Open Source Development

Power Open Source Development

Explore the open source tools and capabilities for building and deploying modern applications on IBM Power platforms including AIX, IBM i, and Linux.


#Power


#Power


#Servers
#Opensource
 View Only

  • 1.  DNF Issue on AIX 7.3

    Posted 03/06/23 11:28 AM

    We have THREE systems reporting an error trying to run DNF that none of our other 7.3 systems experience. I've come up with nothing searching google and hear, so I'm posting.

    This is the output:

    # dnf search AIX_Oswatcher

    Traceback (most recent call last):

      File "/usr/bin/dnf", line 58, in <module>

        from dnf.cli import main

      File "/opt/freeware/lib/python3.7/site-packages/dnf/__init__.py", line 30, in <module>

        import dnf.base

      File "/opt/freeware/lib/python3.7/site-packages/dnf/base.py", line 29, in <module>

        import libdnf.transaction

      File "/opt/freeware/lib64/python3.7/site-packages/libdnf/__init__.py", line 4, in <module>

        from . import conf

      File "/opt/freeware/lib64/python3.7/site-packages/libdnf/conf.py", line 13, in <module>

        from . import _conf

    ImportError:    0509-022 Cannot load module /opt/freeware/lib64/python3.7/site-packages/libdnf/_conf.so.

            0509-150   Dependent module /opt/freeware/libdnfdeps/libgcc_s.a(shr.o) could not be loaded.

            0509-022 Cannot load module /opt/freeware/libdnfdeps/libgcc_s.a(shr.o).

            0509-026 System error: A file or directory in the path name does not exist.

            0509-022 Cannot load module /opt/freeware/lib64/python3.7/site-packages/libdnf/_conf.so.

            0509-150   Dependent module /opt/freeware/lib64/python3.7/site-packages/libdnf/_conf.so could not be loaded.

    The folder /opt/freeware/libdnfdeps that this system is looking for doesn't exist on any of our other AIX 7.3 systems that are working properly.

    The /opt/freeware/lib64/python3.7/site-packages/libdnf/_conf.so being referenced does exist. it's part of the libdnf package, which we've reinstalled to be sure the module is not borked.

    Also have run uptvpkg multiple times

    My rpm.rte is version 4.15.1.2004, which is the same as the one on our working systems.

    Any insights much appreciated!

    Andrew



    ------------------------------
    Andrew Scott
    ------------------------------

    #AIXOpenSource


  • 2.  RE: DNF Issue on AIX 7.3

    Posted 03/07/23 06:09 AM

    Check openssl for version 1.1.2
    Check this and reinstall

            0509-022 Cannot load module /opt/freeware/libdnfdeps/libgcc_s.a(shr.o).



    ------------------------------
    Don Larson
    ------------------------------



  • 3.  RE: DNF Issue on AIX 7.3

    Posted 03/07/23 12:42 PM

    openSSL is 1.0.2.2102, same version as on our working systems:

      openssl.base            1.0.2.2102  COMMITTED  Open Secure Socket Layer

      openssl.license         1.0.2.2102  COMMITTED  Open Secure Socket License

      openssl.man.en_US       1.0.2.2100  COMMITTED  Open Secure Socket Layer

      openssl.base            1.0.2.2102  COMMITTED  Open Secure Socket Layer

    The filesets pass lppchk, so they're not messed up.

    I've reinstalled all the libgcc* packages to be sure, no change there.



    ------------------------------
    Andrew Scott
    ------------------------------

    Original Message


  • 4.  RE: DNF Issue on AIX 7.3

    Posted 03/08/23 09:27 AM

    OK! Progress.

    the opt/freeware/lib64/python3.7/site-packages/libdnf/_conf.so wasn't part of the libdnf package, it was part of the python4-libdnf package. 

    But, updating that circles us back around to the libcrypto.a dependency.

    openssl.base is installed, passes a package check, and we've run uptdvpkg. Could the openssl.base fileset be messed up even though it passed the package check?



    ------------------------------
    Andrew Scott
    ------------------------------

    Original Message


  • 5.  RE: DNF Issue on AIX 7.3

    Posted 03/08/23 10:01 AM

    Hi Andrew,

    So, which version of AIX 7.3 had openssl 1.0.2? I have 7300-01-01 and it has openssl 3.0.5. If one system works and the other doesn't, then there must be more differences between them than you realize. For example, it could be that one had software installed from a different version of the Toolkit because it happened at a later time. The Toolkit on the web moves quickly.

    If you look at Don's post, he's suggesting openssl 1.1.2 and you have 1.0.2.

    I'd suggest updating to the latest AIX 7.3, and then applying the Toolkit from December which you can get from Entitled Systems Support.



    ------------------------------
    Mario Stargard
    ------------------------------

    Original Message


  • 6.  RE: DNF Issue on AIX 7.3

    Posted 03/15/23 10:20 AM

    I have no idea which version of AIX 7.3 had what. Doing the upgrades from 7.2 to 7.3 was another area. I'm just trying to clean up the DNF.

    So, I get that 1.0.2 is too old. That opens a pile of other questions. Why did the AIX 7.3 upgrade not replace that fileset? Why does it work on other systems?

    The fact the remedy is to upgrade it does not answer the questions. When I put the change tickets in to upgrade these openSSL filesets, I'm going to be asked these questions. If I do not have answers to them, they will balk at allowing me to implement a fix.



    ------------------------------
    Andrew Scott
    ------------------------------

    Original Message


  • 7.  RE: DNF Issue on AIX 7.3

    Posted 03/15/23 03:11 PM

    Sounds to me like your upgrade was incomplete. This happens sometimes.

    oslevel -s

    lppchk -v

    lppchk -c

    emgr -c

    emgr -l

    A significant effort goes into making sure that the packages, updates, fixes, and rpm's are coherent. That list is very specific. packages=lpp "I" packages, updates=lpp "U" packages, fixes=emgr, and rpms=Linux Toolbox. Sometimes you can get into a situation where an efix is not uninstalled and causes the os update to fail for AIX. If the updates are automated, then this can go unnoticed. The first tell, beyond the error messages at patch time, is that oslevel -s does not return the level you think you're at. You need all the packages for the SP to be in there to get to the level you want.

    After you have AIX sorted out, then you have to grab a version of the Linux Toolbox that was built against it. You can't just use the latest one because it'll be built against packages you may not have in AIX, and because rpm/dnf cannot satisfy requirements in AIX itself, then you'll get unmet dependencies. Usually this involves crypto and openssl. Things in rpm-land may be so out of whack that you have no choice but to start over with a fresh rpm install, but do it from a known coherent level of the Linux Toolbox.

    Your ticket should just state that the system is not properly patched and is incoherent, which is breaking some programs.

    If you use the alt_disk method, then other than down time, this is a low risk affair.

    I wish there were a wiki page describing these mechanics. Is there a RedBook?

    Best of luck.



    ------------------------------
    Mario
    ------------------------------

    Original Message


  • 8.  RE: DNF Issue on AIX 7.3

    Posted 03/16/23 04:57 AM

    Andrew,

    Hi, we've been migrating from 7.1 to 7.3 recently and I did some digging, here's what I found.

    AIX 7.3.0.0 (Base)
openssh 8.1.102.2105
openssl 1.0.2.2103

When we apply 7.3.0.2 we "anyway" update as below
openssh already at 8.1.102.2105
openssl 1.1.2.1200

When we apply 7.3.1.1 we "anyway" update as below
openssh 8.1.112.1201
openssl 3.0.7.1000

    Hope it's of some use.

    Many thanks, Steve



    ------------------------------
    Steve Munday
    AIX, IBM i, HMC, PowerVM
    ------------------------------

    Original Message


Related Content