From 6982b61b8d262227adedc5cc6a1e3f0a92a6c423 Mon Sep 17 00:00:00 2001
From: alex <alex@pdp7.net>
Date: Sun, 31 May 2026 09:55:51 +0200
Subject: Hack weird missing /proc/sys/crypto issue

---
 personal_infra/puppet/site/ipa9.h1.int.pdp7.net.pp | 30 ++++++++++++++++++++++
 1 file changed, 30 insertions(+)

(limited to 'personal_infra')

diff --git a/personal_infra/puppet/site/ipa9.h1.int.pdp7.net.pp b/personal_infra/puppet/site/ipa9.h1.int.pdp7.net.pp
index 2228f424..fa212b7b 100644
--- a/personal_infra/puppet/site/ipa9.h1.int.pdp7.net.pp
+++ b/personal_infra/puppet/site/ipa9.h1.int.pdp7.net.pp
@@ -1,3 +1,33 @@
 node 'ipa9.h1.int.pdp7.net' {
   class {'freeipa::server':}
+
+  # $ sudo ipa-healthcheck
+  # Can't find /proc/sys/crypto/fips_enabled, skipping
+  # [
+  #   {
+  #     "source": "ipahealthcheck.meta.core",
+  #     "check": "MetaCheck",
+  #     "result": "WARNING",
+  #     "uuid": "22485a2e-5931-4c2d-a72f-89616c34cbbe",
+  #     "when": "20260531075056Z",
+  #     "duration": "2.267750",
+  #     "kw": {
+  #       "key": "meta",
+  #       "fqdn": "ipa9.h1.int.pdp7.net",
+  #       "fips": "missing /proc/sys/crypto/fips_enabled",
+  #       "acme": "disabled",
+  #       "ipa_version": "4.13.1",
+  #       "ipa_api_version": "2.257"
+  #     }
+  #   }
+  # ]
+  file {'/etc/ipahealthcheck/ipahealthcheck.conf':
+    content => @("EOT")
+    [default]
+
+    [excludes]
+    key=meta
+    | EOT
+    ,
+  }
 }
-- 
cgit v1.2.3