3.5. Enabling FIPS mode in a container
To enable the full set of cryptographic module self-checks mandated by the Federal Information Processing Standard Publication 140-2 (FIPS mode), the host system kernel must be running in FIPS mode. The podman utility automatically enables FIPS mode on supported containers.
Note
The fips-mode-setup command does not work correctly in containers, and it cannot be used to enable or check FIPS mode in this scenario.
Note
The cryptographic modules of RHEL 9 are not yet certified for the FIPS 140-3 requirements.
Conditions préalables
- The host system must be in FIPS mode.
Procédure
-
On systems with FIPS mode enabled, the
podmanutility automatically enables FIPS mode on supported containers.
Ressources supplémentaires
