Skip to content

Fixes #9251. Use SQL Server 2022 image on FIPS - #9253

Open
JiriOndrusek wants to merge 1 commit into
apache:mainfrom
jiriOndrusek-agent:9251-fips-mssql-image
Open

JiriOndrusek wants to merge 1 commit into
apache:mainfrom
jiriOndrusek-agent:9251-fips-mssql-image

Conversation

@JiriOndrusek

Copy link
Copy Markdown
Contributor

Fixes #9251

The SQL Server 2025 container image crashes on FIPS enabled hosts during TLS initialization (errors 49946/49947, exit code 151), see microsoft/mssql-docker#958. The container never starts, so CamelMssqlJdbcTest and other MS SQL based tests fail.

  • root pom: fips profile overrides sql-server.container.image with mcr.microsoft.com/mssql/server:2022-latest (the last image that starts on FIPS)
  • jdbc/mssql: honour sql-server.container.image via the dev service image-name, like the mysql/oracle/postgresql modules already do (it was falling back to the Quarkus default before)

Regular (non-FIPS) runs keep using 2025-latest. The fips override also covers jdbc-grouped and the Debezium MS SQL test, which read the same property.

🤖 Generated with Claude Code

The SQL Server 2025 container image crashes on FIPS enabled hosts during
TLS initialization (errors 49946/49947, exit code 151), see
microsoft/mssql-docker#958. The container never
starts, so CamelMssqlJdbcTest and other MS SQL based tests fail.

- root pom: `fips` profile overrides sql-server.container.image with
  mcr.microsoft.com/mssql/server:2022-latest (the last image that starts
  on FIPS)
- jdbc/mssql: honour sql-server.container.image via the dev service
  image-name, like the mysql/oracle/postgresql modules already do (it was
  falling back to the Quarkus default before)
- debezium-grouped README: fix the stale MS SQL EULA image tag
  (2022-latest -> 2025-latest) to match the current default image

Regular (non-FIPS) runs keep using 2025-latest.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@jamesnetherton

Copy link
Copy Markdown
Contributor

I am curious whether the RHEL variant of the SQL Server image might work out of the box with FIPS?

https://mcr.microsoft.com/en-us/artifact/mar/mssql/rhel/server/tag/2025-latest

If it's a pain to test, then don't bother. But it might simplify things compared to needing 2 different image versions.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

SQL Server 2025 test image does not start on FIPS (CamelMssqlJdbcTest)

3 participants