We also started seeing this issue on AlmaLinux 9.5 (presumably Rocky Linux and other RHEL derivatives would be impacted too). OpenSSL 3.5.0-1 as mentioned in the thread seems to be coming from the CentOS Stream 9 repos, which to my knowledge won't be available on RHEL or any of the RHEL derivatives. For those distros, OpenSSL 3.2.2-7 is the newest version available (and presumably will be stuck at that version until at least the release of RHEL 9.6, if not later).

To address this, we changed the Ceph repo config base URLs from "rpm-reef" to "rpm-18.2.6", freezing our AlmaLinux 9.5 CephFS client hosts at that version until the OpenSSL version available catches up.

-Steve

On 5/9/25 15:54, Anthony D'Atri wrote:
FWIW CentOS9 repositories show 3.2.2-7 and  3.5.0-1

On May 9, 2025, at 3:43 PM, Sake Ceph <c...@paulusma.eu> wrote:

Some extra system information

$ sudo dnf update
Dependencies resolved.
Nothing to do.
Complete!

$ cat /etc/redhat-release
Red Hat Enterprise Linux release 9.5 (Plow)

$ uname -r
5.14.0-503.33.1.el9_5.x86_64

$ rpm --query --whatprovides "libcrypto.so.3(OPENSSL_3.4.0)(64bit)"
no package provides libcrypto.so.3(OPENSSL_3.4.0)(64bit)

$ rpm --query --whatprovides "libcrypto.so.3(OPENSSL_3.2.0)(64bit)"
openssl-libs-3.2.2-6.el9_5.1.x86_64

$ sudo dnf list openssl-libs
Installed Packages
openssl-libs.x86_64                                                             
                                                 1:3.2.2-6.el9_5.1              
                                                                                
                 @rhel-9-for-x86_64-baseos-rpms

Op 09-05-2025 21:34 CEST schreef Sake Ceph <c...@paulusma.eu>:


We're running update to date RHEL 9 machines.. They're offline, so it could be 
we need to sync the central repo, but I don't think this version is available.

Op 09-05-2025 21:12 CEST schreef Konstantin Shalygin <k0...@k0ste.ru>:


Hi,

On 8 May 2025, at 23:12, Erwin Bogaard <erwin.boga...@gmail.com> wrote:

It looks like there is an issue with the package-based 18.2.7 release, when
upgrading from 18.2.6 on el9.
There seems to be a new (unfulfilled) dependency that prevents the packages
from installing:

Problem 1: cannot install the best update candidate for package
librgw2-2:18.2.6-0.el9.x86_64
- problem with installed package librgw2-2:18.2.6-0.el9.x86_64
- nothing provides libcrypto.so <http://libcrypto.so/>.3(OPENSSL_3.4.0)(64bit) 
needed by
librgw2-2:18.2.7-0.el9.x86_64 from ceph-reef

This issue prevents almost all ceph packages from installing.
18.2.6 is installed and fully functional on this machine, so it seems
something happened between 18.2.6 and 18.2.6.
Hope someone can confirm this is happening at their severs as well and/or
confirm or deny this is a packaging problem.
This just means that your OS packages are outdated, not the "issue with 18.2.7 RPM 
release"
Don't forget to run `dnf upgrade` [1]

[root@el9:/]# rpm --query --whatprovides "libcrypto.so.3(OPENSSL_3.4.0)(64bit)"
openssl-libs-3.5.0-1.el9.x86_64



[1] 
https://centos.pkgs.org/9-stream/centos-baseos-x86_64/openssl-libs-3.5.0-1.el9.x86_64.rpm.html
k
_______________________________________________
ceph-users mailing list -- ceph-users@ceph.io
To unsubscribe send an email to ceph-users-le...@ceph.io
_______________________________________________
ceph-users mailing list -- ceph-users@ceph.io
To unsubscribe send an email to ceph-users-le...@ceph.io
_______________________________________________
ceph-users mailing list -- ceph-users@ceph.io
To unsubscribe send an email to ceph-users-le...@ceph.io
_______________________________________________
ceph-users mailing list -- ceph-users@ceph.io
To unsubscribe send an email to ceph-users-le...@ceph.io

--
Steve Anthony (he/him/his)
HPC Systems Architect
Lehigh University
sma...@lehigh.edu
_______________________________________________
ceph-users mailing list -- ceph-users@ceph.io
To unsubscribe send an email to ceph-users-le...@ceph.io

Reply via email to