cli icon indicating copy to clipboard operation
cli copied to clipboard

Add ability to disable FIPS in the container, when running on FIPS enabled host

Open rtarquini opened this issue 10 months ago • 2 comments

Description

It is sometimes desirable to have a container running with FIPS disabled when running on a FIPS enabled host. Would it be possible to add --fips-disable switch to the command line, which would remove the mapping to the FIPS files on the host.

rtarquini avatar Apr 29 '25 13:04 rtarquini

This should probably be opened in https://github.com/moby/moby, because this would be a change needed on the daemon side. That said; I wonder if this can be disabled per-container; wouldn't this effectively re-configure the host as a whole?

thaJeztah avatar Apr 29 '25 13:04 thaJeztah

Upvote on the ability to run a non-FIPS container on a FIPS-enabled host.

gargnipungarg avatar Sep 01 '25 06:09 gargnipungarg