How To Set Kernel Parameter fips=1

[srguglielmo]

Hello! I am looking to pass the parameter fips=1 to the kernel as mentioned in #1667. This will then allow my containers to bind-mount /etc/system-fips from the host (Bottlerocket) into the container so that FIPS mode in the container can be properly validated. What is the best way to do this? I'm not sure if this can be done in an AWS Launch Template, or if the bootloader (grub?) needs to be edited, or something else. Is there any guidance on how to pass kernel parameters? Thank you!

[jpculp]

Thank you for reaching out! As far as I am aware it is not possible with Bottlerocket out-of-the-box until after some of the work described in #1667 is done.

[srguglielmo]

Thanks for your reply. I'll keep an eye on #1667.