Bug 1955621
Summary: | Install of OCP 4 with FIPS enabled on IBM z/Architecture fails | ||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|
Product: | OpenShift Container Platform | Reporter: | Holger Wolf <Holger.Wolf> | ||||||||
Component: | RHCOS | Assignee: | Nikita Dubrovskii (IBM) <ndubrovs> | ||||||||
Status: | CLOSED DEFERRED | QA Contact: | Michael Nguyen <mnguyen> | ||||||||
Severity: | high | Docs Contact: | |||||||||
Priority: | low | ||||||||||
Version: | 4.7 | CC: | amulmule, dgilmore, dornelas, erich, fnovak, jligon, jschinta, jwiedman, matt.mondics, miabbott, mrussell, ndubrovs, nstielau, pwnovak, wolfgang.voesch | ||||||||
Target Milestone: | --- | ||||||||||
Target Release: | 4.8.0 | ||||||||||
Hardware: | s390x | ||||||||||
OS: | Unspecified | ||||||||||
Whiteboard: | |||||||||||
Fixed In Version: | Doc Type: | If docs needed, set a value | |||||||||
Doc Text: | Story Points: | --- | |||||||||
Clone Of: | Environment: | ||||||||||
Last Closed: | 2021-05-18 19:53:10 UTC | Type: | Bug | ||||||||
Regression: | --- | Mount Type: | --- | ||||||||
Documentation: | --- | CRM: | |||||||||
Verified Versions: | Category: | --- | |||||||||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||||
Cloudforms Team: | --- | Target Upstream Version: | |||||||||
Embargoed: | |||||||||||
Attachments: |
|
Description
Holger Wolf
2021-04-30 14:41:40 UTC
FYI ndubrovs is looking into from a z perspective and will have a patch. Per comment #1, I'm assigning this to Nikita Created attachment 1777833 [details]
Console Log
OCP Version at Install Time: 4.7.9 RHCOS Version at Install Time: 4.7.7 OCP Version after Upgrade (if applicable): RHCOS Version after Upgrade (if applicable): Platform: Z Architecture: s390x query cplevel z/VM Version 7 Release 1.0, service level 2001 (64-bit) Generated at 08/28/20 14:35:31 EDT IPL at 12/15/20 01:09:52 EDT Ready; T=0.01/0.01 11:24:37 Hi all. I've made a fix, now i'm testing it PR: https://github.com/openshift/os/pull/546 Because of broken local rpm mirror wasn't able to build rhcos-47 and test it. So work is still in progress Created attachment 1780295 [details] Installation log with patched rhcos image Log was captured on s390x zVM machine during installation of rhcos-47.83 image built with: - https://github.com/openshift/os/pull/546 - https://github.com/nikita-dubrovskii/s390-tools/commit/70dde0e7d64f39a6f4747306c15ebc053ba01b19 Setting the priority to low as we will be evaluating FIPS support in OCP for Z in an upcoming quarter After discussing this with the OCP Multi Arch team, it appears there has been a misunderstanding. FIPS compliance on OCP running on s390x has never been supported. There is an open RFE for this work being tracked here - https://issues.redhat.com/browse/MULTIARCH-690 Since this would be a feature level change and not a bug fix, I am going to close this BZ as DEFERRED. Please follow the RFE for progress on supporting FIPS + OCP s390x. |