AIX Open Source

 View Only

  • 1.  Problems after updatig from yum to dnf

    Posted Tue September 21, 2021 12:53 PM
    Edited by Irfan Khairi Tue September 21, 2021 03:14 PM
    We have deployed yum to over 50 LPARs successfully, a subset of which are still under AIX 7.1 (7100-05-07-2038). On some of these AIX 7.1 LPARs, after updating from yum to dnf and successfully running dnf update (which only updated the python3 package to python3-3.7.9-0.ppc), the whole yum/dnf setup gets corrupted:

    root@mylpar:/tmp>yum
    Traceback (most recent call last):
    File "/usr/bin/yum", line 57, in <module>
    from dnf.cli import main
    File "/opt/freeware/lib/python3.7/site-packages/dnf/__init__.py", line 30, in <module>
    import dnf.base
    File "/opt/freeware/lib/python3.7/site-packages/dnf/base.py", line 29, in <module>
    import libdnf.transaction
    File "/opt/freeware/lib/python3.7/site-packages/libdnf/__init__.py", line 3, in <module>
    from . import common_types
    File "/opt/freeware/lib/python3.7/site-packages/libdnf/common_types.py", line 13, in <module>
    from . import _common_types
    ImportError: 0509-022 Cannot load module /usr/lib/libssl.a(libssl.so.1.0.2).
    0509-150 Dependent module /opt/freeware/lib/libcrypto.a(libcrypto.so.1.0.2) could not be loaded.
    0509-152 Member libcrypto.so.1.0.2 is not found in archive
    0509-022 Cannot load module /opt/freeware/lib/python3.7/site-packages/libdnf/_common_types.so.
    0509-150 Dependent module /usr/lib/libssl.a(libssl.so.1.0.2) could not be loaded.

    I've already tried to manually upgrade rpm.rte, sqlite and python3 to the latest packages (pysqlite-2.8.3-2.aix6.1.ppc.rpm sqlite-3.35.5-1.aix6.1.ppc.rpm python3-3.7.11-1.aix6.1.ppc.rpm) after downloading them from the AIX OSS site, to no avail.

    A bit of context:
    root@mylpar:/tmp>rpm -qa
    libffi-3.2.1-3.ppc
    glib2-2.56.1-2.ppc
    libpthread-stubs-0.3-2.ppc
    ivanti-automation-agent-10.11.0.0-aix.ppc
    libiconv-1.16-1.ppc
    expat-2.2.9-2.ppc
    bzip2-1.0.8-2.ppc
    libgcc8-8.3.0-4.ppc
    zlib-1.2.11-2.ppc
    libstdc++-8-1.ppc
    db-6.2.38-3.ppc
    libgomp-8-1.ppc
    openldap-2.4.56-1.ppc
    libtextstyle-0.20.2-1.ppc
    libunistring-0.9.10-1.ppc
    p11-kit-tools-0.23.16-1.ppc
    krb5-libs-1.16.1-5.ppc
    bash-5.0.18-1.ppc
    libzstd-1.4.4-1.ppc
    libsolv-0.7.9-1.ppc
    zchunk-libs-1.1.4-1.ppc
    dnf-data-4.2.17-1.noarch
    python-iniparse-0.4-1.noarch
    python-urlgrabber-3.10.1-1.noarch
    python-2.7.18-1.ppc
    python-pycurl-7.43.0-1.ppc
    python-tools-2.7.18-1.ppc
    libdnf-0.39.1-1.ppc
    python3-hawkey-0.39.1-1.ppc
    python3-libcomps-0.1.11-1.ppc
    dnf-4.2.17-1.noarch
    python3-dateutil-2.8.0-1.noarch
    python3-dnf-plugin-migrate-4.0.16-1.noarch
    yum-4.2.17-1.noarch
    AIX-rpm-7.1.5.32-33.ppc
    sqlite-3.35.5-1.ppc
    python3-3.7.11-1.ppc
    info-6.6-2.ppc
    gdbm-1.18.1-1.ppc
    readline-8.0-2.ppc
    yum-metadata-parser-1.1.4-2.ppc
    libgcc-8-1.ppc
    libstdc++8-8.3.0-4.ppc
    ncurses-6.2-2.ppc
    xz-libs-5.2.5-1.ppc
    libgomp8-8.3.0-4.ppc
    cyrus-sasl-2.1.26-3.ppc
    libxml2-2.9.10-1.ppc
    libssh2-1.9.0-1.ppc
    gettext-0.20.2-1.ppc
    p11-kit-0.23.16-1.ppc
    ca-certificates-2020.06.01-1.ppc
    libnghttp2-1.41.0-1.ppc
    libmodulemd-1.5.2-1.ppc
    libsmartcols-2.34-1.ppc
    librepo-1.11.0-1.ppc
    python3-gpgme-1.13.1-1.ppc
    curl-7.72.0-1.ppc
    python-devel-2.7.18-1.ppc
    rpm-python3-4.15.1-1_py3.ppc
    python3-libdnf-0.39.1-1.ppc
    libcomps-0.1.11-1.ppc
    python3-dnf-4.2.17-1.noarch
    python3-six-1.13.0-1.noarch
    python3-dnf-plugins-core-4.0.16-1.noarch
    dnf-automatic-4.2.17-1.noarch
    python3-librepo-1.11.0-1.ppc
    pysqlite-2.8.3-2.ppc
    root@mylpar:/tmp>lslpp -l|grep rpm
    rpm.rte 4.15.1.3 COMMITTED RPM Package Manager
    rpm.rte 4.15.1.3 COMMITTED RPM Package Manager

    Could somebody give me a hint of what else could I look for? LIBPATH and LD_LIBRARY_PATH are both unset.

    ------------------------------
    -----------------------------------------------
    GNU/GPL: "May the Source be with you..."
    -----------------------------------------------
    ------------------------------


  • 2.  RE: Problems after updatig from yum to dnf

    Posted Wed September 22, 2021 03:23 AM

    Please make sure you have the latest openssl lpp fileset installed.

    You can get it from AIX web download pack programs --> https://www-01.ibm.com/marketing/iwm/iwm/web/pickUrxNew.do?source=aixbp

    Also looks like there is this file "/opt/freeware/lib/libcrypto.a" present in the system which would be coming from some openssl rpm. But "rpm -qa" is not showing any openssl rpm presence. Probably you may need to remove this file as well.



    ------------------------------
    Ayappan P
    ------------------------------

    Original Message


  • 3.  RE: Problems after updatig from yum to dnf

    Posted Wed September 22, 2021 07:18 AM
    THIS SOLVED MY ISSUES!

    The library /opt/freeware/lib/libcrypto.a wasn't owned by any RPM (weird!) so I moved it out of the way. Then I unset LIBPATH and LD_LIBRARY_PATH just in case, ran updtvpkg a couple more times and Bingo! yum/dnf started working again.

    Thanks for spotting the intruder lib!

    ------------------------------
    -----------------------------------------------
    GNU/GPL: "May the Source be with you..."
    -----------------------------------------------
    ------------------------------

    Original Message


  • 4.  RE: Problems after updatig from yum to dnf

    Posted Wed September 22, 2021 03:27 AM
    Hi Luis,

    /usr/lib/libssl.a AND /usr/lib/libcrypto.a is provided through openssl base package from AIX and your output is pure rpm.
    ( lslpp -l openss* )

    a) If you don't use openssh/ssl this is the instruction-link : https://www.ibm.com/support/pages/node/720655
    b) did you submit  /usr/sbin/updtvpkg ? - possibly you have to do it multiple times
    c) it may be a false entry in the requirements as the second error is pointing to /opt/freeware/lib/, but from experience, this is normally handled after updtvpgkg.

    if c) this will have to be fixed through the developpers

    Regards, Jürgen

    ------------------------------
    Juergen Maehlmann
    ------------------------------

    Original Message


  • 5.  RE: Problems after updatig from yum to dnf

    Posted Wed September 22, 2021 07:09 AM
    Sorry, I forgot to add to my original message I've updated openssl via lpp to the latest release (openssl-1.0.2.2102) and I don't have openssl RPMs on any LPARs (we got rid of them when installing yum).

    I have also ran updtpvkg a thousand times after updating every single package I detailed above.

    ------------------------------
    -----------------------------------------------
    GNU/GPL: "May the Source be with you..."
    -----------------------------------------------
    ------------------------------

    Original Message