Overview
Request 1099073 accepted
- Created by pmonrealgonzalez
- In state accepted
Request History
pmonrealgonzalez created request
factory-auto added opensuse-review-team as a reviewer
Please review sources
factory-auto accepted review
Check script succeeded
staging-bot set openSUSE:Factory:Staging:N as a staging project
Being evaluated by staging project "openSUSE:Factory:Staging:N"
staging-bot accepted review
Picked "openSUSE:Factory:Staging:N"
licensedigger accepted review
ok
darix accepted review
Accepted review for by_group opensuse-review-team request 1099073 from user staging-bot
anag+factory accepted review
Staging Project openSUSE:Factory:Staging:N got accepted.
anag+factory approved review
Staging Project openSUSE:Factory:Staging:N got accepted.
anag+factory accepted request
Staging Project openSUSE:Factory:Staging:N got accepted.
You should not depend on grubby, that's dead upstream. I just sent a delete request.
Hi, Favian. We recently enabled the fips-mode-setup script in crypto-policies that depends on grubby and I tried to update it to the new version that is now maintained by Fedora. I'm preparing the new update here: https://build.opensuse.org/package/show/home:pmonrealgonzalez:branches:Virtualization/grubby . Would you be fine if we use the updated grubby version?
The "new" grubby is Fedora specific and will not work on openSUSE.
What about not using grubby at all? This is just about setting a cmdline option, we have
pblfor that.There's another issue with the script btw, it checks for the fips pattern by testing for the existence of a doc file. That's not installed on MicroOS or JeOS though so will always fail.
@favogt, thanks for the thoughts. I think I can modify the fips-mode-setup script to replace grubby with pbl. I'll accept your delete request for grubby in a moment. TIA