Skip to content

Commit b74da2f

Browse files
committed
fix(s003): the image's self-check matches enable_fips_mode/1's true
The final RUN matched ok where crypto:enable_fips_mode/1 returns true, so the first fips-image run (35536968071) failed at the check after a complete build. Measured locally: the image now builds through the check. Signed-off-by: Ayla Croft <aylacroft@proton.me>
1 parent ad8bc17 commit b74da2f

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

‎ci/fips/Containerfile‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -66,5 +66,5 @@ RUN mix local.hex --force && mix local.rebar --force
6666
# entering FIPS mode is possible. Which mode a container runs in is the leg's decision, made
6767
# by OPENSSL_FORCE_FIPS_MODE and `-crypto fips_mode true` at run time, never here.
6868
RUN erl -noshell -eval \
69-
'true = maps:get(fips_provider_available, crypto:info()), ok = crypto:enable_fips_mode(true), enabled = crypto:info_fips(), io:format("~p~n", [crypto:info()]), halt().' \
69+
'true = maps:get(fips_provider_available, crypto:info()), true = crypto:enable_fips_mode(true), enabled = crypto:info_fips(), io:format("~p~n", [crypto:info()]), halt().' \
7070
&& elixir --version

0 commit comments

Comments
 (0)