[Bug 1207576] New: [Build 20230125] pentium 3 system fails to boot into installer
http://bugzilla.opensuse.org/show_bug.cgi?id=1207576 Bug ID: 1207576 Summary: [Build 20230125] pentium 3 system fails to boot into installer Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://openqa.opensuse.org/tests/3069559/modules/welc ome/steps/1 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Bootloader Assignee: screening-team-bugs@suse.de Reporter: dimstar@opensuse.org QA Contact: qa-bugs@suse.de Found By: openQA Blocker: Yes ## Observation Looking at https://openqa.opensuse.org/tests/3069559#next_previous, one possible reason might be dracut (?) r204 | dimstar_suse | 2023-01-26 12:57:03 | 0bf55e8750eeed5cfd9aab5479f7719d | 059+suse.360.g2e0ed5f7 | rq1060971 <no message> ---------------------------------------------------------------------------- r203 | dimstar_suse | 2023-01-24 18:42:11 | 61741fa00fd8922a74ae0baa23fa317e | 059+suse.358.g8ecd6e83 | rq1060369 <no message> ---------------------------------------------------------------------------- r202 | dimstar_suse | 2023-01-21 12:37:17 | b570cbaaa85307bbb9f963dc46002dd0 | 057+suse.353.g6dab83eb | https://bugzilla.opensuse.org/show_bug.cgi?id=1207366 ---------------------------------------------------------------------------- r201 | dimstar_suse | 2023-01-20 16:37:45 | 6bb331f4c2947b6da82f8cf8194f81d9 | 059+suse.358.g8ecd6e83 | rq1046083 It was broken in 0120, worked in 0121 (reverted dracut) then broke again in 0124 (dracut updated again) To reproduce, grab the ISO from the assets tab from the openQA run, then run it with qemu-kvm -m 2048 -cpu pentium3 -cdrom openSUSE-Tumbleweed-LegacyX86-DVD-i586-Snapshot20230125-Media.iso Booting into installationm or even rescue system, end up there. openQA test in scenario opensuse-Tumbleweed-LegacyX86-DVD-i586-textmode@pentium3 fails in [welcome](https://openqa.opensuse.org/tests/3069559/modules/welcome/steps/1) ## Test suite description Installation in textmode and selecting the textmode "desktop" during installation. ## Reproducible Fails since (at least) Build [20230124](https://openqa.opensuse.org/tests/3065599) ## Expected result Last good: [20230123](https://openqa.opensuse.org/tests/3062483) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=i586&distri=opensuse&flavor=LegacyX86-DVD&machine=pentium3&test=textmode&version=Tumbleweed) -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1207576 Dominique Leuenberger <dimstar@opensuse.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|screening-team-bugs@suse.de |dracut-maintainers@suse.de -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1207576 http://bugzilla.opensuse.org/show_bug.cgi?id=1207576#c9 Dirk Weber <d_werner@gmx.net> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |d_werner@gmx.net --- Comment #9 from Dirk Weber <d_werner@gmx.net> --- (In reply to Steffen Winterfeldt from comment #7)
FWIW, here's the oops:
crypto/fips/fips.c:521: OpenSSL internal error: FATAL FIPS SELFTEST FAILURE [ 2.668436][ T1] traps: init[1] general protection fault ip:b789d2d7 sp:bfdab5f0 error:0 in libc.so.6[b789d000+152000]
from previous problems with the OpenSSL FIPS SELFTEST I assume it (still) uses SSE2 instructions. Something like this has happened in the past, see bug 1032165. Quote from this bug: "The problem occurs because the system within the initrd archive has been configured to require fips, and the fips module has been built to use the sse2 instruction set. As a result OpenSSL fails with the "FATAL FIPS SELFTEST FAILURE" message, causing init (in this case linuxrc) to exit immediately. If one removes the two files that activate fips: # rm /lib/libcrypto.so.*.hmac /lib/.libssl.so.*.hmac from the initrd archive on the iso, the installation process proceeds to completion successfully.". (In reply to Antonio Feijoo from comment #4)
(In reply to Dominique Leuenberger from comment #2)
These are the regular product builds; the i586 ISO being generated comes from
https://build.opensuse.org/package/show/openSUSE:Factory:LegacyX86/000produc...
e.g. 000product:openSUSE-cd-mini-i586 - quickest to build as it is only a NET installer without actual rpms on it
Are only the packages listed in the unsorted.yml file included in the installation image? Because I miss libopenssl1_1-hmac, now required for dracut since the update (bug 1206439)
I suspect the inclusion of the *hmac files triggers the problem with the fips selftest. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1207576 http://bugzilla.opensuse.org/show_bug.cgi?id=1207576#c16 --- Comment #16 from Dirk Weber <d_werner@gmx.net> --- (In reply to Dominique Leuenberger from comment #15)
(In reply to Steffen Winterfeldt from comment #14)
Hm, that makes the condition pointless. I could go for !BuildIgnore but that seems not the right idea.
Possibly more drastic and make it a with fips condition (instead of ssl-hmac) and conditionalize the inclusion of dracut-fips too?
I do not know which action in the booted system triggers the FIPS selftest, maybe before this a script could determine whether the actual CPU supports sse2, and if not remove the *hmac files. Something like grep -q 'flags.* sse2' /proc/cpuinfo || rm *hmac Then the users of CPUs with sse2 support can have the FIPS selftest active, and others can still use the image. -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠suse.com