Skip to content

Commit 83ea514

Browse files
committed
[ubuntu24.04][FIPS] disable FIPS enforcement when enabling pro mode
Signed-off-by: Tariq Ibrahim <[email protected]>
1 parent 96fa9e1 commit 83ea514

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

ubuntu24.04/nvidia-driver

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -28,10 +28,18 @@ _enable_fips_if_required() {
2828
if [[ -n "${UBUNTU_PRO_TOKEN}" && ${KERNEL_VERSION} =~ "fips" ]]; then
2929
echo "Ubuntu Pro token and FIPS kernel detected"
3030
apt-get -qq install --no-install-recommends ubuntu-advantage-tools > /dev/null
31+
32+
# This workaround is needed in Ubuntu 24.04 as the pro client attempts to use the FIPS provider when it see that
33+
# the underlying kernel is FIPS enabled.
34+
export OPENSSL_FORCE_FIPS_MODE=0
35+
3136
echo "Attaching Ubuntu Pro token..."
3237
pro attach --no-auto-enable "${UBUNTU_PRO_TOKEN}"
3338
echo "Enabling FIPS apt repo access..."
3439
pro enable --access-only --assume-yes fips-updates
40+
echo "Installing the OpenSSL FIPS module"
41+
apt-get -qq install --no-install-recommends openssl-fips-module-3 > /dev/null
42+
unset OPENSSL_FORCE_FIPS_MODE
3543
fi
3644
}
3745

0 commit comments

Comments
 (0)