search

microsoft / omi

Open Management Infrastructure
Other
360 stars 114 forks source link

Support for OMI package on RHEL9.x #723

Closed GulhaneChaitanya closed 1 year ago

GulhaneChaitanya commented 1 year ago

Hi,

As in RHEL 9.x, openssl has been upgraded to 3.x, available OMI packages supporting openssl version 1.x are not working on RHEL 9.x.

Would you please let me know when can the OMI package with openssl 3.x support on RHEL9.x be available?

Is there any alternate solution available for existing OMI packages to work on RHEL 9.x?

Regards, Chaitanya.

JumpingYang001 commented 1 year ago

same with #715

GulhaneChaitanya commented 1 year ago

Hi @JumpingYang001

Could you please let us know any ETA for this?

Regard, Chaitanya.

deconma commented 1 year ago

Hi @JumpingYang001 ,

Do you have a further update regarding the current state of this implementation? Or would this be in the same ETA of #715 ?

Thanks in advance, Maxim

JumpingYang001 commented 1 year ago

@deconma yes, same time release.

GulhaneChaitanya commented 1 year ago

Hi @JumpingYang001 ,

I see that there is a release '1.6.11-0' has been released.

Would you please let us know when can we expect OMI support for OpenSSL 3.x?

Regards, Chaitanya.

JumpingYang001 commented 1 year ago

@GulhaneChaitanya 1.6.11-0 is NOT including openssl 3.x, and openssl 3.x is still in progress.

GulhaneChaitanya commented 1 year ago

Hi @JumpingYang001,

Thanks for the response.

Any timeline we expect for OpenSSL 3.x support?

Regards, Chaitanya

JumpingYang001 commented 1 year ago

@GulhaneChaitanya we are focusing on adding openssl 3.x support now.

GulhaneChaitanya commented 1 year ago

@JumpingYang001 any ETA for that?

JumpingYang001 commented 1 year ago

@JumpingYang001 any ETA for that?

no ETA, but will update here once it is completed.

wouterhummelink commented 1 year ago

RHEL 9 provides a compat-openssl11 package for runtime compatibility with older software. However the prein scripts for both OMI and SCX ignore that the correct libraries are available, but rather checks the version of the openssl binary. This seems wrong.

wouterhummelink commented 1 year ago

By nixing the rpm scripts I was able to get OMI and SCX installed and started, so compat-openssl11 is a viable platform. I did have to perform some extra configuration that would normally be taken care of by the postin rpm scripts

JumpingYang001 commented 1 year ago

@wouterhummelink you use /usr/bin/openssl11? I think your provided compat-openssl11 with openssl11 looks something similar to SUSE openssl1 way, https://github.com/microsoft/omi/blob/e4d72481fa2f805148c9c8f4d0183b3e2d7814a8/Unix/installbuilder/datafiles/ULinux.data#L28 anyway, openssl 3.0 omi/scx packages will be released soon.

wouterhummelink commented 1 year ago

The compat library does not provide an openssl binary, just libssl and libcrypto on RHEL

JumpingYang001 commented 1 year ago

@GulhaneChaitanya openssl 3.x : https://github.com/microsoft/omi/releases/tag/v1.7.0-0

wouterhummelink commented 1 year ago

Any update on when the packages are available in microsoft-prod repository?

JumpingYang001 commented 1 year ago

@wouterhummelink it is already in MS Repo.

JumpingYang001 commented 1 year ago

The issue has been fixed so I close the issue.