Bug 2359744

Summary:	SIGILL in openssl on Power8 crashes DNF5 => Mock => Copr builds
Product:	[Fedora] Fedora	Reporter:	Pavel Raiskup <praiskup>
Component:	openssl	Assignee:	Dmitry Belyavskiy <dbelyavs>
Status:	CLOSED DUPLICATE	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	rawhide	CC:	code, crypto-team, dbelyavs, mjg, mspacek, mturk, shebburn, suraj.ghimire7, tm
Target Milestone:	---	Flags:	fedora-admin-xmlrpc: mirror+
Target Release:	---
Hardware:	ppc64le
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	---
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2025-04-15 13:49:55 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Pavel Raiskup 2025-04-15 12:53:27 UTC

Original issue resolving ppc64le build problems in Copr:
https://github.com/fedora-copr/copr/issues/3693

# openssl s_client bugzilla.redhat.com:https
Connecting to 2600:1408:ec00:2f::1735:b86
CONNECTED(00000003)
depth=2 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G3
verify return:1
Illegal instruction (core dumped)


Affected version: openssl-3.5.0-2.fc43.ppc64le
Downgrading openssl-libs to 3.2.4-3.fc43.ppc64le helps.

Reproducible: Always

Steps to Reproduce:
1. get a Power8 machine with Rawhide (or at least container on Power8)
2. run `dnf5 install <something>` 
3. observe DNF6 crashing
4. confirm by `openssl s_client bugzilla.redhat.com:https`

Comment 1 Pavel Raiskup 2025-04-15 12:58:13 UTC

We can provide a POWER8 machine for testing purposes to anyone interested.

Comment 2 Dmitry Belyavskiy 2025-04-15 13:49:55 UTC


*** This bug has been marked as a duplicate of bug 2359082 ***

Comment 3 Dmitry Belyavskiy 2025-04-15 15:02:40 UTC

Could you please try this build if the infrastructure wakes up
https://koji.fedoraproject.org/koji/taskinfo?taskID=131563912

Comment 4 Pavel Raiskup 2025-04-16 05:46:22 UTC

That build helps!  Thank you.  What do we risk if we configure
Mock in Fedora Copr to use openssl-3.5.0-3.fc43 (for Rawhide
builds)?

Comment 5 Dmitry Belyavskiy 2025-04-16 07:30:07 UTC

Basically nothing.
Just a question - do we officially support POWER8 for Fedora? (We don't for RHEL)

Comment 6 Pavel Raiskup 2025-04-16 10:56:06 UTC

Cool, thanks.  Going to apply a hot-fix in production.

> do we officially support POWER8 for Fedora?

I think yes, at least per:
https://fedoraproject.org/wiki/Architectures/PowerPC

> Only 64bit machines (little endian Power8 or newer) are supported now;

Comment 7 Dmitry Belyavskiy 2025-04-16 11:06:43 UTC

No need to use the hotfix, I made a build for rawhide

Comment 8 Pavel Raiskup 2025-04-16 11:43:04 UTC

> No need to use the hotfix, I made a build for rawhide

I noticed this, and gave you +1 karma; though I still 
hot-fixed because a) there was no autokarma enabled, and
b) copr builds from mirrored composes, not from koji
buildroots (at least by default).

Comment 9 Pavel Raiskup 2025-04-16 20:38:13 UTC

Facepalm, this was a Rawhide build - so no karma needed!  Anyway,
we need a new container base image built on top of a working
compose.  It may take a few more hours (or days).
But thank you Dmitry for the update - I'll drop the hot-fix soon.