---
# System prepended metadata

title: FIPS Planning
tags: [FIPS]

---

# FIPS Planning

## What needs to be done

1. pulplift development environment for CentOS 8
2. Pulp3 code itself to be FIPS compatible
3. Dependencies (like Django) to be FIPS compatible and how to install them
4. CI environment that runs functional tests in a FIPS enabled environment
5. Ensure the Installer is capable of installing into a FIPS enabled environment

## Timeline

Totally completed by October 2020 for galaxy_ng and AWX


## Patching approach of dependencies

Main Principle: We will not use monkey patch dependencies in production

Development/CI Options
  * Monkey patch our code in the fips environment for dev/testing
      * Have the installer do this?
  * Patch dependencies and serve them in a Pulp PyPI instance
  * Maintain fips compatible forks of dependencies on github

## FIPS Production Assumptions

* RPM based installs
* Ship patched RPM dependencies for production

###### tags: `FIPS`