Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add info on ENABLE_SHA1 flag on cache and origin containers (SOFTWARE-5809) #155

Conversation

matyasselmeci
Copy link
Contributor

These are the two places I could find to add the info on the ENABLE_SHA1 flag. The documentation for running a hosted CE is elsewhere; Frontier-Squids I assume don't use grid certs for auth; we don't have an XRootD-Standalone image; ENABLE_SHA1 doesn't work on the EP containers (because they don't run as root and you need root to run update-crypto-policy).

There are numerous non-containerized services where a blurb mentioning EL9 and update-crypto-policy might be useful, though, but that should be a separate PR (and perhaps ticket).

@brianhlin
Copy link
Contributor

We do have an xrootd-standalone image. Does anybody use it? 🤷🏽

The documentation for running a hosted CE is elsewhere

I don't think this is necessary for a CE since we use LE + tokens

There are numerous non-containerized services where a blurb mentioning EL9 and update-crypto-policy might be useful, though, but that should be a separate PR (and perhaps ticket).

Agreed. I've been a bit hesitant on this because it feels like something people will set and forget.

@brianhlin brianhlin requested a review from mwestphall February 9, 2024 20:21
@brianhlin
Copy link
Contributor

Tagging in @mwestphall for the review

@matyasselmeci
Copy link
Contributor Author

We do have an xrootd-standalone image. Does anybody use it? 🤷🏽

Well, it's not documented in this repository at least :)

As a side note the xrootd-standalone docs have not been updated for OSG 23 yet.

Copy link
Collaborator

@mwestphall mwestphall left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@matyasselmeci matyasselmeci merged commit d81bf51 into osg-htc:master Feb 14, 2024
1 check passed
@matyasselmeci matyasselmeci deleted the pr/container-enable-sha1.SOFTWARE-5809 branch February 14, 2024 15:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants