Bug 2315672

Summary:	openssl-devel-engine.i686 is not available on amd64 systems
Product:	[Fedora] Fedora	Reporter:	Zbigniew Jędrzejewski-Szmek <zbyszek>
Component:	openssl	Assignee:	Dmitry Belyavskiy <dbelyavs>
Status:	CLOSED ERRATA	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	41	CC:	crypto-team, dbelyavs, mspacek, mturk, shebburn, ssorce, suraj.ghimire7, tm
Target Milestone:	---	Keywords:	Triaged
Target Release:	---	Flags:	fedora-admin-xmlrpc: mirror+
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2024-10-10 14:46:46 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Zbigniew Jędrzejewski-Szmek 2024-09-30 14:41:05 UTC

I need openssl-devel-engine.i686 for 32-bit builds of systemd…

'sudo dnf5 install openssl-devel.i686' works, but
'sudo dnf5 install openssl-devel-engine.i686' fails:
No match for argument: openssl-devel-engine.i686

I guess it needs to be marked for multilib somewhere?


Reproducible: Always

Comment 1 Simo Sorce 2024-09-30 14:47:23 UTC

this is a real bug ... but, why are you building system with engine support? Afaik it supports provides now.

Comment 2 Zbigniew Jędrzejewski-Szmek 2024-09-30 14:56:37 UTC

systemd supports provides, but (the general conclusion is that) provides don't support systemd, or more precisely, some types of signing that were supported via engines are not (yet) supported with provides. Maybe this is becoming inaccurate, but at least for now, the systemd rpms are built with engine support and thus need include/openssl/engine.h.

Comment 3 Simo Sorce 2024-09-30 18:16:21 UTC

Do you have specifics?
I am not aware of deficiencies, and we should move off of engines wherever possible.

Comment 4 Zbigniew Jędrzejewski-Szmek 2024-09-30 20:27:02 UTC

Let's not discuss this here. The topic on engines was covered extensively before on fedora-devel and in the upstream systemd bugtracker.

Comment 5 Zbigniew Jędrzejewski-Szmek 2024-10-05 08:22:04 UTC

https://pagure.io/pungi-fedora/pull-request/1386
https://pagure.io/fedora-infra/ansible/pull-request/2289

Comment 6 Dmitry Belyavskiy 2024-10-10 14:11:10 UTC

Sorry, I don't understand what are my steps to mark this package for multilib. Zbigniew could you please give a clue?

Comment 7 Zbigniew Jędrzejewski-Szmek 2024-10-10 14:45:14 UTC

The package was not "multilib" because the name didn't match "*-devel" and the name was not special-cased in pungi config. The two pull requests I linked above should resolve the issue. They were merged a few days ago, so it's possible that the issue is already resolved.

Comment 8 Zbigniew Jędrzejewski-Szmek 2024-10-10 14:46:46 UTC

Yep, it seems the problem is solved:
$ sudo dnf5 install openssl-devel-engine.i686
...
Installing:
 openssl-devel-engine                       i686       1:3.2.2-9.fc41                              updates-testing            52.8 KiB
...