Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[RKE] [RHEL]: install openssl and openssh with curl #314

Merged
merged 1 commit into from
Nov 29, 2024

Conversation

vardhaman22
Copy link

@vardhaman22 vardhaman22 commented Nov 26, 2024

needed to keep openssh and openssl versions in sync

issue: rancher/rancher#48143 / rancher/rancher#48193

problem: curl is installed before installing docker and curl installation on rhel was causing openssl to autoupgrade.

$ sudo -E yum install -y curl

Transaction Summary
=========================================================================================================================================================
Install  2 Packages
Upgrade  4 Packages

Total download size: 4.6 M
Downloading Packages:
(1/6): openssl-fips-provider-3.0.7-6.el9_5.x86_64.rpm                                                                    186 kB/s | 9.4 kB     00:00    
(2/6): curl-7.76.1-31.el9.x86_64.rpm                                                                                     4.6 MB/s | 297 kB     00:00    
(3/6): openssl-fips-provider-so-3.0.7-6.el9_5.x86_64.rpm                                                                 7.6 MB/s | 577 kB     00:00    
(4/6): libcurl-7.76.1-31.el9.x86_64.rpm                                                                                  8.7 MB/s | 286 kB     00:00    
(5/6): openssl-3.2.2-6.el9_5.x86_64.rpm                                                                                   37 MB/s | 1.4 MB     00:00    
(6/6): openssl-libs-3.2.2-6.el9_5.x86_64.rpm                                                                              48 MB/s | 2.1 MB     00:00    
---------------------------------------------------------------------------------------------------------------------------------------------------------
Total                                                                                                                     31 MB/s | 4.6

which was causing ssh failure because of which provisioning was failing

$ journalctl -u sshd.service
........
......OpenSSL version mismatch. Built against 30000070, you have 30200020
......Main process exited, code=exited, status=255/EXCEPTION
.......

updated the first install so that following command is executed.

$ sudo -E yum install -y curl openssh openssl

needed to keep openssh and openssl versions in sync
@vardhaman22 vardhaman22 requested review from a team and kinarashah November 26, 2024 03:54
Copy link
Collaborator

@snasovich snasovich left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Change looks sane to me

@snasovich snasovich requested a review from a team November 27, 2024 17:21
@vardhaman22 vardhaman22 merged commit aa18ee8 into rancher:master Nov 29, 2024
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants