Hi Team
I try to enable the fips in 15 SP6 image :registry.suse.com/suse/sle15:15.6
I have followed this POC:
And get this output :
b2b5672a7750:/ # fips-mode-setup --enable --no-bootcfg
Loading repository data…
Reading installed packages…
‘patterns-base-fips’ is already installed.
No update candidate for ‘patterns-base-fips-20200124-150600.32.3.2.x86_64’. The highest available version is already installed.
Resolving package dependencies…
Nothing to do.
Preserving current FIPS-based policy FIPS.
Please review the subpolicies to ensure they only restrict, not relax the FIPS policy.
Setting system policy to FIPS
Note: System-wide crypto policies are applied on application start-up.
It is recommended to restart the system for the change of policies
to fully take place.
FIPS mode will be enabled.
Now you need to configure the bootloader to add kernel options “fips=1”
and reboot the system for the setting to take effect.
But this is an image how do I reboot the system?
So what can I do to build a fips enabled image with the 15 SP6 ?