Bug 1804194

Summary: Podman support for FIPS Mode requires a bind mount inside the container [stream-container-tools-rhel8-rhel-8.1.1/podman]
Product: Red Hat Enterprise Linux 8 Reporter: Jindrich Novy <jnovy>
Component: podmanAssignee: Tom Sweeney <tsweeney>
Status: CLOSED NEXTRELEASE QA Contact: atomic-bugs <atomic-bugs>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 8.1CC: ajia, bbaude, ddarrah, dwalsh, jligon, jnovy, lfriedma, lsm5, mheon, tsweeney, weshen
Target Milestone: rc   
Target Release: 8.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: podman-1.6.4-3.el8_1_1 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-03-25 17:19:42 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1784950    

Description Jindrich Novy 2020-02-18 12:33:08 UTC 
This is a tracking bug assuring the fix for [bug 1784950] gets applied in stream-container-tools-rhel8-rhel-8.1.1 branch of podman.
Comment 2 Laurie Friedman 2020-02-19 15:11:23 UTC 
Setting exception+ because all 8.1.1 changes (including bug fixes) require exception+.
Comment 3 Laurie Friedman 2020-02-19 15:24:59 UTC 
zstream+ is required for 8.1.1.z commit.
Comment 7 Daniel Walsh 2020-03-24 12:08:43 UTC 
Ok this looks like it is broken, and the proper directory is not being mounted into the container.  The question I have is will libssl do the right thing?

Will it drop the untrusted algorithms? 

Tom Could you look into getting this to work?
Comment 9 Tom Sweeney 2020-03-25 17:19:42 UTC 
Per discussion with Dan Walsh and Ian McLeod today, FIPS mode support is first targeted for RHEL 8.2 and is not supported nor was it promised for RHEL 8.1.  Closing this as fixed in next release.