{"id":18052503,"url":"https://github.com/simp/pupmod-simp-fips","last_synced_at":"2026-01-16T17:30:33.133Z","repository":{"id":13943389,"uuid":"75419775","full_name":"simp/pupmod-simp-fips","owner":"simp","description":"The SIMP fips Puppet Module","archived":false,"fork":false,"pushed_at":"2023-10-24T19:24:48.000Z","size":170,"stargazers_count":0,"open_issues_count":0,"forks_count":14,"subscribers_count":16,"default_branch":"master","last_synced_at":"2024-03-14T23:06:52.607Z","etag":null,"topics":["fips","puppet","simp"],"latest_commit_sha":null,"homepage":null,"language":"Ruby","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/simp.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-12-02T18:13:13.000Z","updated_at":"2024-06-21T15:44:31.259Z","dependencies_parsed_at":"2023-02-10T17:45:50.656Z","dependency_job_id":"36ccb85a-540e-4b26-b9fb-794980e10d78","html_url":"https://github.com/simp/pupmod-simp-fips","commit_stats":{"total_commits":57,"total_committers":12,"mean_commits":4.75,"dds":0.5789473684210527,"last_synced_commit":"ddf241a2287aae47d9119eaa96a46efe119c34df"},"previous_names":[],"tags_count":19,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/simp%2Fpupmod-simp-fips","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/simp%2Fpupmod-simp-fips/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/simp%2Fpupmod-simp-fips/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/simp%2Fpupmod-simp-fips/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/simp","download_url":"https://codeload.github.com/simp/pupmod-simp-fips/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248281419,"owners_count":21077423,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["fips","puppet","simp"],"created_at":"2024-10-30T23:12:00.572Z","updated_at":"2026-01-16T17:30:33.126Z","avatar_url":"https://github.com/simp.png","language":"Ruby","funding_links":[],"categories":[],"sub_categories":[],"readme":"[![License](https://img.shields.io/:license-apache-blue.svg)](http://www.apache.org/licenses/LICENSE-2.0.html)\n[![CII Best Practices](https://bestpractices.coreinfrastructure.org/projects/73/badge)](https://bestpractices.coreinfrastructure.org/projects/73)\n[![Puppet Forge](https://img.shields.io/puppetforge/v/simp/fips.svg)](https://forge.puppetlabs.com/simp/fips)\n[![Puppet Forge Downloads](https://img.shields.io/puppetforge/dt/simp/fips.svg)](https://forge.puppetlabs.com/simp/fips)\n[![Build Status](https://travis-ci.org/simp/pupmod-simp-fips.svg)](https://travis-ci.org/simp/pupmod-simp-fips)\n\n#### Table of Contents\n\n\u003c!-- vim-markdown-toc GFM --\u003e\n\n* [Description](#description)\n  * [This is a SIMP module](#this-is-a-simp-module)\n* [Setup](#setup)\n  * [What fips affects](#what-fips-affects)\n* [\u003e FIPS mode disables md5 hashing at a library level. Enabling it may have unintended consequences.](#-fips-mode-disables-md5-hashing-at-a-library-level-enabling-it-may-have-unintended-consequences)\n  * [Beginning with fips](#beginning-with-fips)\n* [\u003e method to consistently configure all SIMP modules with your intended FIPS mode.](#-method-to-consistently-configure-all-simp-modules-with-your-intended-fips-mode)\n* [Reference](#reference)\n* [Limitations](#limitations)\n* [Development](#development)\n  * [Acceptance tests](#acceptance-tests)\n\n\u003c!-- vim-markdown-toc --\u003e\n\n## Description\n\nThis module enables Federal Information Processing Standard(FIPS) mode at the\nkernel level. FIPS Publication 140-2, is a computer security standard, developed\nby a U.S.  Government and industry working group to validate the quality of\ncryptographic modules.  FIPS publications (including 140-2) can be found at the\nfollowing URL: http://csrc.nist.gov/publications/PubsFIPS.html.  Enabling FIPS\nmode installs an integrity checking package and modifies ciphers available for\napplications to use.\n\nThis module manages the kernel parameters and packages required for enabling\nFIPS mode in supported operating systems.\n\n### This is a SIMP module\n\nThis module is a component of the [System Integrity Management Platform](https://simp-project.com),\na compliance-management framework built on Puppet.\n\nIf you find any issues, they may be submitted to our [bug tracker](https://simp-project.atlassian.net/).\n\n## Setup\n\n### What fips affects\n\n-----------------------------------------\n\u003e **WARNING**\n\u003e\n\u003e FIPS mode disables md5 hashing at a library level. Enabling it may have unintended consequences.\n-----------------------------------------\n\n* Kernel parameters and Grub\n* Dracut and initrd\n* Packages:\n  * nss\n  * dracut-fips\n  * fipscheck\n\n### Beginning with fips\n\nInclude the `fips` class.\n\n* By default, this **will enable FIPS mode**.\n* To ensure that FIPS mode is disabled, set `simp_options::fips` to `false`.\n  * Do _not_ set `fips::enabled` directly to `false`―it defaults to the value\n    of `simp_options::fips` (as do the FIPS-related parameters of all other\n    SIMP modules).\n\n-----------------------------------------\n\u003e **IMPORTANT**\n\u003e\n\u003e Setting `simp_options::fips` to either `true` or `false` is _by far_ the best\n\u003e method to consistently configure all SIMP modules with your intended FIPS mode.\n-----------------------------------------\n\n## Reference\n\nSee [REFERENCE.md](./REFERENCE.md) for details.\n\n## Limitations\n\nSIMP Puppet modules are generally intended for use on Red Hat Enterprise Linux\nand compatible distributions, such as CentOS. Please see the [`metadata.json` file](./metadata.json)\nfor the most up-to-date list of supported operating systems, Puppet versions,\nand module dependencies.\n\n## Development\n\nPlease read our [Contribution Guide](https://simp.readthedocs.io/en/stable/contributors_guide/index.html).\n\n### Acceptance tests\n\nThis module includes [Beaker](https://github.com/puppetlabs/beaker) acceptance\ntests using the SIMP [Beaker Helpers](https://github.com/simp/rubygem-simp-beaker-helpers).\n\nBy default the tests use [Vagrant](https://www.vagrantup.com/) with\n[VirtualBox](https://www.virtualbox.org) as a back-end; Vagrant and VirtualBox\nmust both be installed to run these tests without modification. To execute the\ntests run the following:\n\n```shell\nbundle install\nbundle exec rake beaker:suites\n```\n\nPlease refer to the [SIMP Beaker Helpers documentation](https://github.com/simp/rubygem-simp-beaker-helpers/blob/master/README.md) for more information.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsimp%2Fpupmod-simp-fips","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fsimp%2Fpupmod-simp-fips","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsimp%2Fpupmod-simp-fips/lists"}