Enterprise Linux 9 venv-salt package dependency to openssl missing

[sbluhm]

Problem description

When installing the venv-salt-minion directly from one of the repositories (stable or master) on a minimal system, it doesn't start.
The dependency to openssl is missing in the rpm spec.
dnf install openssl solves the issue.

https://download.opensuse.org/repositories/systemsmanagement:/Uyuni:/Master:/EL9-Uyuni-Client-Tools/EL_9/x86_64/venv-salt-minion.rpm

Steps to reproduce

1. Install minimal AlmaLinux9 system
2. dnf install https://download.opensuse.org/repositories/systemsmanagement:/Uyuni:/Master:/EL9-Uyuni-Client-Tools/EL_9/x86_64/venv-salt-minion.rpm
3. systemctl restart venv-salt-minion
4. Check logs for errors

To solve:
5. dnf install openssl
6. systemctl restart venv-salt-minion

Uyuni version

Latest stable client 3006.0-58.1.uyuni /master branch

Uyuni proxy version (if used)

uyuni-tools version used to deploy/manage the server or proxy (if relevant)

Useful logs

Feb 13 22:10:35 localhost.localdomain systemd[1]: venv-salt-minion.service: Main process exited, code=exited, status=1/FAILURE
Feb 13 22:10:35 localhost.localdomain systemd[1]: venv-salt-minion.service: Failed with result 'exit-code'.
^C
[root@localhost venv-salt-minion]# systemctl restart venv-salt-minion
[root@localhost venv-salt-minion]# journalctl -f
Feb 13 22:10:46 localhost.localdomain salt-minion[1347]:     import salt.fileclient
Feb 13 22:10:46 localhost.localdomain salt-minion[1347]:   File "/usr/lib/venv-salt-minion/lib64/python3.11/site-packages/salt/fileclient.py", line 29, in <module>
Feb 13 22:10:46 localhost.localdomain salt-minion[1347]:     import salt.utils.http
Feb 13 22:10:46 localhost.localdomain salt-minion[1347]:   File "/usr/lib/venv-salt-minion/lib64/python3.11/site-packages/salt/utils/http.py", line 18, in <module>
Feb 13 22:10:46 localhost.localdomain salt-minion[1347]:     import ssl
Feb 13 22:10:46 localhost.localdomain salt-minion[1347]:   File "/usr/lib/venv-salt-minion/lib64/python3.11/ssl.py", line 100, in <module>
Feb 13 22:10:46 localhost.localdomain salt-minion[1347]:     import _ssl             # if we can't import it, let the error propagate
Feb 13 22:10:46 localhost.localdomain salt-minion[1347]:     ^^^^^^^^^^^
Feb 13 22:10:46 localhost.localdomain salt-minion[1347]: ImportError: /lib64/libcrypto.so.3: version `OPENSSL_3.3.0' not found (required by /usr/lib/venv-salt-minion/lib64/python3.11/lib-dynload/_ssl.cpython-311-x86_64-linux-gnu.so)
Feb 13 22:10:46 localhost.localdomain salt-minion[1347]: The Salt Minion is shutdown.

Additional information

No response

[sbluhm]

feel free to assign the ticket to me

[mcalmer]

CC @meaksh @vzhestkov

We saw this already. Seems there was a new openssl version released for AlmaLinux.
Question: Have all EL9 clones this update?
Not sure if we want to link against the new version or not.

[meaksh]

Thanks for reporting this @sbluhm. We're aware of this issue and currently working on this.

As soon as we have the fixed version in Uyuni:Master we will let you know.

[vzhestkov]

@sbluhm, thanks for the report, I just fixed the root cause leading to wiping the binary dependencies from the resulting binary package, could you please check with the package in the development repo: https://download.opensuse.org/repositories/systemsmanagement:/saltstack:/bundle:/scm:/testing/AlmaLinux_9/
Even if it's called AlmaLinux, it's applicable for all EL9 clones.

[fockarty]

I had the same issie, new rpm also. fix for me was simply updating openssl on alma 9

[sbluhm]

@vzhestkov
I just noticed that this issue happened on 9.3 but it does not happen on the latest EL 9.7. On 9.7 openssl is installed by default as required by sudo.

Test Stable:
https://download.opensuse.org/repositories/systemsmanagement:/Uyuni:/Stable:/EL9-Uyuni-Client-Tools/EL_9/x86_64/venv-salt-minion.rpm
9.3: ImportError: /lib64/libcrypto.so.3: version `OPENSSL_3.3.0' not found
9.7: Working fine

Test Master:
https://download.opensuse.org/repositories/systemsmanagement:/Uyuni:/Master:/EL9-Uyuni-Client-Tools/EL_9/x86_64/venv-salt-minion-3006.0-58.28.uyuni.x86_64.rpm
9.3: ImportError: /lib64/libcrypto.so.3: version `OPENSSL_3.3.0' not found
9.7: Working fine

Test saltstack:
https://download.opensuse.org/repositories/systemsmanagement:/saltstack:/bundle:/scm:/testing/AlmaLinux_9/x86_64/venv-salt-minion-3006.0-13.2.x86_64.rpm
9.3: Automatically installs required packages openssl, openssl-libs, openssl-fips-provider. Working fine now.
9.7: Working fine

[vzhestkov]

We've promoted the fix already, so it will be included to the next version.
Here is the fix:
https://src.opensuse.org/saltbundle/venv-salt-minion/pulls/22

I would suggest to close the issue as it should be fixed with new upcoming release.