Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fips.enable failing in c9s #1540

Open
jlebon opened this issue Jun 27, 2024 · 0 comments
Open

fips.enable failing in c9s #1540

jlebon opened this issue Jun 27, 2024 · 0 comments

Comments

@jlebon
Copy link
Member

jlebon commented Jun 27, 2024

--- �[31mFAIL�[0m: fips.enable (47.25s)
        harness.go:1823: mach.Start() failed: machine 8330598d-4529-45ff-9568-efe2b9636806 entered emergency.target in initramfs
        harness.go:1740: Found Go panic (opensslcrypto: can't enable FIPS mode for OpenSSL 3.2.2 4 Jun 2024: OSSL_PROVIDER_try_load
         Starting �[0;1;39mIgnition (fetch-offline)�[0m...
[    9.238794] ignition[763]: panic: opensslcrypto: can't enable FIPS mode for OpenSSL 3.2.2 4 Jun 2024: OSSL_PROVIDER_try_load
[    9.246143] ignition[763]: openssl error(s):
[    9.249212] ignition[763]: error:12800067:DSO support routines::could not load the shared library
[    9.255057] ignition[763]: 	crypto/dso/dso_dlfcn.c:118
[    9.258551] ignition[763]: error:12800067:DSO support routines::could not load the shared library
[    9.264293] ignition[763]: 	crypto/dso/dso_lib.c:147
[    9.267750] ignition[763]: error:07880025:common libcrypto routines::reason(37)
[    9.272762] ignition[763]: 	crypto/provider_core.c:949
[    9.276444] ignition[763]: goroutine 1 gp=0xc0000081c0 m=0 mp=0x560b55045420 [running]:
[    9.281902] ignition[763]: panic({0x560b545e7ca0?, 0xc0001be110?})
[    9.286327] ignition[763]: 	/usr/lib/golang/src/runtime/panic.go:779 +0x158 fp=0xc00053fce8 sp=0xc00053fc38 pc=0x560b53572318
[    9.293619] ignition[763]: crypto/internal/backend.init.0()
[    9.298779] ignition[763]: 	/usr/lib/golang/src/crypto/internal/backend/openssl.go:72 +0x21f fp=0xc00053fe20 sp=0xc00053fce8 pc=0x560b536d5c7f
[    9.307026] ignition[763]: runtime.doInit1(0x560b54fdf500)
[    9.310822] ignition[763]: 	/usr/lib/golang/src/runtime/proc.go:7176 +0xea fp=0xc00053ff50 sp=0xc00053fe20 pc=0x560b535842ea
[    9.317976] ignition[763]: runtime.doInit(...)
[    9.321079] ignition[763]: 	/usr/lib/golang/src/runtime/proc.go:7143
[    9.325327] ignition[763]: runtime.main()
[    9.328158] ignition[763]: 	/usr/lib/golang/src/runtime/proc.go:253 +0x357 fp=0xc00053ffe0 sp=0xc00053ff50 pc=0x560b53575a97
[    9.335571] ignition[763]: runtime.goexit({})
[    9.338738] ignition[763]: 	/usr/lib/golang/src/runtime/asm_amd64.s:1695 +0x1 fp=0xc00053ffe8 sp=0xc00053ffe0 pc=0x560b535a87c1
[    9.346157] ignition[763]: goroutine 2 gp=0xc000008c40 m=nil [force gc (idle)]:
[    9.351589] ignition[763]: runtime.gopark(0x0?, 0x0?, 0x0?, 0x0?, 0x0?)
[    9.356056] ignition[763]: 	/usr/lib/golang/src/runtime/proc.go:402 +0xce fp=0xc00005efa8 sp=0xc00005ef88 pc=0x560b53575e0e
[    9.363168] ignition[763]: runtime.goparkunlock(...)
[    9.366638] ignition[763]: 	/usr/lib/golang/src/runtime/proc.go:408
[    9.370848] ignition[763]: runtime.forcegchelper()
[    9.374201] ignition[763]: 	/usr/lib/golang/src/runtime/proc.go:326 +0xb8 fp=0xc00005efe0 sp=0xc00005efa8 pc=0x560b53575c98
[    9.381555] ignition[763]: runtime.goexit({})
[    9.384791] ignition[763]: 	/usr/lib/golang/src/runtime/asm_amd64.s:1695 +0x1 fp=0xc00005efe8 sp=0xc00005efe0 pc=0x560b535a87c1
[    9.392287] ignition[763]: created by runtime.init.7 in goroutine 1
[    9.396743] ignition[763]: 	/usr/lib/golang/src/runtime/proc.go:314 +0x1a
[    9.401275] ignition[763]: goroutine 3 gp=0xc000008e00 m=nil [runnable]:
[    9.405793] ignition[763]: runtime.gopark(0x0?, 0x0?, 0x0?, 0x0?, 0x0?)
[    9.410254] ignition[763]: 	/usr/lib/golang/src/runtime/proc.go:402 +0xce fp=0xc00005f780 sp=0xc00005f760 pc=0x560b53575e0e
[    9.417383] ignition[763]: runtime.goparkunlock(...)
[    9.420805] ignition[763]: 	/usr/lib/golang/src/runtime/proc.go:408
[    9.425010] ignition[763]: runtime.bgsweep(0xc00007e000)
[    9.428679] ignition[763]: 	/usr/lib/golang/src/runtime/mgcsweep.go:278 +0x94 fp=0xc00005f7c8 sp=0xc00005f780 pc=0x560b535614f4
[    9.435997] ignition[763]: runtime.gcenable.gowrap1()
[    9.439534] ignition[763]: 	/usr/lib/golang/src/runtime/mgc.go:203 +0x25 fp=0xc00005f7e0 sp=0xc00005f7c8 pc=0x560b53555e25
[    9.446967] ignition[763]: runtime.goexit({})
[    9.450132] ignition[763]: 	/usr/lib/golang/src/runtime/asm_amd64.s:1695 +0x1 fp=0xc00005f7e8 sp=0xc00005f7e0 pc=0x560b535a87c1
[    9.458763] ignition[763]: created by runtime.gcenable in goroutine 1
[    9.463067] ignition[763]: 	/usr/lib/golang/src/runtime/mgc.go:203 +0x66
[    9.467762] ignition[763]: goroutine 4 gp=0xc000008fc0 m=nil [runnable]:
[    9.472186] ignition[763]: runtime.gopark(0xc00007e000?, 0x560b54522090?, 0x1?, 0x0?, 0xc000008fc0?)
[    9.478636] ignition[763]: 	/usr/lib/golang/src/runtime/proc.go:402 +0xce fp=0xc00005ff78 sp=0xc00005ff58 pc=0x560b53575e0e
[    9.485779] ignition[763]: runtime.goparkunlock(...)
[    9.489211] ignition[763]: 	/usr/lib/golang/src/runtime/proc.go:408
[    9.493427] ignition[763]: runtime.(*scavengerState).park(0x560b55043ea0)
[    9.498774] ignition[763]: 	/usr/lib/golang/src/runtime/mgcscavenge.go:425 +0x49 fp=0xc00005ffa8 sp=0xc00005ff78 pc=0x560b5355eee9
[    9.506436] ignition[763]: runtime.bgscavenge(0xc00007e000)
[    9.510359] ignition[763]: 	/usr/lib/golang/src/runtime/mgcscavenge.go:653 +0x3c fp=0xc00005ffc8 sp=0xc00005ffa8 pc=0x560b5355f47c
[    9.517861] ignition[763]: runtime.gcenable.gowrap2()
[    9.521364] ignition[763]: 	/usr/lib/golang/src/runtime/mgc.go:204 +0x25 fp=0xc00005ffe0 sp=0xc00005ffc8 pc=0x560b53555dc5
[    9.528762] ignition[763]: runtime.goexit({})
[    9.532106] ignition[763]: 	/usr/lib/golang/src/runtime/asm_amd64.s:1695 +0x1 fp=0xc00005ffe8 sp=0xc00005ffe0 pc=0x560b535a87c1
[    9.540577] ignition[763]: created by runtime.gcenable in goroutine 1
[    9.545760] ignition[763]: 	/usr/lib/golang/src/runtime/mgc.go:204 +0xa5
[    9.550246] ignition[763]: goroutine 5 gp=0xc000009c00 m=nil [finalizer wait]:
[    9.555057] ignition[763]: runtime.gopark(0xc00005e648?, 0x560b53549445?, 0xa8?, 0x1?, 0xc0000081c0?)
[    9.561006] ignition[763]: 	/usr/lib/golang/src/runtime/proc.go:402 +0xce fp=0xc00005e620 sp=0xc00005e600 pc=0x560b53575e0e
[    9.568771] ignition[763]: runtime.runfinq()
[    9.571795] ignition[763]: 	/usr/lib/golang/src/runtime/mfinal.go:194 +0x107 fp=0xc00005e7e0 sp=0xc00005e620 pc=0x560b53554de7
[    9.579104] ignition[763]: runtime.goexit({})
[    9.582124] ignition[763]: 	/usr/lib/golang/src/runtime/asm_amd64.s:1695 +0x1 fp=0xc00005e7e8 sp=0xc00005e7e0 pc=0x560b535a87c1
[    9.589531] ignition[763]: created by runtime.createfing in goroutine 1
[    9.594764] ignition[763]: 	/usr/lib/golang/src/runtime/mfinal.go:164 +0x3d
[    9.599847] ignition[763]: goroutine 6 gp=0xc00014e1c0 m=nil [GC worker (idle)]:
[    9.605281] ignition[763]: runtime.gopark(0x0?, 0x0?, 0x0?, 0x0?, 0x0?)
[    9.610134] ignition[763]: 	/usr/lib/golang/src/runtime/proc.go:402 +0xce fp=0xc000060750 sp=0xc000060730 pc=0x560b53575e0e
[    9.617914] ignition[763]: runtime.gcBgMarkWorker()
[    9.621662] ignition[763]: 	/usr/lib/golang/src/runtime/mgc.go:1310 +0xe5 fp=0xc0000607e0 sp=0xc000060750 pc=0x560b53557f25
[    9.629771] ignition[763]: runtime.goexit({})
[    9.632835] ignition[763]: 	/usr/lib/golang/src/runtime/asm_amd64.s:1695 +0x1 fp=0xc0000607e8 sp=0xc0000607e0 pc=0x560b535a87c1
[    9.640102] ignition[763]: created by runtime.gcBgMarkStartWorkers in goroutine 1
[    9.645775] ignition[763]: 	/usr/lib/golang/src/runtime/mgc.go:1234 +0x1c
[    9.650387] ignition[763]: goroutine 7 gp=0xc00014e380 m=nil [runnable]:
[    9.654938] ignition[763]: go.opencensus.io/stats/view.init.0.gowrap1()
[    9.659519] ignition[763]: 	/builddir/build/BUILD/ignition-2.19.0/vendor/go.opencensus.io/stats/view/worker.go:34 fp=0xc000060fe0 sp=0xc000060fd8 pc=0x560b53bbd340
[    9.669783] ignition[763]: runtime.goexit({})
[    9.673413] ignition[763]: 	/usr/lib/golang/src/runtime/asm_amd64.s:1695 +0x1 fp=0xc000060fe8 sp=0xc000060fe0 pc=0x560b535a87c1
[    9.681502] ignition[763]: created by go.opencensus.io/stats/view.init.0 in goroutine 1
[    9.689769] ignition[763]: 	/builddir/build/BUILD/ignition-2.19.0/vendor/go.opencensus.io/stats/view/worker.go:34 +0x8d

https://gcsweb-ci.apps.ci.l2s4.p1.openshiftapps.com/gcs/test-platform-results/pr-logs/pull/openshift_os/1532/pull-ci-openshift-os-master-scos-9-build-test-qemu/1805559141113008128/artifacts/test/artifacts/kola/fips.enable/8330598d-4529-45ff-9568-efe2b9636806/console.txt

:/# LD_LIBRARY_PATH=$libs $strace -e trace=openat ignition |& grep crypto
openat(AT_FDCWD, "/sysroot/ostree/deploy/scos/deploy/d0b3d5aaa6d689af7d70740fe38e2dc0884172260e0bbfd9503f43d1c5420f67.0/usr/lib64/libcrypto.so.3", O_RDONLY|O_CLOEXEC) = 3
openat(AT_FDCWD, "/proc/sys/crypto/fips_enabled", O_RDONLY) = 3
openat(AT_FDCWD, "/sysroot/ostree/deploy/scos/deploy/d0b3d5aaa6d689af7d70740fe38e2dc0884172260e0bbfd9503f43d1c5420f67.0/usr/lib64/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v4/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v3/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib64/glibc-hwcaps/x86-64-v2/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib64/tls/haswell/avx512_1/x86_64/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib64/tls/haswell/avx512_1/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib64/tls/haswell/x86_64/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib64/tls/haswell/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib64/tls/avx512_1/x86_64/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib64/tls/avx512_1/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib64/tls/x86_64/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib64/tls/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib64/haswell/avx512_1/x86_64/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib64/haswell/avx512_1/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib64/haswell/x86_64/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib64/haswell/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib64/avx512_1/x86_64/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib64/avx512_1/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib64/x86_64/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib64/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v4/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v3/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib64/glibc-hwcaps/x86-64-v2/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib64/tls/haswell/avx512_1/x86_64/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib64/tls/haswell/avx512_1/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib64/tls/haswell/x86_64/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib64/tls/haswell/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib64/tls/avx512_1/x86_64/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib64/tls/avx512_1/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib64/tls/x86_64/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib64/tls/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib64/haswell/avx512_1/x86_64/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib64/haswell/avx512_1/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib64/haswell/x86_64/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib64/haswell/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib64/avx512_1/x86_64/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib64/avx512_1/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib64/x86_64/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib64/libcrypto.so.1.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/sysroot/ostree/deploy/scos/deploy/d0b3d5aaa6d689af7d70740fe38e2dc0884172260e0bbfd9503f43d1c5420f67.0/usr/lib64/libcrypto.so.11", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib64/libcrypto.so.11", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib64/libcrypto.so.11", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/sysroot/ostree/deploy/scos/deploy/d0b3d5aaa6d689af7d70740fe38e2dc0884172260e0bbfd9503f43d1c5420f67.0/usr/lib64/libcrypto.so.111", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib64/libcrypto.so.111", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib64/libcrypto.so.111", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/sysroot/ostree/deploy/scos/deploy/d0b3d5aaa6d689af7d70740fe38e2dc0884172260e0bbfd9503f43d1c5420f67.0/usr/lib64/libcrypto.so.1.0.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib64/libcrypto.so.1.0.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib64/libcrypto.so.1.0.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/sysroot/ostree/deploy/scos/deploy/d0b3d5aaa6d689af7d70740fe38e2dc0884172260e0bbfd9503f43d1c5420f67.0/usr/lib64/libcrypto.so.1.0.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib64/libcrypto.so.1.0.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib64/libcrypto.so.1.0.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/sysroot/ostree/deploy/scos/deploy/d0b3d5aaa6d689af7d70740fe38e2dc0884172260e0bbfd9503f43d1c5420f67.0/usr/lib64/libcrypto.so.10", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib64/libcrypto.so.10", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/lib64/libcrypto.so.10", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/proc/sys/crypto/fips_enabled", O_RDONLY|O_CLOEXEC) = 3

so it tries really hard to find various versions and locations for libcrypto, except the one that we actually have:

:/# ls -l /usr/lib64/libcrypto*
lrwxrwxrwx 1 root root      30 Jan  1  1970 /usr/lib64/libcrypto.so.3 -> ../../lib64/libcrypto.so.3.2.2
-rwxr-xr-x 1 root root 5435176 Jan  1  1970 /usr/lib64/libcrypto.so.3.2.2

so some build misconfiguration or something?

jlebon added a commit to jlebon/os that referenced this issue Jul 10, 2024
We're currently hitting OpenSSL issues there:
openshift#1540
jlebon added a commit to jlebon/os that referenced this issue Aug 6, 2024
We're currently hitting OpenSSL issues there:
openshift#1540
jlebon added a commit to aleskandro/openshift-os that referenced this issue Aug 7, 2024
We're currently hitting OpenSSL issues there:
openshift#1540
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant