Comment # 11 on bug 1212272 from Andreas Herrmann
(In reply to Andreas Herrmann from comment #7)
> I've started to narrow down which of the many scripts in git-source/t (make
> test) are contributing disproportionately to the performance drop under
> container environment.
> 
> So far I've figured that tests using GPG show a significant drop.

It seems that the base container image is FIPS compliant.

In contrast to the host the container has installed:

 i+ | patterns-base-fips  | FIPS 140-2 specific packages  | package
 i  | fips                | FIPS 140-2 specific packages  | pattern

patterns-base-fips pulls in libgcrypt20-hmac.

This library is not available on non-fips-complient host per default.

gpg behaves differently depending on whether libgcrypt20-hmac is installed or
not.

Removing libgcrypt20-hmac from the container results in lower elapsed time for
several git commands calling gpg commands.

So, for an apples to apples comparison of git commands using gpg either
libgcrypt20-hmac needs to be installed in the host or it needs to be removed
from the container.


You are receiving this mail because: