Comment # 9 on bug 1207576 from Dirk Weber

(In reply to Steffen Winterfeldt from comment #7)
> FWIW, here's the oops:
> 
> crypto/fips/fips.c:521: OpenSSL internal error: FATAL FIPS SELFTEST FAILURE
> [    2.668436][    T1] traps: init[1] general protection fault ip:b789d2d7
> sp:bfdab5f0 error:0 in libc.so.6[b789d000+152000]

from previous problems with the OpenSSL FIPS SELFTEST I assume it (still) uses
SSE2 instructions. 

Something like this has happened in the past, see bug 1032165.


Quote from this bug:
"The problem occurs because the system within the initrd archive has been
configured to require fips, and the fips module has been built to use the sse2
instruction set.  As a result OpenSSL fails with the "FATAL FIPS SELFTEST
FAILURE" message, causing init (in this case linuxrc) to exit immediately.

If one removes the two files that activate fips:

# rm /lib/libcrypto.so.*.hmac  /lib/.libssl.so.*.hmac

from the initrd archive on the iso, the installation process proceeds to
completion successfully.".

(In reply to Antonio Feijoo from comment #4)
> (In reply to Dominique Leuenberger from comment #2)
> > These are the regular product builds; the i586 ISO being generated comes from
> > 
> > https://build.opensuse.org/package/show/openSUSE:Factory:LegacyX86/000product
> > 
> > e.g. 000product:openSUSE-cd-mini-i586  - quickest to build as it is only a
> > NET installer without actual rpms on it
> 
> Are only the packages listed in the unsorted.yml file included in the
> installation image? Because I miss libopenssl1_1-hmac, now required for
> dracut since the update (bug 1206439)

I suspect the inclusion of the *hmac files triggers the problem with the fips
selftest.