Checkmk on RHEL 9.7 and/or RHEL 10.1 issues

Troubleshooting
1

Just want to make you aware that Red Hat rebased OpenSSL in RHEL 9.7 and 10.1 to version 3.5.

This leads to many commands (e.g. nslookup, rpmbuild, etc) no longer working when run as site user because if its LD_LIBRARY_PATH settings and Checkmk comes with some own libraries (like ~/lib/libcrypto.so.3).

running such commands then lead to errors like this:

OMD[dev24b]:~$ nslookup bla
nslookup: /omd/sites/dev24b/lib/libcrypto.so.3: version `OPENSSL_3.4.0’ not found (required by /lib64/libisc-9.16.23-RH.so)

or errors during agent baking as shown in:

2

We’re running into this same issue after updating to RHEL 9.7. I’ve got a support case open, hoping they push a fix out soon.

3 Likes
3

Same issue on our CEE instance (2.4.0p16) on Alma 9.7. Were you able to find a workaround?

4

Support responded and said it’s being sent over to development. Sounds like we’re stuck until they release a fix.

1 Like
5

Run in the same Problem. Hope for updates about a solution in this thread :slight_smile:

1 Like
6

There is already Werk #18935: OpenSSL Upgrade Compatibility Fix in the queue :slight_smile:

2 Likes
7

Any updates on this issue?

1 Like
8

Hi @shandy4473 !
Are you updated to one of the versions (or later) covered by the Werk above?

1 Like
9

Hi Sara. I am on RHEL 10 and just updated to the latest 2.4.0p24. Site not loading.

Error - “/usr/bin/systemctl: /omd/sites/uihmonitoring/lib/libcrypto.so.3: version `OPENSSL_3.4.0’ not found (required by /usr/lib64/systemd/libsystemd-shared-257-13.el10.so)”

Steve

10

Sara - downgraded to 2.4.0p17 but site is not loading

11

Hey @shandy4473

can you please run

omd update-apache-config uihmonitoring

as root on the Checkmk server and see if the problem persists.

If that does not help, please post the entire error message. It seems to be incomplete.

Please also post the output of omd status uihmonitoring.