Icinga 2.14.1 package installation fails due to OpenSSL dependency

Icinga 2
, ,
1

Greetings, i’m trying to install icinga 2.14.1 package on Amazon Linux 2023. However i’m hitting dependency issue:

  • nothing provides libcrypto.so.10()(64bit) needed by icinga2-bin-2.14.1-1.amzn2.x86_64
  • nothing provides libcrypto.so.10(libcrypto.so.10)(64bit) needed by icinga2-bin-2.14.1-1.amzn2.x86_64
  • nothing provides libssl.so.10()(64bit) needed by icinga2-bin-2.14.1-1.amzn2.x86_64
  • nothing provides libssl.so.10(libssl.so.10)(64bit) needed by icinga2-bin-2.14.1-1.amzn2.x86_64
  • nothing provides libcrypto.so.10(OPENSSL_1.0.2)(64bit) needed by icinga2-bin-2.14.1-1.amzn2.x86_64

AL2023 uses OpenSSL 3.0.8, i don’t see a way to downgrade or install OpenSSL 1.0.x on this system.

I have tried to create symlinks to newer ssl libraries but this doesn’t help, the package installer still can’t find them. Is this dependency to older SSL version somehow hardcoded in the installation package? Is it possible to override this somehow with the actual OpenSSL version? With nagios plugins i was able to circumvent this by compiling modules manually but from what i read compiling icinga2 from source isn’t a supported installation method.

edit: additional information:

Following are dependencies of the icinga2-bin package:

dnf repoquery --requires icinga2-bin
Last metadata expiration check: 23:59:48 ago on Thu Jan 4 10:20:47 2024.
libboost_atomic.so.1.69.0()(64bit)
libboost_chrono.so.1.69.0()(64bit)
libboost_context.so.1.69.0()(64bit)
libboost_coroutine.so.1.69.0()(64bit)
libboost_date_time.so.1.69.0()(64bit)
libboost_filesystem.so.1.69.0()(64bit)
libboost_iostreams.so.1.69.0()(64bit)
libboost_program_options.so.1.69.0()(64bit)
libboost_regex.so.1.69.0()(64bit)
libboost_system.so.1.69.0()(64bit)
libboost_thread.so.1.69.0()(64bit)
libc.so.6(GLIBC_2.25)(64bit)
libcrypto.so.10()(64bit)
libcrypto.so.10(OPENSSL_1.0.2)(64bit)
libcrypto.so.10(libcrypto.so.10)(64bit)
libdl.so.2()(64bit)
libdl.so.2(GLIBC_2.2.5)(64bit)
libedit.so.0()(64bit)
libgcc_s.so.1()(64bit)
libgcc_s.so.1(GCC_3.0)(64bit)
libgcc_s.so.1(GCC_3.3)(64bit)
libm.so.6()(64bit)
libm.so.6(GLIBC_2.2.5)(64bit)
libpthread.so.0()(64bit)
libpthread.so.0(GLIBC_2.2.5)(64bit)
libpthread.so.0(GLIBC_2.3.2)(64bit)
libpthread.so.0(GLIBC_2.3.3)(64bit)
libssl.so.10()(64bit)
libssl.so.10(libssl.so.10)(64bit)
libstdc++.so.6()(64bit)
libstdc++.so.6(CXXABI_1.3)(64bit)
libstdc++.so.6(CXXABI_1.3.11)(64bit)
libstdc++.so.6(CXXABI_1.3.2)(64bit)
libstdc++.so.6(CXXABI_1.3.3)(64bit)
libstdc++.so.6(CXXABI_1.3.5)(64bit)
libstdc++.so.6(CXXABI_1.3.7)(64bit)
libstdc++.so.6(CXXABI_1.3.8)(64bit)
libstdc++.so.6(CXXABI_1.3.9)(64bit)
libstdc++.so.6(GLIBCXX_3.4)(64bit)
libstdc++.so.6(GLIBCXX_3.4.11)(64bit)
libstdc++.so.6(GLIBCXX_3.4.14)(64bit)
libstdc++.so.6(GLIBCXX_3.4.15)(64bit)
libstdc++.so.6(GLIBCXX_3.4.17)(64bit)
libstdc++.so.6(GLIBCXX_3.4.18)(64bit)
libstdc++.so.6(GLIBCXX_3.4.19)(64bit)
libstdc++.so.6(GLIBCXX_3.4.20)(64bit)
libstdc++.so.6(GLIBCXX_3.4.21)(64bit)
libstdc++.so.6(GLIBCXX_3.4.22)(64bit)
libstdc++.so.6(GLIBCXX_3.4.9)(64bit)
libtinfo.so.6()(64bit)
rtld(GNU_HASH)

I have noticed that there is dependency on libboost 1.69. However on AL2023 there are installed newer libboost libraries:

boost-filesystem.x86_64 1.75.0-4.amzn2023.0.2 @System
boost-system.x86_64 1.75.0-4.amzn2023.0.2 @System
boost-thread.x86_64 1.75.0-4.amzn2023.0.2 @System

Icinga provides its own boost libraries, this just strikes me if this could be a problem because i know we had issue with boost library versions already in som previous icinga2 version.

Thank you for information.

2

Hello @dzodzo666 and thanks for reporting!

I’ve built a fix for your problem:

https://github.com/Icinga/packages.icinga.com/pull/40

Best,
A/K

3

Greetings, i’m getting a 404 when accessing the link, can you check if the address is correct? Thank you.

4

In your /etc/yum.repos.d/ICINGA-release.repo replace “al2” with “al2023”.

5

Hello @Al2Klimov,

I have been facing the similar issue.

currently, we are using ICINGA2 on centos with version 2.12.2 and planning to move this to AL2023 image with same version or Fedora ICINGA 2.14.2
while I was trying to install this Centos ICINGA 2.12.2/Fedora ICINGA 2.14.2 package on AL2023 and it is failing due to OpenSSL dependency,
Fedora 2.14.2 version:

  • nothing provides libcrypto.so.10()(64bit) needed by icinga2-bin-2.14.2-1.el7.x86_64 from icinga
  • nothing provides libssl.so.10()(64bit) needed by icinga2-bin-2.14.2-1.el7.x86_64 from icinga
  • nothing provides libcrypto.so.10(libcrypto.so.10)(64bit) needed by icinga2-bin-2.14.2-1.el7.x86_64 from icinga
  • nothing provides libssl.so.10(libssl.so.10)(64bit) needed by icinga2-bin-2.14.2-1.el7.x86_64 from icinga
  • nothing provides libcrypto.so.10(OPENSSL_1.0.2)(64bit) needed by icinga2-bin-2.14.2-1.el7.x86_64 from icinga
  • nothing provides libboost_atomic.so.1.81.0()(64bit) needed by icinga2-bin-2.14.2-1.fc39.x86_64 from packages.icinga.com_fedora_39_release
  • nothing provides libboost_chrono.so.1.81.0()(64bit) needed by icinga2-bin-2.14.2-1.fc39.x86_64 from packages.icinga.com_fedora_39_release
  • nothing provides libboost_context.so.1.81.0()(64bit) needed by icinga2-bin-2.14.2-1.fc39.x86_64 from packages.icinga.com_fedora_39_release
  • nothing provides libboost_coroutine.so.1.81.0()(64bit) needed by icinga2-bin-2.14.2-1.fc39.x86_64 from packages.icinga.com_fedora_39_release
  • nothing provides libboost_date_time.so.1.81.0()(64bit) needed by icinga2-bin-2.14.2-1.fc39.x86_64 from packages.icinga.com_fedora_39_release
  • nothing provides libboost_filesystem.so.1.81.0()(64bit) needed by icinga2-bin-2.14.2-1.fc39.x86_64 from packages.icinga.com_fedora_39_release
  • nothing provides libboost_iostreams.so.1.81.0()(64bit) needed by icinga2-bin-2.14.2-1.fc39.x86_64 from packages.icinga.com_fedora_39_release
  • nothing provides libboost_program_options.so.1.81.0()(64bit) needed by icinga2-bin-2.14.2-1.fc39.x86_64 from packages.icinga.com_fedora_39_release
  • nothing provides libboost_regex.so.1.81.0()(64bit) needed by icinga2-bin-2.14.2-1.fc39.x86_64 from packages.icinga.com_fedora_39_release
  • nothing provides libboost_system.so.1.81.0()(64bit) needed by icinga2-bin-2.14.2-1.fc39.x86_64 from packages.icinga.com_fedora_39_release
  • nothing provides libboost_thread.so.1.81.0()(64bit) needed by icinga2-bin-2.14.2-1.fc39.x86_64 from packages.icinga.com_fedora_39_release
  • nothing provides libc.so.6(GLIBC_2.38)(64bit) needed by icinga2-bin-2.14.2-1.fc39.x86_64 from packages.icinga.com_fedora_39_release
  • nothing provides libm.so.6(GLIBC_2.38)(64bit) needed by icinga2-bin-2.14.2-1.fc39.x86_64 from packages.icinga.com_fedora_39_release
  • nothing provides libstdc++.so.6(GLIBCXX_3.4.30)(64bit) needed by icinga2-bin-2.14.2-1.fc39.x86_64 from packages.icinga.com_fedora_39_release
  • nothing provides libstdc++.so.6(GLIBCXX_3.4.32)(64bit) needed by icinga2-bin-2.14.2-1.fc39.x86_64 from packages.icinga.com_fedora_39_release

CentOs 2.12.2 version:

  • nothing provides libcrypto.so.10()(64bit) needed by icinga2-bin-2.12.2-1.el7.icinga.x86_64 from icinga
  • nothing provides libssl.so.10()(64bit) needed by icinga2-bin-2.12.2-1.el7.icinga.x86_64 from icinga
  • nothing provides libcrypto.so.10(libcrypto.so.10)(64bit) needed by icinga2-bin-2.12.2-1.el7.icinga.x86_64 from icinga
  • nothing provides libssl.so.10(libssl.so.10)(64bit) needed by icinga2-bin-2.12.2-1.el7.icinga.x86_64 from icinga
  • nothing provides libcrypto.so.10(OPENSSL_1.0.2)(64bit) needed by icinga2-bin-2.12.2-1.el7.icinga.x86_64 from icinga

As per following link, OpenSSL required version is 1.1.1a for Fedora 29 but package is still looking OpenSSL 1.0.x on this system

https://github.com/Icinga/icinga-packaging/blob/master/doc/03-Dependencies.md

Could you please let me know if there is any workaround to install any of the above versions on AL2023?

6

You need our Amazon Linux repo:

https://packages.icinga.com/subscription/amazon/
https://packages.icinga.com/subscription/amazon/ICINGA-release.repo

But in your /etc/yum.repos.d/ICINGA-release.repo replace “al2” with “al2023”.