livebook-dev/livebook
1
1
Fork 0
mirror of https://github.com/livebook-dev/livebook.git synced 2025-11-23 01:52:40 +08:00
Code Issues Projects Releases Packages Wiki Activity

Remove LIVEBOOK_FIPS in favour of erl flag

Browse source
This commit is contained in:
Jonatan Kłosko 2025-11-16 19:25:59 +01:00
parent 4247e11720
commit c3e54ee8fa
4 changed files with 10 additions and 11 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
README.md
View file

@ -225,9 +225,6 @@ The following environment variables can be used to configure Livebook on boot:
"standalone" (Standalone), "attached:NODE:COOKIE" (Attached node) "standalone" (Standalone), "attached:NODE:COOKIE" (Attached node)
or "embedded" (Embedded). Defaults to "standalone". or "embedded" (Embedded). Defaults to "standalone".
* `LIVEBOOK_FIPS` - if set to "true", it enables the FIPS mode on startup.
See more details in [the documentation](https://hexdocs.pm/livebook/fips.html).
* `LIVEBOOK_FORCE_SSL_HOST` - sets a host to redirect to if the request is not over HTTPS. * `LIVEBOOK_FORCE_SSL_HOST` - sets a host to redirect to if the request is not over HTTPS.
Note it does not apply when accessing Livebook via localhost. Defaults to nil. Note it does not apply when accessing Livebook via localhost. Defaults to nil.

4
docs/deployment/fips.md
View file

@ -37,3 +37,7 @@ RUN git clone https://github.com/elixir-lang/elixir.git && \
make compile && \ make compile && \
make install make install
``` ```
## Configuration
To enable FIPS in Livebook, you must run it with `ERL_AFLAGS="-crypto fips_mode true"` environment variable set.

12
lib/livebook.ex
View file

@ -270,14 +270,12 @@ defmodule Livebook do
config :livebook, :image_registry_url, image_registry_url config :livebook, :image_registry_url, image_registry_url
end end
# TODO: remove in v1.0
if Livebook.Config.boolean!("LIVEBOOK_FIPS", false) do if Livebook.Config.boolean!("LIVEBOOK_FIPS", false) do
if :crypto.enable_fips_mode(true) do IO.warn(
IO.puts("[Livebook] FIPS mode enabled") ~s/Ignoring LIVEBOOK_FIPS=true, because it is no longer supported. Set ERL_AFLAGS="-crypto fips_mode true" instead./,
else []
Livebook.Config.abort!( )
"Requested FIPS mode via LIVEBOOK_FIPS, but this Erlang installation was compiled without FIPS support"
)
end
end end
end end

2
versions
View file

@ -2,4 +2,4 @@ elixir="1.19.3"
otp="28.1.1" otp="28.1.1"
openssl="1.1.1s" openssl="1.1.1s"
rebar3="3.22.0" rebar3="3.22.0"
ubuntu="noble-20250404" ubuntu="noble-20251013"