Known issues

Bugs and feature requests

OpenVoxDB’s bugs and feature requests are managed in OpenVoxDB’s issue tracker. Search this database if you’re having problems and please report any new issues to us!

FIPS packages ship older Bouncy Castle jars

The FIPS builds of openvoxdb 9.0.0 ship an older set of Bouncy Castle FIPS 1.x jars. The latest Bouncy Castle FIPS 1.x release has a small issue that could cause problems in a very constrained, non-default configuration, so the project is not updating to it. OpenVoxDB 9.1 will move to the Bouncy Castle FIPS 2.x line, which is the one fully certified for FIPS on Java 21.

Hash projection has character limit of 63

Support was added for using dot notation for projections. This supports queries like the one below.

inventory[facts.os.family] {
  certname = "host-1"
}

The dotted hash projection facts.os.family must be 63, or fewer, characters.

Broader issues

Autorequire relationships are opaque

Puppet resource types can “autorequire” other resources when certain conditions are met, but we don’t correctly model these relationships in OpenVoxDB. (For example, if you manage two file resources where one is a parent directory of the other, Puppet will automatically make the child dependent on the parent.) The problem is that these dependencies are not written to the catalog; the Puppet agent creates these relationships on the fly when it reads the catalog. Getting these relationships into OpenVoxDB will require a significant change to Puppet’s core.