Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Doc-752 Update FIPS to add tabs with one for RHEL and one for Debian/Ubuntu #914

Open
wants to merge 4 commits into
base: main
Choose a base branch
from
Open

Doc-752 Update FIPS to add tabs with one for RHEL and one for Debian/Ubuntu #914

Changes from 3 commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
078ab39
Doc-752 Update FIPS to add tabs with one for RHEL and one for Debian …
Feediver1 Dec 11, 2024
10b78ec
Merge branch 'main' into Doc-752
Feediver1 Dec 11, 2024
835aee3
Update modules/deploy/partials/linux/install-fips.adoc
Feediver1 Dec 11, 2024
a640eea
Update modules/deploy/partials/linux/install-fips.adoc
Feediver1 Dec 11, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
28 changes: 28 additions & 0 deletions modules/deploy/partials/linux/install-fips.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,6 +18,11 @@ To run Redpanda in FIPS compliance mode, you must install the `redpanda-fips` pa

- Contains a version of `rpk` built with the https://github.com/microsoft/go[Microsoft GoLang compiler^] and https://github.com/microsoft/go-crypto-openssl[Microsoft’s Go Crypto OpenSSL package^] to which `rpk` is linked, and uses the FIPS-approved version of OpenSSL.

[tabs]
=====
RHEL::
+
--
To install Redpanda for FIPS compliance, run:

[,bash]
Expand All @@ -29,9 +34,32 @@ NOTE: Alternatively, you could run `sudo apt install -y redpanda-fips`, which al

If you wish to only use `rpk` on a FIPS host, run:

[,bash]
----
sudo yum install -y repdanda-fips redpanda-rpk-fips
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
sudo yum install -y repdanda-fips redpanda-rpk-fips
sudo yum install repdanda-fips redpanda-rpk-fips

We should remove the -y as it accepts all prompts. User most knowingly accept them before continuing.

----

--
Debian/Ubuntu::
+
--
To install Redpanda for FIPS compliance, run:

[,bash]
----
sudo install -y redpanda-rpk-fips redpanda-fips
Feediver1 marked this conversation as resolved.
Show resolved Hide resolved
----

NOTE: Alternatively, you could run `sudo install -y redpanda-fips`, which also picks up and includes the `redpanda` install package.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
NOTE: Alternatively, you could run `sudo install -y redpanda-fips`, which also picks up and includes the `redpanda` install package.
NOTE: Alternatively, you could run `sudo install redpanda-fips`, which also picks up and includes the `redpanda` install package.

Copy link
Contributor

@Deflaimun Deflaimun Dec 11, 2024 •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

no package manager here? check if the tip should be sudo apt install redpanda-fips

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The command should be sudo apt install redpanda-fips for Debian/Ubuntu and sudo yum install redpanda-fips for Rhel


If you wish to only use `rpk` on a FIPS host, run:

[,bash]
----
sudo apt install -y redpanda-rpk-fips
----

--
=====

See also: xref:manage:security/fips-compliance.adoc[Configure Redpanda for FIPS]
Loading