Can UBI images be freely used for commercial purposes and FIPS compliance? - Red Hat Customer Portal (2024)

Posted on

Making Node.js v16 FIPS compliant is hard unless you are willing to develop your own OpenSSL 1.1.1 build and go through the FIPS validation process. It looks like RedHat has done it, see link.

If you run the UBI image with Node.js, it looks like it is using a FIPS-compliant Nodejs stack (i.e. a Node JS compiled using a the FIPS version of OpenSSL, and doing all crypto ops using FIPS-validated modules).

> docker run -it registry.access.redhat.com/ubi8/nodejs-16-minimal /bin/bashbash-4.4$ openssl versionOpenSSL 1.1.1k FIPS 25 Mar 2021bash-4.4$ node -p 'crypto.getFips()'0bash-4.4$ node -p 'crypto.createHash("md5")'Hash { _options: undefined, [Symbol(kHandle)]: Hash {}, [Symbol(kState)]: { [Symbol(kFinalized)]: false }}bash-4.4$ node --force-fips -p 'crypto.getFips()'1bash-4.4$ node --force-fips -p 'crypto.createHash("md5")'node:internal/crypto/hash:67 this[kHandle] = new _Hash(algorithm, xofLen); ^Error: error:060800C8:digital envelope routines:EVP_DigestInit_ex:disabled for FIPS at new Hash (node:internal/crypto/hash:67:19) at Object.createHash (node:crypto:130:10) at [eval]:1:8 at Script.runInThisContext (node:vm:129:12) at Object.runInThisContext (node:vm:305:38) at node:internal/process/execution:75:19 at [eval]-wrapper:6:22 at evalScript (node:internal/process/execution:74:60) at node:internal/main/eval_string:27:3 { library: 'digital envelope routines', function: 'EVP_DigestInit_ex', reason: 'disabled for FIPS', code: 'ERR_OSSL_EVP_DISABLED_FOR_FIPS'}bash-4.4$ node -e "console.log(process.versions)" | grep openssl openssl: '1.1.1k',

As per the license agreement, my understanding is that UBI images can be freely used in a commercial environment. Therefore, nodejs-16-minimal looks like a very simple (and free?) way to have a FIPS-compliant Nodejs service. Of course, the container image should run on top of FIPS-validated infrastructure (e.q. a host operating system with FIPS mode enabled).

Can UBI images be freely used for commercial purposes and FIPS compliance? - Red Hat Customer Portal (1)

Started by

Seb E

Newbie 7 points

Can UBI images be freely used for commercial purposes and FIPS compliance? - Red Hat Customer Portal (2024)

FAQs

Can UBI images be freely used for commercial purposes and FIPS compliance? - Red Hat Customer Portal? ›

As per the license agreement, my understanding is that UBI images can be freely used in a commercial environment. Therefore, nodejs-16-minimal looks like a very simple (and free?) way to have a FIPS-compliant Nodejs service.

Is Red Hat universal base image free? ›

The Red Hat Universal Base Image (UBI) is a collection of Open Container Initiative (OCI)-compliant, freely redistributable, container base operating system images.

What is an ubi image? ›

A Universal Base Image (UBI) is a type of container base image that Red Hat created and maintains. The idea behind UBIs is to allow developers to build, share, and collaborate on containerized applications that can run anywhere while still being fully supported.

Is Ubi open source? ›

We open-source everything

We welcome all to peruse our code and issues, or to file an issue if you detect an issue or have a question on our models, or to contribute yourself with a pull request.

What are the benefits of Red Hat Ubi? ›

Red Hat Universal Base Images enable users to FIND, RUN, BUILD, SHARE, and DEPLOY containerized applications using a highly supportable, and enterprise-grade container Base Image anywhere they want — whether Red Hat or non-Red Hat platforms — allowing builders to meet their customers where they are.

Is Red Hat free for commercial use? ›

The current free version of RHEL is part of the Developer subscription and requires you to be an individual developer, not a commercial team. Go here for the RHEL no-developer edition download. You will need to join the Red Hat Developer Program, which has great benefits like tutorials, training, and live events.

Is Red Hat Virtualization free? ›

Red Hat Virtualization (RHV) has 2 pricing edition(s), from $999 to $1,499. Look at different pricing editions below and read more information about the product here to see which one is right for you.

What is UBI used for? ›

Universal basic income proposes that the government regularly give every adult citizen a set amount of money, typically without conditions related to wealth or employment. The aims of such a system include reducing poverty and helping individuals meet basic needs.

Is UBI rhel? ›

Selecting the right base. There are a lot of choices when it comes to container base images, so why should you select Red Hat Universal Base Image (UBI)? Well, first off, all of the code in Red Hat Universal Base Image is derived from Red Hat Enterprise Linux (RHEL).

What is the UBI feature? ›

Universal Basic Income (UBI) is a model for providing a sum of money to all citizens of a country or other geographic area with a given sum of money, regardless of their income, employment status.

Is UBI used anywhere? ›

As of 2024, no country has implemented a full UBI system, but two countries—Mongolia and Iran—have had a partial UBI in the past. There have been numerous pilot projects, and the idea is discussed in many countries. Some have labelled UBI as utopian due to its historical origin.

What are alternatives to UBI? ›

These include universal basic income (UBI), universal basic services (UBS), and the social economy. These three alternatives are chosen because they have been discussed as policy alternatives that push the boundaries of existing welfare states.

Who uses UBI? ›

Universal basic income around the world
  • Australia.
  • Belgium.
  • Brazil.
  • Bulgaria.
  • Canada.
  • Czech Republic.
  • Finland.
  • France.

What are the different types of ubi images? ›

Four UBI images are offered: micro, minimal, standard, and init.

Why do I need a Red Hat account? ›

An active Red Hat subscription provides everything needed to run your systems—including mission-critical systems—reliably and securely. More than software, it's access to a community of experts, knowledge resources, security updates, and support tools you can't get anywhere else.

What is Red Hat universal base image 8? ›

Red Hat Universal Base Images (UBI) are OCI-compliant container base operating system images with complementary runtime languages and packages that are freely redistributable.

Does Red Hat have a free version? ›

The Red Hat build of OpenJDK is a free and supportable open source implementation of the Java Platform, Standard Edition (Java SE).

Is RHEL docker image free? ›

Description. The Universal Base Image is designed and engineered to be the base layer for all of your containerized applications, middleware and utilities. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products.

Do you have to pay to use Red Hat? ›

Yes, Red Hat products are provided on a per-instance or per-installation subscription basis, which gives customers access to all subscription benefits during the subscription term.

What is the free equivalent of Red Hat? ›

Free alternatives to Red Hat, such as CentOS, Debian, and Ubuntu, are generally compatible with a wide range of hardware and software, but they may not have the same level of compatibility testing as Red Hat.

Top Articles
How to Make a Budget - Experian
Axie Infinity (AXS) Price Prediction 2025, 2026, 2027, 2028, 2029 and 2030: Guest Post by crypto.ro global | CoinMarketCap
Devin Mansen Obituary
NOAA: National Oceanic & Atmospheric Administration hiring NOAA Commissioned Officer: Inter-Service Transfer in Spokane Valley, WA | LinkedIn
Dunhams Treestands
Toa Guide Osrs
Cash4Life Maryland Winning Numbers
Computer Repair Tryon North Carolina
O'reilly's In Monroe Georgia
Steve Strange - From Punk To New Romantic
Where's The Nearest Wendy's
South Bend Tribune Online
Void Touched Curio
Five Day National Weather Forecast
Arboristsite Forum Chainsaw
Payment and Ticket Options | Greyhound
Alexander Funeral Home Gallatin Obituaries
Troy Bilt Mower Carburetor Diagram
How do I get into solitude sewers Restoring Order? - Gamers Wiki
1773X To
Aaa Saugus Ma Appointment
CVS Near Me | Columbus, NE
Ihub Fnma Message Board
Urban Dictionary Fov
Churchill Downs Racing Entries
The Powers Below Drop Rate
Marlene2995 Pagina Azul
Craigslist Auburn Al
Meowiarty Puzzle
Our Leadership
Downloahub
Fastpitch Softball Pitching Tips for Beginners Part 1 | STACK
Urban Blight Crossword Clue
Where Can I Cash A Huntington National Bank Check
What Is Xfinity and How Is It Different from Comcast?
Morlan Chevrolet Sikeston
Bridger Park Community Garden
Foolproof Module 6 Test Answers
Rogers Centre is getting a $300M reno. Here's what the Blue Jays ballpark will look like | CBC News
Ewwwww Gif
Nearest Ups Office To Me
Indiana Jones 5 Showtimes Near Cinemark Stroud Mall And Xd
Colorado Parks And Wildlife Reissue List
Best Conjuration Spell In Skyrim
Tlc Africa Deaths 2021
Used Sawmill For Sale - Craigslist Near Tennessee
Pronósticos Gulfstream Park Nicoletti
Definition of WMT
Black Adam Showtimes Near Kerasotes Showplace 14
Campaign Blacksmith Bench
Secondary Math 2 Module 3 Answers
Latest Posts
Article information

Author: Nicola Considine CPA

Last Updated:

Views: 6464

Rating: 4.9 / 5 (49 voted)

Reviews: 80% of readers found this page helpful

Author information

Name: Nicola Considine CPA

Birthday: 1993-02-26

Address: 3809 Clinton Inlet, East Aleisha, UT 46318-2392

Phone: +2681424145499

Job: Government Technician

Hobby: Calligraphy, Lego building, Worldbuilding, Shooting, Bird watching, Shopping, Cooking

Introduction: My name is Nicola Considine CPA, I am a determined, witty, powerful, brainy, open, smiling, proud person who loves writing and wants to share my knowledge and understanding with you.