Fedora 34 dnf segfault with ssl repositories

Problem:

During the kickstart in a post-install script calling dnf segfaults when having ssl encrypted repositories. But only for repositories provided by katello, maybe there is a bug in libcurl.so when using certificates provided by katello.

I created a fedora bug at 1956807 – dnf segfaults during kickstart (libcurl.so.4.7.0) with ssl repositories but maybe there can be something done within foreman/katello?

Expected outcome:

dnf should be able to install packages during %post installation blocks.

Foreman and Proxy versions:

Foreman & Proxy: 2.3.3

Foreman and Proxy plugin versions:

Katello: 3.18.1

@bbk Thanks for bringing this to our attention. I will try and help you resolve this.

1 Like

@bbk do you know if dnf segfaults if connected to the repos in question outside of katello?

Good point i did not test that.

I have added a outside repository with https and it didn’t made any problem.

The funny thing is in most cases a core dump is produced but sometimes it works (eddy33 = external repo / x86_64 in katello):

[anaconda root@ks-04 yum.repos.d]# dnf clean all;dnf check-update
Updating Subscription Management repositories.
15 files removed
Updating Subscription Management repositories.
eddy33's repo for Fedora 34                                                                                      29 kB/s | 6.6 kB     00:00    
eddy33's updates for Fedora 34                                                                                  1.3 kB/s | 257  B     00:00    
Segmentation fault (core dumped)                         [   ===                                              ] ---  B/s |   0  B     --:-- ETA
[anaconda root@ks-04 yum.repos.d]# dnf clean all;dnf check-update
Updating Subscription Management repositories.
15 files removed
Updating Subscription Management repositories.
eddy33's repo for Fedora 34                                                                                      34 kB/s | 6.6 kB     00:00    
eddy33's updates for Fedora 34                                                                                  1.2 kB/s | 257  B     00:00    
x86_64                                                                                                           53 kB/s |  10 kB     00:00    
[anaconda root@ks-04 yum.repos.d]# dnf clean all;dnf check-update
Updating Subscription Management repositories.
18 files removed
Updating Subscription Management repositories.
eddy33's repo for Fedora 34                                                                                      33 kB/s | 6.6 kB     00:00    
eddy33's updates for Fedora 34                                                                                  1.3 kB/s | 257  B     00:00    
Segmentation fault (core dumped)                         [   ===                                              ] ---  B/s |   0  B     --:-- ETA
[anaconda root@ks-04 yum.repos.d]# dnf clean all;dnf check-update
Updating Subscription Management repositories.
15 files removed
Updating Subscription Management repositories.
eddy33's repo for Fedora 34                                                                                      34 kB/s | 6.6 kB     00:00    
eddy33's updates for Fedora 34                                                                                  1.3 kB/s | 257  B     00:00    
Segmentation fault (core dumped)                         [   ===                                              ] ---  B/s |   0  B     --:-- ETA
[anaconda root@ks-04 yum.repos.d]#

Good news, it will be fixed with curl 7.77.0.