# FIPS Planning

## What needs to be done

1. pulplift development environment for CentOS 8
2. Pulp3 code itself to be FIPS compatible
3. Dependencies (like Django) to be FIPS compatible and how to install them
4. CI environment that runs functional tests in a FIPS enabled environment
5. Ensure the Installer is capable of installing into a FIPS enabled environment

## Timeline

Totally completed by October 2020 for galaxy_ng and AWX

## Patching approach of dependencies

Main Principle: We will not use monkey patch dependencies in production

Development/CI Options
* Monkey patch our code in the fips environment for dev/testing
* Have the installer do this?
* Patch dependencies and serve them in a Pulp PyPI instance
* Maintain fips compatible forks of dependencies on github

## FIPS Production Assumptions

* RPM based installs
* Ship patched RPM dependencies for production

###### tags: `FIPS`