openGauss2.1.0在openEuler 20.03 LTS SP2 安装后，yum无法使用的问题解决

openGauss2.1.0 在 openEuler 20.03 LTS SP2 安装后，yum 无法使用的问题解决

一、环境描述

操作系统：

openEuler 20.03 LTS

openEuler 20.03 LTS SP2

数据库：

openGauss2.1.0

软件包：

openGauss-2.1.0-openEuler-64bit-all.tar.gz

二、安装过程

安装过程自动创建初始用户 omm。

三、问题

数据库安装使用正常，但是使用 yum，会报错：

[root@node1 ~]# yum list

Traceback (most recent call last):

File "/usr/lib64/python3.7/site-packages/libdnf/common_types.py", line 14, in swig_import_helper

return importlib.import_module(mname)

File "/usr/lib64/python3.7/importlib/init.py", line 127, in import_module

return _bootstrap._gcd_import(name[level:], package, level)

File "", line 1006, in _gcd_import

File "", line 983, in _find_and_load

File "", line 967, in _find_and_load_unlocked

File "", line 670, in _load_unlocked

File "", line 583, in module_from_spec

File "", line 1043, in create_module

File "", line 219, in _call_with_frames_removed

ImportError: /lib64/libcurl.so.4: symbol SSLv3_client_method version OPENSSL_1_1_0 not defined in file libssl.so.1.1 with link time reference

During handling of the above exception, another exception occurred:

Traceback (most recent call last):

File "/usr/bin/yum", line 57, in

from dnf.cli import main

File "/usr/lib/python3.7/site-packages/dnf/init.py", line 30, in

import dnf.base

File "/usr/lib/python3.7/site-packages/dnf/base.py", line 29, in

import libdnf.transaction

File "/usr/lib64/python3.7/site-packages/libdnf/init.py", line 3, in

from . import common_types

File "/usr/lib64/python3.7/site-packages/libdnf/common_types.py", line 17, in

_common_types = swig_import_helper()

File "/usr/lib64/python3.7/site-packages/libdnf/common_types.py", line 16, in swig_import_helper

return importlib.import_module('_common_types')

File "/usr/lib64/python3.7/importlib/init.py", line 127, in import_module

return _bootstrap._gcd_import(name[level:], package, level)

ModuleNotFoundError: No module named '_common_types'

[root@node1 ~]#

四、问题分析

[root@node1 lib64]# ldd /lib64/libcurl.so.4

linux-vdso.so.1 (0x00007fff98577000)

libnghttp2.so.14 (0x00007f06c3221000)

libidn2.so.0 (0x00007f06c3201000)

libssh.so.4 (0x00007f06c3180000)

libpsl.so.5 (0x00007f06c316d000)

libssl.so.1.1 => /opt/software/openGauss/script/gspylib/clib/libssl.so.1.1 (0x00007f06c30db000)

libcrypto.so.1.1 => /opt/software/openGauss/script/gspylib/clib/libcrypto.so.1.1 (0x00007f06c2e14000)

libgssapi_krb5.so.2 (0x00007f06c2dc4000)

libkrb5.so.3 (0x00007f06c2ce4000)

libk5crypto.so.3 (0x00007f06c2cc9000)

libcom_err.so.2 (0x00007f06c2cc3000)

libldap-2.4.so.2 (0x00007f06c2c76000)

liblber-2.4.so.2 (0x00007f06c2c63000)

libbrotlidec.so.1 (0x00007f06c2c54000)

libz.so.1 (0x00007f06c2c3a000)

libpthread.so.0 (0x00007f06c2c19000)

libc.so.6 (0x00007f06c2a58000)

libunistring.so.2 (0x00007f06c28d4000)

librt.so.1 (0x00007f06c28c7000)

/lib64/ld-linux-x86-64.so.2 (0x00007f06c32d9000)

libdl.so.2 (0x00007f06c28c2000)

libkrb5support.so.0 (0x00007f06c28b2000)

libkeyutils.so.1 (0x00007f06c28ac000)

libresolv.so.2 (0x00007f06c2894000)

libsasl2.so.3 (0x00007f06c2873000)

libm.so.6 (0x00007f06c26f0000)

libbrotlicommon.so.1 (0x00007f06c26cd000)

libselinux.so.1 (0x00007f06c26a1000)

libcrypt.so.1 (0x00007f06c2666000)

libpcre2-8.so.0 (0x00007f06c25d4000)

[root@node1 lib64]# nm /opt/software/openGauss/script/gspylib/clib/libssl.so.1.1| grep SSLv3_client_method

确实没有 SSLv3_client_method

五、解决

1 、下载 openssl-1.1.1l，编译：

编译 openssl 增加 enable-ssl3 与 enable-ssl3-method 选项

tar -zxvf openssl-1.1.1l.tar.gz

cd openssl-1.1.1l

./config shared enable-ssl3 enable-ssl3-method

make

make install

检查新编译的文件是否包含 SSLv3_client_method：

[root@node1 lib64]# nm /usr/local/lib64/libssl.so.1.1 | grep SSLv3_client_method

00000000000214f0 T SSLv3_client_method

编译完成后是有 SSLv3_client_method

编译好的库拷贝替换原来的 libssl.so.1.1：

[root@node1 lib64]# cp /usr/local/lib64/libssl.so.1.1 /opt/software/openGauss/script/gspylib/clib/

cp: overwrite '/opt/software/openGauss/script/gspylib/clib/libssl.so.1.1'? y

[root@node1 lib64]#

检查：

[root@node1 lib64]# nm /opt/software/openGauss/script/gspylib/clib/libssl.so.1.1| grep SSLv3_client_method

00000000000214f0 T SSLv3_client_method

至此，该文件正常。

yum测试：

[root@node1 lib64]# yum install -y tree

Last metadata expiration check: 0:29:30 ago on Tue 23 Nov 2021 11:15:02 AM CST.

Package tree-1.7.0-18.oe1.x86_64 is already installed.

Dependencies resolved.

Nothing to do.

Complete!

修复完成，yum 正常使用

六、深入问题

[root@node1 lib64]# ldd /lib64/libcurl.so.4

linux-vdso.so.1 (0x00007fff98577000)

libnghttp2.so.14 (0x00007f06c3221000)

libidn2.so.0 (0x00007f06c3201000)

libssh.so.4 (0x00007f06c3180000)

libpsl.so.5 (0x00007f06c316d000)

libssl.so.1.1 => /opt/software/openGauss/script/gspylib/clib/libssl.so.1.1 (0x00007f06c30db000)

操作系统默认 libssl.so.1.1 链接到/lib64 目录中，但是安装数据库后

发现 libssl.so.1.1 链接到/opt/software/openGauss/script/gspylib/clib/libssl.so.1.1 ，

怀疑安装脚本有问题。

这里参考曾庆峰老师的解决方案：

“先创建 omm 用户 dbgrp 组，预安装时就不再创建 omm”，安装后，yum 可以使用。

七、最简单方法

按照官方文档正常安装，yum 报错，只需要：

vim /etc/profile

export LD_LIBRARY_PATH=/opt/software/openGauss/script/gspylib/clib:

export PATH=/root/gauss_om/omm/script:$PATH

重启即可。

原因：

估计是安装脚本有问题。