andrewzah - Network

Hi #linux and #NixOS folks/consultants, I currently have a problem. I want to use #openssl 3.x with the #fips module in a distroless docker...

Hi #linux and #NixOS folks/consultants, I currently have a problem. I want to use #openssl 3.x with the #fips module in a distroless docker container, built by #nix. I have an example nix repo at https://github.com/andrewzah/nix-openssl-fips-test.

OpenSSL compiles with the enable-fips flag, but when I run the container, the fips provider does not appear. I'm not sure if it's the root cause, but with strace I see it wants to load glibc-hwcaps?

I've documented this in https://github.com/NixOS/nixpkgs/issues/324013 and https://github.com/NixOS/nix/issues/11078.