Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
20 changes: 14 additions & 6 deletions docs/fips.md
Original file line number Diff line number Diff line change
@@ -1,10 +1,18 @@
# FIPS compliance

--8<--- "pro-build-announcement.md"
<!-- Percona Server for MySQL Pro includes the [capabilities](psmysql-pro.md#capabilities) that are typically requested by large enterprises. Percona Server for MySQL Pro contains packages created and tested by Percona. These packages are supported only for Percona Customers with a subscription. -->

The Federal Information Processing Standards (FIPS) are a set of U.S. government standards that ensure the security of computer systems for non-military government agencies and contractors. These standards specify how to perform cryptographic operations, such as encryption, hashing, and digital signatures. FIPS mode is a mode of operation that enforces these standards and rejects any non-compliant algorithms or parameters.
<!-- [Become a Percona Customer](https://www.percona.com/about/contact){.md-button} -->

Percona Server for MySQL implements the same level of FIPS support as MySQL. Percona Server for MySQL can run in FIPS mode if a FIPS-enabled OpenSSL library and FIPS Object Module are available at runtime or if compiled using a FIPS-validated version of OpenSSL. You can also receive this functionality by [building Percona Server for MySQL from source code](compile-percona-server.md).
The Federal Information Processing Standards (FIPS) are a set of regulations mandated by the United States government that ensure the security of computer systems for non-military government agencies and their contractors. These standards specify how to perform cryptographic operations, such as encryption, hashing, and digital signatures. FIPS mode is a mode of operation that enforces these standards and rejects any non-compliant algorithms or parameters.

Percona Server for MySQL can run in FIPS mode if a FIPS-enabled OpenSSL library and FIPS Object Module are available at runtime or if compiled using a FIPS-validated version of OpenSSL. FIPS mode remains off by default and must be enabled via [OS/OpenSSL configuration](#prerequisites).

## Version changes

Introduced in Percona Server for MySQL Pro build for [8.4.0-1](release-notes/8.4.0-1.md). You can also receive this functionality by [building Percona Server for MySQL from source code](compile-percona-server.md).

[Percona Server for MySQL 8.4.0-5](release-notes/8.4.7-7.md) includes the FIPS-capable binaries in all builds. No Pro build is required for FIPS compatibility.

## Prerequisites

Expand All @@ -26,7 +34,7 @@ To prepare Percona Server for MySQL for FIPS certification, do the following:

If you enable FIPS on Ubuntu Pro with `$ sudo pro enable fips-updates` and then disable FIPS with `$ sudo pro disable fips-updates`, Percona Server for MySQL may stop operating properly. For example, if you disable FIPS on Ubuntu Pro with `$ sudo pro disable fips-updates` and enable the FIPS mode on Percona Server with `ssl-fips-mode=ON`, Percona Server may not load the SSL certificate.

* Deploy [Percona Server for MySQL from the Pro build](psmysql-pro.md), which is built and tested on operating systems with FIPS pre-approved OpenSSL packages.
<!-- * Deploy [Percona Server for MySQL from the Pro build](psmysql-pro.md), which is built and tested on operating systems with FIPS pre-approved OpenSSL packages. -->

## The FIPS mode variables

Expand Down Expand Up @@ -66,10 +74,10 @@ To ensure that the FIPS mode is enabled, do the following:
A FIPS-approved version of the OpenSSL cryptographic library has been detected in the operating system with a properly configured FIPS module available for loading. Percona Server for MySQL will load this module and run in FIPS mode.
```

## Next steps
<!-- ## Next steps

[Install Percona Server for MySQL Pro](install-pro.md){.md-button}

If you already use Percona Server for MySQL, you can

[Upgrade to Percona Server for MySQL Pro](upgrade-pro.md){.md-button}
[Upgrade to Percona Server for MySQL Pro](upgrade-pro.md){.md-button} -->
6 changes: 3 additions & 3 deletions docs/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -34,11 +34,11 @@ Find the best installation solution with our step-by-step installation instructi

</div><div data-banner markdown>

### :material-backup-restore: Percona Server for MySQL Pro { .title }
### :material-arrow-up: Upgrade instructions { .title }

Enjoy the benefits of Percona Server for MySQL Pro build.
Upgrade your Percona Server for MySQL installation with our comprehensive upgrade guides.

[Percona Server for MySQL Pro](psmysql-pro.md){ .md-button }
[Upgrade instructions](upgrade.md){ .md-button }

</div><div data-banner markdown>

Expand Down
4 changes: 2 additions & 2 deletions docs/install-myrocks.md
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@ It is recommended to install Percona software from official repositories:
$ sudo apt install percona-server-rocksdb
```

* For RHEL or CentOS:
* For RHEL:

```{.bash data-prompt="$"}
$ sudo yum install percona-server-rocksdb
Expand Down Expand Up @@ -168,7 +168,7 @@ remove the Percona MyRocks package:
$ sudo apt remove percona-server-rocksdb-{{vers}}
```

* For RHEL or CentOS:
* For RHEL:

```{.bash data-prompt="$"}
$ sudo yum remove percona-server-rocksdb-80.x86_64
Expand Down
8 changes: 4 additions & 4 deletions docs/installation.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,15 +4,15 @@ Before installing, read the [Percona Server for MySQL {{vers}} Release notes](re

We gather [Telemetry data] in the Percona packages and Docker images.

## Install Percona Server for MySQL from Repositories
## Install Percona Server for MySQL from repositories

Percona provides repositories for yum (`RPM` packages for Red Hat, CentOS and Amazon Linux AMI) and apt (`.deb` packages for Ubuntu and Debian) for software such as Percona Server for MySQL, Percona XtraBackup, and Percona Toolkit. This makes it easy to install and update your software and its dependencies through your operating system’s package manager. This is the recommended way of installing where possible.
Percona provides repositories for yum (`RPM` packages for Red Hat) and apt (`.deb` packages for Ubuntu and Debian) for software such as Percona Server for MySQL, Percona XtraBackup, and Percona Toolkit. This makes it easy to install and update your software and its dependencies through your operating system’s package manager. This is the recommended way of installing where possible.

The following guides describe the installation process for using the official Percona repositories for the `.deb` and `.rpm` packages.

[Install Percona Server for MySQL on Debian and Ubuntu](apt-repo.md){.md-button} [Install Percona Server for MySQL on Red Hat Enterprise Linux and CentOS](yum-repo.md){.md-button}
[Install Percona Server for MySQL on Debian and Ubuntu](apt-repo.md){.md-button} [Install Percona Server for MySQL on Red Hat Enterprise Linux](yum-repo.md){.md-button}

## Other Installation Methods
## Other installation methods

[Install Percona Server for MySQL from Binaries](binary-tarball-install.md){.md-button} <br> [Compile Percona Server for MySQL from Source](source-tarball.md){.md-button} <br> [Run Percona Server for MySQL in a Docker container](docker.md){.md-button}

Expand Down
3 changes: 0 additions & 3 deletions docs/quickstart-overview.md
Original file line number Diff line number Diff line change
Expand Up @@ -37,9 +37,6 @@ The following guides walk you through the setup process and working with a datab
[Choose your next steps:material-arrow-right:](quickstart-next-steps.md){.md-button}





[the Quickstart for the Percona Operator for MySQL based on the Percona Server for MySQL using Helm]: https://docs.percona.com/percona-operator-for-mysql/ps/helm.html

[the Quickstart for the Percona Operator for MySQL based on the Percona Server for MySQL using Minikube]: https://docs.percona.com/percona-operator-for-mysql/ps/minikube.html
7 changes: 0 additions & 7 deletions docs/yum-repo.md
Original file line number Diff line number Diff line change
Expand Up @@ -41,13 +41,6 @@ The RPM builds contain ARM packages with the `aarch64.rpm` extension.

RHEL 8+ and other EL8+ systems enable the MySQL module by default. This module hides the Percona-provided packages and the module must be disabled to make these packages visible.


## Percona Server for MySQL PRO

--8<--- "pro-build-announcement.md"

[Install Percona Server for MySQL Pro](install-pro.md){.md-button}

## Unattended installations

--8<-- "install-flag.md"
Expand Down
13 changes: 2 additions & 11 deletions mkdocs-base.yml
Original file line number Diff line number Diff line change
@@ -1,5 +1,3 @@
# MkDocs configuration for Netlify builds

site_name: Percona Server for MySQL
site_description: Documentation
site_author: Percona LLC
Expand Down Expand Up @@ -173,15 +171,6 @@ extra:

nav:
- Home: index.md
- Percona Server for MySQL PRO:
- psmysql-pro.md
- Install Percona Server for MySQL Pro:
- install-pro.md
- pro-files.md
- Pro build features:
- fips.md
- upgrade-pro.md
- downgrade-from-pro.md
- get-help.md
- Release notes:
- Release notes index: release-notes/release-notes-index.md
Expand Down Expand Up @@ -216,6 +205,7 @@ nav:
- binlog-space.md
- extended-select-into-outfile.md
- innodb-expanded-fast-index-creation.md
- fips.md
- JS language support:
- js-lang-overview.md
- install-js-lang.md
Expand Down Expand Up @@ -280,6 +270,7 @@ nav:
- upgrade-procedures.md
- upgrade-components.md
- downgrade.md
- downgrade-from-pro.md
- Post-Installation:
- binlogging-replication-improvements.md
- post-installation.md
Expand Down