Support for FIPs-enabled jupyter/datascience-notebook docker image

[alicia-td]

What docker image(s) is this feature applicable to?

datascience-notebook

What change(s) are you proposing?

Hello!

Are there plans to support FIPs-enabled Docker images for the jupyter/datascience-notebook image?

How does this affect the user?

Our company requires all our VMs to be FIPS-enabled for security reasons, as disabling FIPS will allow a flow to continue that might use a non-compliant algorithm.

We want to use the jupyter/datascience-notebook on the FIPS-enabled VM, but are running into issues because the docker image's OpenSSL library is not configured for FIPS mode.

Thank you!

Anything else?

No response

[mathbunnyru]

Hi @alicia-td,

Unfortunately, I don't know anything about FIPS-enabled OpenSSL.

If you know, could you please answer these questions:

1. How to install it? Is it available on conda-forge?
2. Do you need to re-compile everything depending on openssl?
3. Maybe, it's possible to install the right package on top of the existing package?

[benz0li]

Maybe related:

ubuntu:24.04 (OpenSSL?) seems to require kernel features that are not available in kernel linux-image-gcp-fips version 5.4.0.1141.83.

– rstudio/rstudio#15636 (comment), rocker-org/rocker-versioned2#902 (comment)