rhel 8 configured with fips enabled

[sheepherder82]

Thank you for taking the time to submit an issue!

Background information

What version of Open MPI are you using? (e.g., v4.1.6, v5.0.1, git branch name and hash, etc.)

for openmpi , hwloc pmix and others currently being distributed

it would seem that with "fips" enabled on at least my rhel workstation running 8.10, the workstation will not accept rpms built with this setting seems it needs something more than md5 digest . i was not sure if you were still putting this in but it seems to be in openmpi 5.0.7 at least

# Select md5 packing algorithm, that src.rpm created on one distro can
# be read on another.
%global _binary_filedigest_algorithm 1
%global _source_filedigest_algorithm 1

[sheepherder82]

Sorry , accidental cr/lf , anyway i had to comment out the _binary_filedigest_algorithm and _source_filedigest_algorithm settings going back to the vendor supplied default to get and rpm that could be installed on the platform
i would see errors such as these during installation

Error unpacking rpm package hwloc271_gcc4x_icn-2.7.1-4.32.rhel810.x86_64
  Installing       : prrte3_pmix506_gcc4x_icn-3.0.6-26.6.rhel810.x86_64                                                                       3/3 
error: unpacking of archive failed on file /opt/modules/modulefiles/hwloc271_gcc4x_icn/2.7.1;67d4ac1d: cpio: Digest mismatch
error: hwloc271_gcc4x_icn-2.7.1-4.32.rhel810.x86_64: install failed

https://www.starlab.io/blog/adding-sha256-digests-to-rpms
seems to be a topic regarding use of sha256 digests ..
i believe the enabling of fips may have triggered this for myself , it may be best to either remove it from the spec file or set it as an opt in rpmbuild option .

[jsquyres]

Just to be clear -- are you saying that we should remove these lines:

ompi/contrib/dist/linux/openmpi.spec

Lines 157 to 160 in 13d0522

	# Select md5 packing algorithm, that src.rpm created on one distro can
	# be read on another.
	%global _binary_filedigest_algorithm 1
	%global _source_filedigest_algorithm 1

[jsquyres]

I ask because the comment in the specfile implies that setting the algorithm to md5 is for portability.

What happens if you rebuild the Open MPI-provided RPM with:

rpmbuild --define '_binary_filedigest_algorithm 8' --define '_source_filedigest_algorithm 8' ...

[github-actions]

It looks like this issue is expecting a response, but hasn't gotten one yet. If there are no responses in the next 2 weeks, we'll assume that the issue has been abandoned and will close it.

[github-actions]

Per the above comment, it has been a month with no reply on this issue. It looks like this issue has been abandoned.

I'm going to close this issue. If I'm wrong and this issue is not abandoned, please feel free to re-open it. Thank you!