Skip to content

Commit

Permalink
Fix: remove openssl-fips-provider (#219)
Browse files Browse the repository at this point in the history
* Fix: remove openssl-fips-provider

* Check fips-mode-setup if enabled and stop if it is

* add fips-mode-setup to bin list; use --is-enabled
  • Loading branch information
nazunalika authored Aug 5, 2024
1 parent 21491cf commit bccfbf6
Showing 1 changed file with 10 additions and 0 deletions.
10 changes: 10 additions & 0 deletions migrate2rocky/migrate2rocky9.sh
Original file line number Diff line number Diff line change
Expand Up @@ -273,6 +273,12 @@ pre_check () {
'migrate2rocky9. See the README file for details.'
fi

if fips-mode-setup --is-enabled; then
exit_message \
'Migration from a system that has FIPS mode enabled is not supported by '\
'migrate2rocky9. Please disable FIPS mode before running migrate2rocky9.'
fi

dnf -y check || exit_message \
'Errors found in dnf/rpm database. Please correct before running '\
'migrate2rocky9.'
Expand Down Expand Up @@ -326,6 +332,7 @@ bin_check() {
bins=(
rpm dnf awk column tee tput mkdir cat arch sort uniq rmdir df
rm head curl sha512sum mktemp systemd-detect-virt sed grep
fips-mode-setup
)
if [[ $update_efi ]]; then
bins+=(findmnt grub2-mkconfig efibootmgr mokutil lsblk)
Expand Down Expand Up @@ -718,6 +725,9 @@ collect_system_info () {
redhat-release
redhat-release-eula
)
addl_pkg_removes=(
openssl-fips-provider
)

# Check to make sure that we don't already have a full or partial
# RockyLinux install.
Expand Down

0 comments on commit bccfbf6

Please sign in to comment.