machine.
- First of all the GitHub Action should be present in directory
.github/workflows. The content should be similar like this https://github.com/sclorg/s2i-nodejs-container/blob/master/.github/workflows/container-fips-tests.yml - The second one are alone tests.
- In case of FIPS mode is disabled on host, then Python FIPS mode should not be execute at all or it should fail.
- In case of FIPS mode is enabled on host, then detection if FIPS mode from python point of view has to passed.
The detection of FIPS mode is present in this file /proc/sys/crypto/fips_enabled.
It would be nice to have two test cases.
- check FIPS from ruby code like it is here: https://github.com/sclorg/s2i-nodejs-container/blob/master/test/test-lib-nodejs.sh#L485
- check FIPS from python application point of view.
A similar pull request in s2i-nodejs-container is here: github.com/sclorg/s2i-nodejs-container/pull/493, where you can take inspiration.
- 主要语言
- Shell
- 星标
- 271
- 派生
- 329
- PR 合并指标
- 30 天内没有已合并 PR
贡献指南
这个仓库没有索引到贡献指南
从这里开始
- 先读完整个 Issue,再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库,在一个分支上完成修改。
- 提交 Pull Request,并在描述里引用这个 Issue 编号。
sclorg/s2i-python-container 的其他 Issue
-
难度 5/5 一周以上 新手友好度 25/100
sclorg/s2i-python-container#813 · 4 条评论 ·
-
难度 4/5 3-5 天 新手友好度 35/100
sclorg/s2i-python-container#540 · 1 条评论 ·
-
难度 5/5 一周以上 新手友好度 20/100
sclorg/s2i-python-container#368 · 7 条评论 ·
-
enhancement P3
难度 5/5 一周以上 新手友好度 15/100
sclorg/s2i-python-container#304 · 8 条评论 · 2 个 reaction ·
-
help wanted openshift
难度 4/5 3-5 天 新手友好度 35/100
sclorg/s2i-python-container#280 · 12 条评论 ·
查看 sclorg/s2i-python-container 的全部 Issue
相似的 Issue
-
enhancement
难度 2/5 1-3 小时 新手友好度 65/100
-
tooling
难度 2/5 1-3 小时 新手友好度 75/100
-
难度 2/5 1-3 小时 新手友好度 70/100
openSUSE/python-rpm-macros#219 ·
-
难度 2/5 1-3 小时 新手友好度 70/100
YunoHost-Apps/adguardhome_ynh#258 ·
-
steam-short-session-tracker: incorrect registry backup path resets settings during automatic repair 未关闭
难度 2/5 1-3 小时 新手友好度 80/100
ValveSoftware/SteamOS#2829 ·