Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add a section on how to create a fips compliant image from scratch #40

Merged
merged 2 commits into from
Jun 27, 2023

Conversation

jimmykarily
Copy link
Contributor

@netlify
Copy link

netlify bot commented Jun 26, 2023

Deploy Preview for kairos-io ready!

Name Link
🔨 Latest commit b5aecff
🔍 Latest deploy log https://app.netlify.com/sites/kairos-io/deploys/649990e9d8f6aa0008598e5e
😎 Deploy Preview https://deploy-preview-40--kairos-io.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site settings.

@jimmykarily
Copy link
Contributor Author

It would be nice to have some instructions on how to build other framework images (for non-ubuntu flavors) but it's not very streamlined yet on our side. I don't want to write documentation that explains how to replicate our Earthly targets.

Signed-off-by: Dimitris Karakasilis <[email protected]>
Copy link
Member

@mauromorales mauromorales left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

informative looks good to me, but would it make sense to have an example of how pointing to the specific package looks like? or is the user to be savvy enough regarding packages at this point? I ask because I'd be a bit confused how to do it myself

@jimmykarily
Copy link
Contributor Author

informative looks good to me, but would it make sense to have an example of how pointing to the specific package looks like? or is the user to be savvy enough regarding packages at this point? I ask because I'd be a bit confused how to do it myself

Yes I know. The only easy flow there is, is partly described in the document:

  • Build a Dockefile with your Ubuntu OS
  • Copy things from our ubuntu fips framework image
  • Done (kinda)

Of course then, they will face the issue with the missing values in /etc/os-release (kairos-io/kairos#1548). Also they have to figure out how to build a fips enabled Ubuntu Dockerfile.

And this is the "happy path". There is no framework image for non-Ubuntu flavors in which case, they would need to replicate the result of our Earthly targets to build one.

We could write instructions on how to complete these tasks. I don't think doing so will make it much easier though. In my opinion, we should make it more streamlined first and then document it more.

@jimmykarily jimmykarily merged commit 12ef4f7 into main Jun 27, 2023
@jimmykarily jimmykarily deleted the fips-docs branch June 27, 2023 06:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Archived in project
Development

Successfully merging this pull request may close these issues.

2 participants