Can UBI images be freely used for commercial purposes and FIPS compliance? - Red Hat Customer Portal (2024)

Posted on

Making Node.js v16 FIPS compliant is hard unless you are willing to develop your own OpenSSL 1.1.1 build and go through the FIPS validation process. It looks like RedHat has done it, see link.

If you run the UBI image with Node.js, it looks like it is using a FIPS-compliant Nodejs stack (i.e. a Node JS compiled using a the FIPS version of OpenSSL, and doing all crypto ops using FIPS-validated modules).

> docker run -it registry.access.redhat.com/ubi8/nodejs-16-minimal /bin/bashbash-4.4$ openssl versionOpenSSL 1.1.1k FIPS 25 Mar 2021bash-4.4$ node -p 'crypto.getFips()'0bash-4.4$ node -p 'crypto.createHash("md5")'Hash { _options: undefined, [Symbol(kHandle)]: Hash {}, [Symbol(kState)]: { [Symbol(kFinalized)]: false }}bash-4.4$ node --force-fips -p 'crypto.getFips()'1bash-4.4$ node --force-fips -p 'crypto.createHash("md5")'node:internal/crypto/hash:67 this[kHandle] = new _Hash(algorithm, xofLen); ^Error: error:060800C8:digital envelope routines:EVP_DigestInit_ex:disabled for FIPS at new Hash (node:internal/crypto/hash:67:19) at Object.createHash (node:crypto:130:10) at [eval]:1:8 at Script.runInThisContext (node:vm:129:12) at Object.runInThisContext (node:vm:305:38) at node:internal/process/execution:75:19 at [eval]-wrapper:6:22 at evalScript (node:internal/process/execution:74:60) at node:internal/main/eval_string:27:3 { library: 'digital envelope routines', function: 'EVP_DigestInit_ex', reason: 'disabled for FIPS', code: 'ERR_OSSL_EVP_DISABLED_FOR_FIPS'}bash-4.4$ node -e "console.log(process.versions)" | grep openssl openssl: '1.1.1k',

As per the license agreement, my understanding is that UBI images can be freely used in a commercial environment. Therefore, nodejs-16-minimal looks like a very simple (and free?) way to have a FIPS-compliant Nodejs service. Of course, the container image should run on top of FIPS-validated infrastructure (e.q. a host operating system with FIPS mode enabled).

Can UBI images be freely used for commercial purposes and FIPS compliance? - Red Hat Customer Portal (1)

Started by

Seb E

Newbie 7 points

Can UBI images be freely used for commercial purposes and FIPS compliance? - Red Hat Customer Portal (2024)

FAQs

Can UBI images be freely used for commercial purposes and FIPS compliance? - Red Hat Customer Portal? ›

As per the license agreement, my understanding is that UBI images can be freely used in a commercial environment. Therefore, nodejs-16-minimal looks like a very simple (and free?) way to have a FIPS-compliant Nodejs service.

Is Red Hat universal base image free? ›

The Red Hat Universal Base Image (UBI) is a collection of Open Container Initiative (OCI)-compliant, freely redistributable, container base operating system images.

What is an ubi image? ›

A Universal Base Image (UBI) is a type of container base image that Red Hat created and maintains. The idea behind UBIs is to allow developers to build, share, and collaborate on containerized applications that can run anywhere while still being fully supported.

Is Ubi open source? ›

We open-source everything

We welcome all to peruse our code and issues, or to file an issue if you detect an issue or have a question on our models, or to contribute yourself with a pull request.

What are the benefits of Red Hat Ubi? ›

Red Hat Universal Base Images enable users to FIND, RUN, BUILD, SHARE, and DEPLOY containerized applications using a highly supportable, and enterprise-grade container Base Image anywhere they want — whether Red Hat or non-Red Hat platforms — allowing builders to meet their customers where they are.

Is Red Hat free for commercial use? ›

The current free version of RHEL is part of the Developer subscription and requires you to be an individual developer, not a commercial team. Go here for the RHEL no-developer edition download. You will need to join the Red Hat Developer Program, which has great benefits like tutorials, training, and live events.

Is Red Hat Virtualization free? ›

Red Hat Virtualization (RHV) has 2 pricing edition(s), from $999 to $1,499. Look at different pricing editions below and read more information about the product here to see which one is right for you.

What is UBI used for? ›

Universal basic income proposes that the government regularly give every adult citizen a set amount of money, typically without conditions related to wealth or employment. The aims of such a system include reducing poverty and helping individuals meet basic needs.

Is UBI rhel? ›

Selecting the right base. There are a lot of choices when it comes to container base images, so why should you select Red Hat Universal Base Image (UBI)? Well, first off, all of the code in Red Hat Universal Base Image is derived from Red Hat Enterprise Linux (RHEL).

What is the UBI feature? ›

Universal Basic Income (UBI) is a model for providing a sum of money to all citizens of a country or other geographic area with a given sum of money, regardless of their income, employment status.

Is UBI used anywhere? ›

As of 2024, no country has implemented a full UBI system, but two countries—Mongolia and Iran—have had a partial UBI in the past. There have been numerous pilot projects, and the idea is discussed in many countries. Some have labelled UBI as utopian due to its historical origin.

What are alternatives to UBI? ›

These include universal basic income (UBI), universal basic services (UBS), and the social economy. These three alternatives are chosen because they have been discussed as policy alternatives that push the boundaries of existing welfare states.

Who uses UBI? ›

Universal basic income around the world
  • Australia.
  • Belgium.
  • Brazil.
  • Bulgaria.
  • Canada.
  • Czech Republic.
  • Finland.
  • France.

What are the different types of ubi images? ›

Four UBI images are offered: micro, minimal, standard, and init.

Why do I need a Red Hat account? ›

An active Red Hat subscription provides everything needed to run your systems—including mission-critical systems—reliably and securely. More than software, it's access to a community of experts, knowledge resources, security updates, and support tools you can't get anywhere else.

What is Red Hat universal base image 8? ›

Red Hat Universal Base Images (UBI) are OCI-compliant container base operating system images with complementary runtime languages and packages that are freely redistributable.

Does Red Hat have a free version? ›

The Red Hat build of OpenJDK is a free and supportable open source implementation of the Java Platform, Standard Edition (Java SE).

Is RHEL docker image free? ›

Description. The Universal Base Image is designed and engineered to be the base layer for all of your containerized applications, middleware and utilities. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products.

Do you have to pay to use Red Hat? ›

Yes, Red Hat products are provided on a per-instance or per-installation subscription basis, which gives customers access to all subscription benefits during the subscription term.

What is the free equivalent of Red Hat? ›

Free alternatives to Red Hat, such as CentOS, Debian, and Ubuntu, are generally compatible with a wide range of hardware and software, but they may not have the same level of compatibility testing as Red Hat.

Top Articles
Weekly Devotional: Why Is the Book of Deuteronomy Important?
Can Tesla (TSLA) stock reclaim $400 in 2023?
Pocatello Temple Prayer Roll
Non Omnis Moriar: The Heartbreaking Haunting of Disneyland Paris' Phantom Manor - Park Lore
Varsity Tutors, a Nerdy Company hiring Hoboken Vietnamese Tutor in Hoboken, NJ | LinkedIn
Labcorp | Patient - MyLabCorp
The UPS Store | Get Mailbox Services Here > 1950 E Greyhound Pass Ste 18
Patriot Ledger Obits Today
Emerson Naturals Kratom
Cheap Manicure Near Me
Craiglist Boat For Sale
Alcon National Driving Center Inc
Thekat103.7
Cinemas of Stockholm 🎥 — Stockholmist.
Barber Gym Quantico Hours
Dawson Myers Fairview Nc
Badgehungry
Gotcha Paper 2022 Danville Va
Atlanta Braves Logo - Logo, zeichen, emblem, symbol. Geschichte und Bedeutung
3036150070
Top Songs On Octane 2022
Whisk Recipe Calculator
12 Best Discord Themes for BetterDiscord You Can Try
Best Restaurants In Financial District Nyc
Denver Ebiz Tax Center
Alumni of University of Michigan: class of 1978
Standard Bank Learnership Programme 2021
Devotion Showtimes Near Xscape Theatres Blankenbaker 16
Gabrielle Abbate Obituary
Olivia Dunne says 'tears filled my eyes' as LSU won NCAA women's gymnastics championship
Tollefson Funeral Home Grafton Nd
Sra Memorialcare
Bookoo Garage Sales
Marshel's Wright Donaldson Facebook
Q Management Inc
Riverside Urgent Care Meriden Ct
Megan Olivia Hall Facebook
Rub Rating Louisville
Lohud Obits Rockland County
Www.mygoodtogo
new hampshire houses for rent - craigslist
Registrar - New York Law School
Jacob I. Taylor, M.D., MPH - Urology Clinics of North Texas
Craigslist Campers For Rent
Google Sites: Sign-in
Da Costaschool Elspeet viert 25-jarig jubileum!
Gym Cerca De Mí
Craigslist Near Dallas Tx
Find your Routing Number (ABA) Transit Number - Wise
Suburban Business Districts Crossword Clue
Craigslist Nashville Pets By Owner
Latest Posts
Article information

Author: Nicola Considine CPA

Last Updated:

Views: 6464

Rating: 4.9 / 5 (49 voted)

Reviews: 80% of readers found this page helpful

Author information

Name: Nicola Considine CPA

Birthday: 1993-02-26

Address: 3809 Clinton Inlet, East Aleisha, UT 46318-2392

Phone: +2681424145499

Job: Government Technician

Hobby: Calligraphy, Lego building, Worldbuilding, Shooting, Bird watching, Shopping, Cooking

Introduction: My name is Nicola Considine CPA, I am a determined, witty, powerful, brainy, open, smiling, proud person who loves writing and wants to share my knowledge and understanding with you.