Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-42688

ignition: panic when fips.enable

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Major Major
    • None
    • 4.17.z, 4.18.0, 4.19.0
    • RHCOS
    • Moderate
    • None
    • 1
    • Core Packages - 264
    • 1
    • Proposed
    • False
    • Hide

      None

      Show
      None
    • Release Note Not Required
    • In Progress

      Description of problem:
      Version-Release number of selected component (if applicable):
      After recompilation of ignition with go1.22, a panic started to occur while trying to enable fips in a node. 

      [    4.938126] ignition[758]: panic: opensslcrypto: can't enable FIPS mode for OpenSSL 3.0.7 1 Nov 2022: OSSL_PROVIDER_try_load
[    4.939071] ignition[758]: openssl error(s):
[    4.939450] ignition[758]: error:12800067:DSO support routines::could not load the shared library
[    4.940197] ignition[758]:   crypto/dso/dso_dlfcn.c:118
[    4.940639] ignition[758]: error:12800067:DSO support routines::could not load the shared library
[    4.941371] ignition[758]:   crypto/dso/dso_lib.c:152
[    4.941798] ignition[758]: error:07880025:common libcrypto routines::reason(524325)
[    4.943416] ignition[758]:   crypto/provider_core.c:912
[    4.943884] ignition[758]: goroutine 1 gp=0xc0000081c0 m=0 mp=0x55c5a1dab700 [running]:
[    4.944542] ignition[758]: panic({0x55c5a1374900?, 0xc0004c01b0?})

      Full stack trace

      This is happening for 4.17 and 4.18 build roots.
      Getting back to the golang1.21 based 4.16 build in 4.17 made this problem disappear.

      Slack thread: go version -m output

              rhn-support-jmarrero Joseph Marrero Corchado
              jdelft Joep van Delft
              Michael Nguyen Michael Nguyen
              Votes:
              0 Vote for this issue
              Watchers:
              9 Start watching this issue

                Created:
                Updated: