Jira (PUP-9991) `puppet module uninstall` does not work on FIPS

0 views
Skip to first unread message

Barr Iserloth (JIRA)

unread,
Aug 30, 2019, 6:16:03 PM8/30/19
to puppe...@googlegroups.com
Barr Iserloth created an issue
 
Puppet / Task PUP-9991
`puppet module uninstall` does not work on FIPS
Issue Type: Task Task
Assignee: Unassigned
Created: 2019/08/30 3:15 PM
Priority: Normal Normal
Reporter: Barr Iserloth

Currently, the uninstall action is disabled on FIPS systems by this line because the default uninstall process relies on comparing MD5 hashes of the module that's being uninstalled.

Josh Cooper had suggestions for how to enable this command on FIPS without running into MD5 issues. Namely, the suggestions are enabling the command so that a user can pass the force or ignore_changes options, which will bypass the MD5-related parts of the uninstall process, and updating the command so that when it is called on a FIPS system without either of those options, a message is emitted telling the user that changes will be ignored and then setting the @ignore_changes option itself.

Add Comment Add Comment
 
This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93)
Atlassian logo

Josh Cooper (JIRA)

unread,
Aug 30, 2019, 6:17:03 PM8/30/19
to puppe...@googlegroups.com
Josh Cooper updated an issue
Change By: Josh Cooper
Fix Version/s: PUP 6.9.0

Josh Cooper (JIRA)

unread,
Aug 30, 2019, 6:17:03 PM8/30/19
to puppe...@googlegroups.com
Josh Cooper updated an issue
Change By: Josh Cooper
Team: Modules Coremunity

Josh Cooper (JIRA)

unread,
Aug 30, 2019, 6:17:04 PM8/30/19
to puppe...@googlegroups.com
Josh Cooper updated an issue
Change By: Josh Cooper
Sprint: Coremunity Hopper

Josh Cooper (JIRA)

unread,
Sep 4, 2019, 1:59:04 PM9/4/19
to puppe...@googlegroups.com
Josh Cooper updated an issue
Change By: Josh Cooper
Sprint: Coremunity Hopper Platform Core KANBAN

Josh Cooper (JIRA)

unread,
Sep 4, 2019, 2:03:02 PM9/4/19
to puppe...@googlegroups.com
Josh Cooper assigned an issue to Josh Cooper
Change By: Josh Cooper
Assignee: Josh Cooper

Josh Cooper (JIRA)

unread,
Sep 4, 2019, 2:03:04 PM9/4/19
to puppe...@googlegroups.com
Josh Cooper updated an issue
Change By: Josh Cooper
Release Notes Summary: The `puppet module uninstall` command now works in FIPS mode provided the `--ignore_changes` or `--force` arguments are specified. If the arguments are not specified, then uninstall will fail, so that local changes to the module are not lost.
Release Notes: Bug Fix

Josh Cooper (JIRA)

unread,
Sep 4, 2019, 4:52:03 PM9/4/19
to puppe...@googlegroups.com

Josh Cooper (JIRA)

unread,
Sep 5, 2019, 2:58:03 PM9/5/19
to puppe...@googlegroups.com

Jean Bond (JIRA)

unread,
Sep 13, 2019, 5:37:07 PM9/13/19
to puppe...@googlegroups.com
Jean Bond updated an issue
 
Change By: Jean Bond
Labels: resolved-issue-added
Reply all
Reply to author
Forward
0 new messages