Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[build] Set rpm digest algorithm to sha256 #93230

Merged
merged 3 commits into from
Mar 3, 2021

Conversation

jbudz
Copy link
Member

@jbudz jbudz commented Mar 2, 2021

RHEL 8+ has added stricter checks on the hashes of rpm headers when
FIPS is enabled. In order to support this, we've swapped the digest
algorithm from md5 to sha256.

Testing

RPM based operating systems in our support matrix should be checked for backwards compatibility.
https://s3-us-west-1.amazonaws.com/kibana.budzenski.com/93230/1333242/kibana-8.0.0-SNAPSHOT-x86_64.rpm

  • Installs on RHEL8 + FIPS
  • Installs on RHEL, CentOS, Oracle Enterprise Linux 7+

Closes #69613

RHEL 8+ has added stricter checks on the hashes of rpm headers when
FIPS is enabled.  In order to support this, we've swapped the digest
algorithm from md5 to sha256.
@jbudz jbudz added Team:Operations Team label for Operations Team v8.0.0 release_note:skip Skip the PR/issue when compiling release notes v7.13.0 labels Mar 2, 2021
@jbudz jbudz requested a review from a team as a code owner March 2, 2021 14:39
@elasticmachine
Copy link
Contributor

Pinging @elastic/kibana-operations (Team:Operations)

Copy link
Member

@mistic mistic left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@jbudz
Copy link
Member Author

jbudz commented Mar 2, 2021

@elasticmachine merge upstream

@jbudz
Copy link
Member Author

jbudz commented Mar 2, 2021

@elasticmachine merge upstream

@kibanamachine
Copy link
Contributor

💚 Build Succeeded

Metrics [docs]

Async chunks

Total size of all lazy-loaded chunks that will be downloaded as the user navigates the app

id before after diff
triggersActionsUi 1.6MB 1.5MB -23.9KB

Page load bundle

Size of the bundles that are downloaded on every page load. Target size is below 100kb

id before after diff
triggersActionsUi 104.1KB 104.2KB +82.0B
Unknown metric groups

async chunk count

id before after diff
triggersActionsUi 41 42 +1

History

To update your PR or re-run it, just comment with:
@elasticmachine merge upstream

@jbudz jbudz merged commit 3ad68c1 into elastic:master Mar 3, 2021
@jbudz jbudz deleted the build/rpm-digest branch March 3, 2021 18:07
jbudz added a commit that referenced this pull request Mar 3, 2021
@jbudz
Copy link
Member Author

jbudz commented Mar 3, 2021

7.x: 69fbe25

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backported release_note:skip Skip the PR/issue when compiling release notes Team:Operations Team label for Operations Team v7.13.0 v8.0.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Kibana is not installed on RHEL 8 based systems with FIPS without bypassing file integrity checks
4 participants