kiddin9 / Kwrt

一分钟在线定制编译 X86/64, NanoPi R2S R4S R5S R6S, 斐讯 Phicomm N1 K2P, 树莓派 Raspberry Pi, 香橙派 Orange Pi, 红米AX6, 小米AX3600, 小米AX9000, 红米AX6S 小米AX3200, 红米AC2100, 华硕ASUS, 网件NETGEAR 等主流软硬路由
https://openwrt.ai
MIT License
7.74k stars 3.09k forks source link

host tls_initialize error in lxc container in PVE #1653

Open fengyang0317 opened 9 months ago

fengyang0317 commented 9 months ago

host command cannot run in the lxc container in PVE 8.0. The official lxc openwrt or older version of kiddin9/OpenWrt_x86-r2s-r4s-r5s-N1 does not have this issue.

The host kernel version is

Linux pve 6.2.16-3-pve #1 SMP PREEMPT_DYNAMIC PVE 6.2.16-3 (2023-06-17T05:58Z) x86_64 GNU/Linux

The error message is

[root@Op-ipt:20:51 ~] # host
tls.c:88:tls_initialize(): fatal error: RUNTIME_CHECK(OPENSSL_init_ssl(OPENSSL_INIT_ENGINE_ALL_BUILTIN | OPENSSL_INIT_LOAD_CONFIG, NULL) == 1) failed
Aborted
flyhigao commented 8 months ago

我和你遇到一样的问题,我是在qnap上用docker来跑openwrt, 在部署ddns时,遇到错误 root@OpenWrt:~# /usr/bin/host -V tls.c:88:tls_initialize(): fatal error: RUNTIME_CHECK(OPENSSL_init_ssl(OPENSSL_INIT_ENGINE_ALL_BUILTIN | OPENSSL_INIT_LOAD_CONFIG, NULL) == 1) failed Aborted

以前用kvm部署的就没有问题, 请问你后来时怎么解决的?

flyhigao commented 8 months ago

补充一下,ldd看来,出问题的host是使用 libssl.so.3 => /usr/lib/libssl.so.3

以前没有问题的host是 libssl.so.1.1 => /usr/lib/libssl.so.1.1

将没问题的host拷过来由于更多依赖冲突,并不能运行

flyhigao commented 8 months ago

这个问题阻碍我用ddns, 如果是为了ddns运行正常,我的解决方案那就是删掉/usr/bin/host,
这样/usr/lib/ddns/dynamic_dns_functions.sh就会调用nslookup来代替host命令得到域名ip. ddns运行正常.

kevonlee commented 7 months ago

这个问题阻碍我用ddns, 如果是为了ddns运行正常,我的解决方案那就是删掉/usr/bin/host, 这样/usr/lib/ddns/dynamic_dns_functions.sh就会调用nslookup来代替host命令得到域名ip. ddns运行正常.


mv /etc/ssl/openssl.cnf /etc/ssl/openssl.cnf.bak

其实删了也一样,会自动生成一个
Felix-Bao commented 4 months ago

这个问题阻碍我用ddns, 如果是为了ddns运行正常,我的解决方案那就是删掉/usr/bin/host, 这样/usr/lib/ddns/dynamic_dns_functions.sh就会调用nslookup来代替host命令得到域名ip. ddns运行正常.

mv /etc/ssl/openssl.cnf /etc/ssl/openssl.cnf.bak

其实删了也一样,会自动生成一个

我也是这个问题,试了一下确实可以,但不知道会不会引起其他问题。同时我编译时选的时Nginx,它也一直报错。我看这里的讨论,说是SSL的问题 https://github.com/immortalwrt/immortalwrt/issues/1124