http://bugzilla.opensuse.org/show_bug.cgi?id=1207576 http://bugzilla.opensuse.org/show_bug.cgi?id=1207576#c9 Dirk Weber <d_werner@gmx.net> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |d_werner@gmx.net --- Comment #9 from Dirk Weber <d_werner@gmx.net> --- (In reply to Steffen Winterfeldt from comment #7)
FWIW, here's the oops:
crypto/fips/fips.c:521: OpenSSL internal error: FATAL FIPS SELFTEST FAILURE [ 2.668436][ T1] traps: init[1] general protection fault ip:b789d2d7 sp:bfdab5f0 error:0 in libc.so.6[b789d000+152000]
from previous problems with the OpenSSL FIPS SELFTEST I assume it (still) uses SSE2 instructions. Something like this has happened in the past, see bug 1032165. Quote from this bug: "The problem occurs because the system within the initrd archive has been configured to require fips, and the fips module has been built to use the sse2 instruction set. As a result OpenSSL fails with the "FATAL FIPS SELFTEST FAILURE" message, causing init (in this case linuxrc) to exit immediately. If one removes the two files that activate fips: # rm /lib/libcrypto.so.*.hmac /lib/.libssl.so.*.hmac from the initrd archive on the iso, the installation process proceeds to completion successfully.". (In reply to Antonio Feijoo from comment #4)
(In reply to Dominique Leuenberger from comment #2)
These are the regular product builds; the i586 ISO being generated comes from
https://build.opensuse.org/package/show/openSUSE:Factory:LegacyX86/000produc...
e.g. 000product:openSUSE-cd-mini-i586 - quickest to build as it is only a NET installer without actual rpms on it
Are only the packages listed in the unsorted.yml file included in the installation image? Because I miss libopenssl1_1-hmac, now required for dracut since the update (bug 1206439)
I suspect the inclusion of the *hmac files triggers the problem with the fips selftest. -- You are receiving this mail because: You are on the CC list for the bug.