Re: New buildfarm animals with FIPS mode enabled

2025-02-20 Thread Mark Wong
On Tue, Feb 18, 2025 at 02:41:18PM +0100, Álvaro Herrera wrote: > On 2025-Feb-17, Daniel Gustafsson wrote: > > > On 17 Feb 2025, at 20:23, Tom Lane wrote: > > > > Obviously, we could talk about extending the regression tests' > > > support for these cases, but I'm really dubious that it's worth

Re: New buildfarm animals with FIPS mode enabled

2025-02-18 Thread Álvaro Herrera
On 2025-Feb-17, Daniel Gustafsson wrote: > On 17 Feb 2025, at 20:23, Tom Lane wrote: > > Obviously, we could talk about extending the regression tests' > > support for these cases, but I'm really dubious that it's worth > > the work. > > Agreed. This means that unless Mark is willing to instal

Re: New buildfarm animals with FIPS mode enabled

2025-02-17 Thread Daniel Gustafsson
> On 17 Feb 2025, at 20:23, Tom Lane wrote: > Daniel Gustafsson writes: > >> Isn't it postgres version mostly? We fixed so the testsuite passed on FIPS >> enabled machines by just not using anything that violates FIPS but I don't >> remember anything OpenSSL version specific. > > No, there are

Re: New buildfarm animals with FIPS mode enabled

2025-02-17 Thread Tom Lane
Daniel Gustafsson writes: > On 17 Feb 2025, at 17:26, Tom Lane wrote: >> I believe the main concern is OpenSSL 1.x versus 3.x, not a specific >> platform. > Isn't it postgres version mostly? We fixed so the testsuite passed on FIPS > enabled machines by just not using anything that violates FIP

Re: New buildfarm animals with FIPS mode enabled

2025-02-17 Thread Daniel Gustafsson
> On 17 Feb 2025, at 17:26, Tom Lane wrote: > > Mark Wong writes: >> On Feb 17, 2025, at 2:36 AM, Álvaro Herrera wrote: >>> As I understand, both of these Ubuntu versions ship with OpenSSL 1.1, >>> though of course OpenSSL 3 could be installed on them. Should I just >>> delete these requests?

Re: New buildfarm animals with FIPS mode enabled

2025-02-17 Thread Tom Lane
Mark Wong writes: > On Feb 17, 2025, at 2:36 AM, Álvaro Herrera wrote: >> As I understand, both of these Ubuntu versions ship with OpenSSL 1.1, >> though of course OpenSSL 3 could be installed on them. Should I just >> delete these requests? > I’m away from my desk until later this week so I do

Re: New buildfarm animals with FIPS mode enabled

2025-02-17 Thread Mark Wong
> On Feb 17, 2025, at 2:36 AM, Álvaro Herrera wrote: > Hello, > > So in light of this conversation, what to do about the following pending > requests? > > pgbfprod=> select format('%s %s', operating_system, os_version) as "OS" from > pending(); > OS >

Re: New buildfarm animals with FIPS mode enabled

2025-02-17 Thread Álvaro Herrera
Hello, So in light of this conversation, what to do about the following pending requests? pgbfprod=> select format('%s %s', operating_system, os_version) as "OS" from pending(); OS - Ubuntu 20.04.6 LTS (Focal

Re: New buildfarm animals with FIPS mode enabled

2025-02-15 Thread Tom Lane
Mark Wong writes: > That's my fault. I did a sloppy job copying configs etc from the s390x > fips animals and forgot about the OS versions, branches, etc. Peter > Eisentraut reminded me I think I cleaned that all up. Cool, thanks. regards, tom lane

Re: New buildfarm animals with FIPS mode enabled

2025-02-15 Thread Mark Wong
Hi Tom, On 2/14/25 10:01 AM, Tom Lane wrote: I see that somebody decided to crank up some animals running RHEL8 and RHEL9 with FIPS mode turned on. The RHEL9 animals pass on v17 and master, but not older branches; the RHEL8 animals pass nowhere. This is unsurprising given that the v17-era comm

Re: New buildfarm animals with FIPS mode enabled

2025-02-14 Thread Tom Lane
Jacob Champion writes: > I'm not buildfarm@, but these animals have now been stopped until we > get them figured out. Sorry -- and thanks for the ping Tom! Thanks for that. Just to be clear, I think it'd be great to run those RHEL9 animals on v17 and later. I'm only questioning whether it's wor

Re: New buildfarm animals with FIPS mode enabled

2025-02-14 Thread Jacob Champion
On Fri, Feb 14, 2025 at 12:51 PM Daniel Gustafsson wrote: > > > On 14 Feb 2025, at 19:01, Tom Lane wrote: > > > I'm kind of disinclined to do all the work that'd be needed to turn > > these animals completely green, especially when the reason to do it > > seems to be that someone decided we shoul

Re: New buildfarm animals with FIPS mode enabled

2025-02-14 Thread Daniel Gustafsson
> On 14 Feb 2025, at 19:01, Tom Lane wrote: > I'm kind of disinclined to do all the work that'd be needed to turn > these animals completely green, especially when the reason to do it > seems to be that someone decided we should without any community > consultation. Perhaps others have different