cli
cli copied to clipboard
Add ability to disable FIPS in the container, when running on FIPS enabled host
Description
It is sometimes desirable to have a container running with FIPS disabled when running on a FIPS enabled host. Would it be possible to add --fips-disable switch to the command line, which would remove the mapping to the FIPS files on the host.
This should probably be opened in https://github.com/moby/moby, because this would be a change needed on the daemon side. That said; I wonder if this can be disabled per-container; wouldn't this effectively re-configure the host as a whole?
Upvote on the ability to run a non-FIPS container on a FIPS-enabled host.