From 3f8c4e24e2c248607ede96da1ae4d7c4c1d9f26f Mon Sep 17 00:00:00 2001 From: rmartinc Date: Wed, 15 Feb 2023 15:23:40 +0100 Subject: [PATCH] Change container image in FIPS tests to ubi9 Closes https://github.com/keycloak/keycloak/issues/12422 --- .github/scripts/run-fips-it.sh | 2 +- .github/workflows/ci.yml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/scripts/run-fips-it.sh b/.github/scripts/run-fips-it.sh index b3d32135321..0d095b47746 100755 --- a/.github/scripts/run-fips-it.sh +++ b/.github/scripts/run-fips-it.sh @@ -1,6 +1,6 @@ #!/bin/bash -dnf install -y java-17-openjdk-devel crypto-policies-scripts +dnf install -y java-17-openjdk-devel fips-mode-setup --enable --no-bootcfg fips-mode-setup --is-enabled if [ $? -ne 0 ]; then diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index a8f602ba069..2e75c436c13 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -403,7 +403,7 @@ jobs: jdk-version: 17 - name: Run crypto tests - run: docker run --rm --workdir /github/workspace -v "${{ github.workspace }}":"/github/workspace" -v "$HOME/.m2":"/root/.m2" registry.access.redhat.com/ubi8/ubi:latest .github/scripts/run-fips-ut.sh + run: docker run --rm --workdir /github/workspace -v "${{ github.workspace }}":"/github/workspace" -v "$HOME/.m2":"/root/.m2" registry.access.redhat.com/ubi9/ubi:latest .github/scripts/run-fips-ut.sh - name: Upload JVM Heapdumps if: always() @@ -445,7 +445,7 @@ jobs: run: ./mvnw install -nsu -B -e -pl testsuite/integration-arquillian/servers/auth-server/quarkus -Pauth-server-quarkus,auth-server-fips140-2 - name: Run base tests - run: docker run --rm --workdir /github/workspace -e "SUREFIRE_RERUN_FAILING_COUNT" -v "${{ github.workspace }}":"/github/workspace" -v "$HOME/.m2":"/root/.m2" registry.access.redhat.com/ubi8/ubi:latest .github/scripts/run-fips-it.sh ${{ matrix.mode }} + run: docker run --rm --workdir /github/workspace -e "SUREFIRE_RERUN_FAILING_COUNT" -v "${{ github.workspace }}":"/github/workspace" -v "$HOME/.m2":"/root/.m2" registry.access.redhat.com/ubi9/ubi:latest .github/scripts/run-fips-it.sh ${{ matrix.mode }} - name: Upload JVM Heapdumps if: always()