0 *H 010  `He0 *H $PContent-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit While we are talking about HTCondor FIPS, could I possibly get a link to the source code? We use Anaconda envs and nobody seems to know how to get the yum installed python bindings inside the conda env. We do however, have a pipeline to build Anaconda packages from source code, so access to the source code would be sufficient for our use case. Thanks all, Wes Public Content -----Original Message----- From: HTCondor-users On Behalf Of Zach Miller Sent: Saturday, August 1, 2020 9:20 AM To: HTCondor-Users Mail List Subject: [External] - Re: [HTCondor-users] Condor_master aborting because of FIPS mode CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe. Oof. That's my fault for suggesting that. I didn't realize there were FIPS tarballs that could be easily made available and I hadn't thought through the rpath issue at the time. My apologies, Douglas. And thanks Tim for setting me straight. Cheers, -zach On 7/31/20, 8:16 PM, "HTCondor-users on behalf of Tim Theisen" wrote: Hello Douglas, I am sorry that you went to so much effort to try and reconstruct a tarball from the packaged builds. The executables in the RPM don't have RPATH defined as it is forbidden in RPM packages. I only put up repositories for the FIPS builds, because that is what was requested. You are obviously requesting FIPS compliant tarballs. Remember, these tarballs will not interoperate with the regular tarballs. You will find the FIPS compliant tarballs in: https://usg02.safelinks.protection.office365.us/?url=https%3A%2F%2Fresearch.cs.wisc.edu%2Fhtcondor%2Ftarball%2Fv8.8%2F8.8.9-fips%2F&data=02%7C01%7C%7C9f2ff6db39d242a884cb08d8362e7bf6%7Cfae7a2aedf1d444e91bebabb0900b9c2%7C0%7C0%7C637318920635246799&sdata=BySYMs3aXgKPNtQ23GLZeddK6wgCyPkfXn%2FcazdYsJs%3D&reserved=0 ...Tim On 7/31/20 8:44 AM, Vechinski, Douglas wrote: > So I've finally had some time to get around to trying this. I downloaded many of the 8.8.9 RPMs from your link and extracted the files from them. After extraction I noticed that there /lib, /lib64, and /libexec subdirectories under the "usr" subdirectory. However, on the tarball from the non-FIPS version that I initially began with, there were just /lib and /libexec subdirectories. Anyway, I copied the files under the "usr" subdirectory over to the NFS share location. > > Before attempting to start condor_master I thought I'd give condor_config_val a test to see if the config files were being located and such. However, when I attempted to run condor_config_val it complained that it couldn't find some shared libraries (libclassadd.so & libcondor_utils_8_8_9.so). (I assume this would be true for most of the other executables as well). I looked and these libraries are present under the "NFS_path/condor-8.8.9_fips/lib64" directory. Comparing with the non-FIPS layout, these libraries are located under the /lib subdirectory (in the associated location where the tarball was extracted). If I do an ldd on the non-FIPS executable, it seems to located these libraries with a path something like "NFS_path/condor-8.8.9/bin/../lib/libclassadd.so". However, on the corresponding FIPS executable, when I do an ldd, it simply is unable to locate it. I'm guessing that is it trying to find in under /lib64 (or /usr/lib64) relative to the system root directory and! n! > ot something like "NFS_path/condor-8.8.9_fips/bin/../lib64". (Note, I tried making symbolic links for those files in lib64 to lib in this NFS location but that didn't work.) > > As a test, I set my LD_LIBRARY_PATH environment variable to include "NFS_path/condor-8.8.9_fips/lib64" and then was able to run condor_config_val. I don't really want to do this as every user T and root would have to set this. I assume something could be done with /etc/ld.so.conf but I assume I would have to do this on each system that is added to the pool. Any other solutions? And, why does the non-FIPS version from the tarball know to look in a lib directory this is relative to executable location and the FIPS version does not? > > > > _______________________________________________ > HTCondor-users mailing list > To unsubscribe, send a message to htcondor-users-request@cs.wisc.edu with a > subject: Unsubscribe > You can also unsubscribe by visiting > https://usg02.safelinks.protection.office365.us/?url=https%3A%2F%2Flists.cs.wisc.edu%2Fmailman%2Flistinfo%2Fhtcondor-users&data=02%7C01%7C%7C9f2ff6db39d242a884cb08d8362e7bf6%7Cfae7a2aedf1d444e91bebabb0900b9c2%7C0%7C0%7C637318920635256796&sdata=hNJ1OH69Ghem3vCWN4UDis%2BeRQKx%2F74N8Gqw6LJFc%2Fs%3D&reserved=0 > > The archives can be found at: > https://usg02.safelinks.protection.office365.us/?url=https%3A%2F%2Flists.cs.wisc.edu%2Farchive%2Fhtcondor-users%2F&data=02%7C01%7C%7C9f2ff6db39d242a884cb08d8362e7bf6%7Cfae7a2aedf1d444e91bebabb0900b9c2%7C0%7C0%7C637318920635256796&sdata=nXIDhuz7JzWfYQEvRNv6RDCL6olE3cZTzSlRWBK1r4s%3D&reserved=0 -- Tim Theisen Release Manager HTCondor & Open Science Grid Center for High Throughput Computing Department of Computer Sciences University of Wisconsin - Madison 4261 Computer Sciences and Statistics 1210 W Dayton St Madison, WI 53706-1685 +1 608 265 5736 _______________________________________________ HTCondor-users mailing list To unsubscribe, send a message to htcondor-users-request@cs.wisc.edu with a subject: Unsubscribe You can also unsubscribe by visiting https://usg02.safelinks.protection.office365.us/?url=https%3A%2F%2Flists.cs.wisc.edu%2Fmailman%2Flistinfo%2Fhtcondor-users&data=02%7C01%7C%7C9f2ff6db39d242a884cb08d8362e7bf6%7Cfae7a2aedf1d444e91bebabb0900b9c2%7C0%7C0%7C637318920635256796&sdata=hNJ1OH69Ghem3vCWN4UDis%2BeRQKx%2F74N8Gqw6LJFc%2Fs%3D&reserved=0 The archives can be found at: https://usg02.safelinks.protection.office365.us/?url=https%3A%2F%2Flists.cs.wisc.edu%2Farchive%2Fhtcondor-users%2F&data=02%7C01%7C%7C9f2ff6db39d242a884cb08d8362e7bf6%7Cfae7a2aedf1d444e91bebabb0900b9c2%7C0%7C0%7C637318920635256796&sdata=nXIDhuz7JzWfYQEvRNv6RDCL6olE3cZTzSlRWBK1r4s%3D&reserved=0 _______________________________________________ HTCondor-users mailing list To unsubscribe, send a message to htcondor-users-request@cs.wisc.edu with a subject: Unsubscribe You can also unsubscribe by visiting https://usg02.safelinks.protection.office365.us/?url=https%3A%2F%2Flists.cs.wisc.edu%2Fmailman%2Flistinfo%2Fhtcondor-users&data=02%7C01%7C%7C9f2ff6db39d242a884cb08d8362e7bf6%7Cfae7a2aedf1d444e91bebabb0900b9c2%7C0%7C0%7C637318920635256796&sdata=hNJ1OH69Ghem3vCWN4UDis%2BeRQKx%2F74N8Gqw6LJFc%2Fs%3D&reserved=0 The archives can be found at: https://usg02.safelinks.protection.office365.us/?url=https%3A%2F%2Flists.cs.wisc.edu%2Farchive%2Fhtcondor-users%2F&data=02%7C01%7C%7C9f2ff6db39d242a884cb08d8362e7bf6%7Cfae7a2aedf1d444e91bebabb0900b9c2%7C0%7C0%7C637318920635256796&sdata=nXIDhuz7JzWfYQEvRNv6RDCL6olE3cZTzSlRWBK1r4s%3D&reserved=0 007OKH0  *H  0[10 &,dus10 &,dnumerica10 &,dad10Uad-GILGALAD-CA0 160724195713Z 360724200712Z0[10 &,dus10 &,dnumerica10 &,dad10Uad-GILGALAD-CA0"0  *H 0 ws%ƺNƮE Pʵpcٰ%(vC%?ۦj[.mKStRq;Y7J#p5[PxV5KL(X\jEJðkI8g{ëyMgBZrusQ8?79p{wTddvfGBO]a U@Ԡ@ҏ @<p\2-pZY=$7~/#\6 Ad.A&-6CNXD Wb 6W`'q.K1 d{go^@ iZ1 !Hͻv(|aomi%ϨbPc3f嚻]l;p]Bx<~\eK y˻*C*RqhK^9h֐]D^xѢ>=Y\#9g=dDq&qd] )0?fk!܎5e$J Ty ˬ ;i0g0 +7CA0U0U00U1fOzTRz!{.0 +70  *H  '0g!Tcᡇm wa&y<09/fKmWܠ x$db@MZV'3G^8 UsdSE7?Hn؂t_(E+w룓[F_%G7CQTaaB ^Tf%,oYy MQ9"$:eX(Q́qda6a3ؖ"x>cم/F)zznP6-w3{l0y ̸KNHez"=A ` F .vBS5$Q&q)=lH&CypBY iԶd rlK/ȉJ%y)]'˖e؞W~L:8sGaC†iQ2@yƑ?71RKU m1!00s0\10 &,dus10 &,dnumerica10 &,dad10Uad-CELEBRIAN-CA' 16F;GdU 0  `He0 *H  1  *H 0 *H  1 200803154107Z0O *H  1B@o4a*vK" )y}{bH{V%=X?rC d0R *H  1C0ABFQ=x Y^_J6gExCs!+qC1@8F