Rocky Linux 9 and FIPS
I am trying to build a STIG compliant Rocky Linux 9 system for learning purposes. Unfortunately I get this error when I attempt to turn on FIPS.
[root@localhost ~]# sudo fips-mode-setup --enable
Kernel initramdisks are being regenerated. This might take some time.
depmod: ERROR: Bad version passed grub-2.04-19-linode.img
dracut: "depmod -a grub-2.04-19-linode.img" failed.
Installation of FIPS modules could not be completed.
I'm running "GRUB 2" on the system to make use I am not using the Linode kernel but apparently I'm still pulling something from Linode? I also build at Rocky Linux 8 system and got the same errors. This is getting to an area I'm still trying to understand. Can anyone shed some light on what I might be missing?
1 Reply
tlambert
Linode Staff
The binaries the Linode images use for GRUB2 are different than the ones that come directly from the OS (Rocky Linux in this case). Your best bet to enable FIPS on Rocky Linux 9 would be to download the image directly from them and install it as a custom distribution.