fipsnotes.md 697 B

Quick notes on activating FIPS on ubuntu pro

sudo add-apt-repository ppa:canonical-server/ua-client-daily --yes
sudo apt update
sudo apt install ubuntu-advantage-tools ubuntu-advantage-pro --yes

# Interactive:
sudo ua enable fips --beta 
# have to press "r" a few times during the process, even though it doesn't prompt
sudo apt install linux-aws-fips --yes


# Non-interactive
KERNEL=$(awk -F"'" '/menuentry.*fips/ { print $(NF-1); exit }' /boot/grub/grub.cfg)
sudo tee /etc/default/grub.d/99-fips.cfg << __EOF__ 
GRUB_DEFAULT="1>$KERNEL"
GRUB_CMDLINE_LINUX_DEFAULT="\$GRUB_CMDLINE_LINUX_DEFAULT fips=1"
__EOF__
# Paste this too or just hit <enter>

sudo update-grub
shutdown -r now