Bug 2359744

Summary: SIGILL in openssl on Power8 crashes DNF5 => Mock => Copr builds
Product: [Fedora] Fedora Reporter: Pavel Raiskup <praiskup>
Component: opensslAssignee: Dmitry Belyavskiy <dbelyavs>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: unspecified    
Version: rawhideCC: code, crypto-team, dbelyavs, mjg, mspacek, mturk, shebburn, suraj.ghimire7, tm
Target Milestone: ---   
Target Release: ---   
Hardware: ppc64le   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: ---
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2025-04-15 13:49:55 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Pavel Raiskup 2025-04-15 12:53:27 UTC 
Original issue resolving ppc64le build problems in Copr:
https://github.com/fedora-copr/copr/issues/3693

# openssl s_client bugzilla.redhat.com:https
Connecting to 2600:1408:ec00:2f::1735:b86
CONNECTED(00000003)
depth=2 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G3
verify return:1
Illegal instruction (core dumped)


Affected version: openssl-3.5.0-2.fc43.ppc64le
Downgrading openssl-libs to 3.2.4-3.fc43.ppc64le helps.

Reproducible: Always

Steps to Reproduce:
1. get a Power8 machine with Rawhide (or at least container on Power8)
2. run `dnf5 install <something>` 
3. observe DNF6 crashing
4. confirm by `openssl s_client bugzilla.redhat.com:https`
Comment 1 Pavel Raiskup 2025-04-15 12:58:13 UTC 
We can provide a POWER8 machine for testing purposes to anyone interested.
Comment 2 Dmitry Belyavskiy 2025-04-15 13:49:55 UTC 

*** This bug has been marked as a duplicate of bug 2359082 ***
Comment 3 Dmitry Belyavskiy 2025-04-15 15:02:40 UTC 
Could you please try this build if the infrastructure wakes up
https://koji.fedoraproject.org/koji/taskinfo?taskID=131563912
Comment 4 Pavel Raiskup 2025-04-16 05:46:22 UTC 
That build helps!  Thank you.  What do we risk if we configure
Mock in Fedora Copr to use openssl-3.5.0-3.fc43 (for Rawhide
builds)?
Comment 5 Dmitry Belyavskiy 2025-04-16 07:30:07 UTC 
Basically nothing.
Just a question - do we officially support POWER8 for Fedora? (We don't for RHEL)
Comment 6 Pavel Raiskup 2025-04-16 10:56:06 UTC 
Cool, thanks.  Going to apply a hot-fix in production.

> do we officially support POWER8 for Fedora?

I think yes, at least per:
https://fedoraproject.org/wiki/Architectures/PowerPC

> Only 64bit machines (little endian Power8 or newer) are supported now;
Comment 7 Dmitry Belyavskiy 2025-04-16 11:06:43 UTC 
No need to use the hotfix, I made a build for rawhide
Comment 8 Pavel Raiskup 2025-04-16 11:43:04 UTC 
> No need to use the hotfix, I made a build for rawhide

I noticed this, and gave you +1 karma; though I still 
hot-fixed because a) there was no autokarma enabled, and
b) copr builds from mirrored composes, not from koji
buildroots (at least by default).
Comment 9 Pavel Raiskup 2025-04-16 20:38:13 UTC 
Facepalm, this was a Rawhide build - so no karma needed!  Anyway,
we need a new container base image built on top of a working
compose.  It may take a few more hours (or days).
But thank you Dmitry for the update - I'll drop the hot-fix soon.