Bamboo agent Kubernetes pod unable to connect to bitbucket.

dnt_2019

 

 I have been working on the bamboo product to use bamboo agent base:10.2.3 to create Kubernetes Bamboo Agent Pod.   When I try to implement a plan to connect to bit bucket. It is unable to connect to bit bucket.

  The  message is ' ...PRNG is not seeded Fatal: could not read from remote repository please make sure you have correct right access... '. 

with this issue, we have digger to it to explore more. I have ran the command in Bamboo Agent pod with 'openssl rand -hex 16',  I got messages ' ... could not load the shared library: ../crypton/aso/dso_lib.c:152 and .../crypto/provider_core.c:912:name=flips '.

therefore, I have acknowledge that the FIPS module missing. What I am asking for help out that can we update the bamboo-agent-base to contain the FIPS module or help me how to include it in the base agent image.

dnt_2019

  Last week, I have posted this question to wait for help.  However, my team and I have found the solution for this.  Since the bamboo-base image use the Based only with ubuntu 22.0.4 without update any libs included the FLIPS. 

  We have costumed the image as following

 

FROM atlassian/bamboo-agent-base:10.2.3 as base

from base As builder

RUN apt update && apt install -y build-essential && mkdir -p /tmp/openssl

COPY ./openssl /tmp/openssl

RUN ./Configure enable-fips --prefix=/openssl --openssldir=/openssl/ssl -WL, -rpath=/openssl/lib && \

    make && \

make install

FROM base

COPY --from builder /openssl/ /openssl

COPY ca-certificate.crt /etc/ssl/certs/ca-certificate.crt

RUN echo "/openssl/lib64" | tee /etc/ld.so.conf.d/openssl-3.4.conf && \

    ldconfig -v

LABEL maintainer ="STS" \

      classification="UNCLASSIFICATION"

 

  By using this customed image, I am able to connect to bit bucket.