Skip to content

FIPS packages are not considered EE packages

As #6934 (comment 1030094799) shows, Services.enabled?('consul') is returning false because the service_list does not include Consul:

{"logrotate"=>{:groups=>["default", "system"]}, "node_exporter"=>{:groups=>["default", "system", "monitoring", "monitoring_role"]}, "puma"=>{:groups=>["default", "rails"]}, "sidekiq"=>{:groups=>["default", "rails", "sidekiq", "sidekiq_role"]}, "gitlab_exporter"=>{:groups=>["default", "rails", "monitoring"]}, "gitlab_workhorse"=>{:groups=>["default", "rails"]}, "gitaly"=>{:groups=>["default", "rails"]}, "redis"=>{:groups=>["default", "redis", "redis_node"]}, "redis_exporter"=>{:groups=>["default", "redis", "redis_node", "monitoring"]}, "postgresql"=>{:groups=>["default", "postgres", "postgres_role", "patroni_role"]}, "nginx"=>{:groups=>["default", "pages_role"]}, "prometheus"=>{:groups=>["default", "monitoring", "monitoring_role"]}, "alertmanager"=>{:groups=>["default", "monitoring", "monitoring_role"]}, "postgres_exporter"=>{:groups=>["default", "monitoring", "postgres", "postgres_role", "patroni_role"]}, "grafana"=>{:groups=>["default", "monitoring", "monitoring_role"]}, "gitlab_pages"=>{:groups=>["pages_role"]}, "gitlab_kas"=>{:groups=>["default", "rails"]}, "mailroom"=>{:groups=>[]}, "mattermost"=>{:groups=>[]}, "registry"=>{:groups=>[]}, "storage_check"=>{:groups=>[]}, "crond"=>{:groups=>[]}, "praefect"=>{:groups=>[]}}

I think this is because the gitlab-fips Omnibus package might think it's a CE package:

# dpkg -l | grep gitlab
rc  gitlab-ee                            14.10.1+rnightly.fips.235972.7f4622b0-0 amd64        GitLab Enterprise Edition (including NGINX, Postgres, Redis)
ii  gitlab-fips                          15.1.0+rfbranch.fips.242610.50c3795e-0  amd64        GitLab Enterprise Edition (including NGINX, Postgres, Redis) with FIPS compliance