Sounds to me like your upgrade was incomplete. This happens sometimes.
A significant effort goes into making sure that the packages, updates, fixes, and rpm's are coherent. That list is very specific. packages=lpp "I" packages, updates=lpp "U" packages, fixes=emgr, and rpms=Linux Toolbox. Sometimes you can get into a situation where an efix is not uninstalled and causes the os update to fail for AIX. If the updates are automated, then this can go unnoticed. The first tell, beyond the error messages at patch time, is that oslevel -s does not return the level you think you're at. You need all the packages for the SP to be in there to get to the level you want.
After you have AIX sorted out, then you have to grab a version of the Linux Toolbox that was built against it. You can't just use the latest one because it'll be built against packages you may not have in AIX, and because rpm/dnf cannot satisfy requirements in AIX itself, then you'll get unmet dependencies. Usually this involves crypto and openssl. Things in rpm-land may be so out of whack that you have no choice but to start over with a fresh rpm install, but do it from a known coherent level of the Linux Toolbox.
Your ticket should just state that the system is not properly patched and is incoherent, which is breaking some programs.
If you use the alt_disk method, then other than down time, this is a low risk affair.
I wish there were a wiki page describing these mechanics. Is there a RedBook?
Best of luck.
Original Message:
Sent: Wed March 15, 2023 10:19 AM
From: Andrew Scott
Subject: DNF Issue on AIX 7.3
I have no idea which version of AIX 7.3 had what. Doing the upgrades from 7.2 to 7.3 was another area. I'm just trying to clean up the DNF.
So, I get that 1.0.2 is too old. That opens a pile of other questions. Why did the AIX 7.3 upgrade not replace that fileset? Why does it work on other systems?
The fact the remedy is to upgrade it does not answer the questions. When I put the change tickets in to upgrade these openSSL filesets, I'm going to be asked these questions. If I do not have answers to them, they will balk at allowing me to implement a fix.
------------------------------
Andrew Scott
Original Message:
Sent: Wed March 08, 2023 10:01 AM
From: Mario Stargard
Subject: DNF Issue on AIX 7.3
Hi Andrew,
So, which version of AIX 7.3 had openssl 1.0.2? I have 7300-01-01 and it has openssl 3.0.5. If one system works and the other doesn't, then there must be more differences between them than you realize. For example, it could be that one had software installed from a different version of the Toolkit because it happened at a later time. The Toolkit on the web moves quickly.
If you look at Don's post, he's suggesting openssl 1.1.2 and you have 1.0.2.
I'd suggest updating to the latest AIX 7.3, and then applying the Toolkit from December which you can get from Entitled Systems Support.
------------------------------
Mario Stargard
Original Message:
Sent: Wed March 08, 2023 09:26 AM
From: Andrew Scott
Subject: DNF Issue on AIX 7.3
OK! Progress.
the opt/freeware/lib64/python3.7/site-packages/libdnf/_conf.so wasn't part of the libdnf package, it was part of the python4-libdnf package.
But, updating that circles us back around to the libcrypto.a dependency.
openssl.base is installed, passes a package check, and we've run uptdvpkg. Could the openssl.base fileset be messed up even though it passed the package check?
------------------------------
Andrew Scott
Original Message:
Sent: Tue March 07, 2023 12:41 PM
From: Andrew Scott
Subject: DNF Issue on AIX 7.3
openSSL is 1.0.2.2102, same version as on our working systems:
openssl.base 1.0.2.2102 COMMITTED Open Secure Socket Layer
openssl.license 1.0.2.2102 COMMITTED Open Secure Socket License
openssl.man.en_US 1.0.2.2100 COMMITTED Open Secure Socket Layer
openssl.base 1.0.2.2102 COMMITTED Open Secure Socket Layer
The filesets pass lppchk, so they're not messed up.
I've reinstalled all the libgcc* packages to be sure, no change there.
------------------------------
Andrew Scott
Original Message:
Sent: Tue March 07, 2023 06:09 AM
From: Don Larson
Subject: DNF Issue on AIX 7.3
Check openssl for version 1.1.2
Check this and reinstall
0509-022 Cannot load module /opt/freeware/libdnfdeps/libgcc_s.a(shr.o).
------------------------------
Don Larson
Original Message:
Sent: Mon March 06, 2023 11:27 AM
From: Andrew Scott
Subject: DNF Issue on AIX 7.3
We have THREE systems reporting an error trying to run DNF that none of our other 7.3 systems experience. I've come up with nothing searching google and hear, so I'm posting.
This is the output:
# dnf search AIX_Oswatcher
Traceback (most recent call last):
File "/usr/bin/dnf", line 58, in <module>
from dnf.cli import main
File "/opt/freeware/lib/python3.7/site-packages/dnf/__init__.py", line 30, in <module>
import dnf.base
File "/opt/freeware/lib/python3.7/site-packages/dnf/base.py", line 29, in <module>
import libdnf.transaction
File "/opt/freeware/lib64/python3.7/site-packages/libdnf/__init__.py", line 4, in <module>
from . import conf
File "/opt/freeware/lib64/python3.7/site-packages/libdnf/conf.py", line 13, in <module>
from . import _conf
ImportError: 0509-022 Cannot load module /opt/freeware/lib64/python3.7/site-packages/libdnf/_conf.so.
0509-150 Dependent module /opt/freeware/libdnfdeps/libgcc_s.a(shr.o) could not be loaded.
0509-022 Cannot load module /opt/freeware/libdnfdeps/libgcc_s.a(shr.o).
0509-026 System error: A file or directory in the path name does not exist.
0509-022 Cannot load module /opt/freeware/lib64/python3.7/site-packages/libdnf/_conf.so.
0509-150 Dependent module /opt/freeware/lib64/python3.7/site-packages/libdnf/_conf.so could not be loaded.
The folder /opt/freeware/libdnfdeps that this system is looking for doesn't exist on any of our other AIX 7.3 systems that are working properly.
The /opt/freeware/lib64/python3.7/site-packages/libdnf/_conf.so being referenced does exist. it's part of the libdnf package, which we've reinstalled to be sure the module is not borked.
Also have run uptvpkg multiple times
My rpm.rte is version 4.15.1.2004, which is the same as the one on our working systems.
Any insights much appreciated!
Andrew
------------------------------
Andrew Scott
------------------------------
#AIXOpenSource