ovn: Fail to build against OpenSSL 3.0

[Simon Chopin]

Hello,

As part of a rebuild against OpenSSL3, this package failed to build on one or
several architectures. You can find the details of the rebuild at

https://people.canonical.com/~schopin/rebuilds/openssl-3.0.0-impish.html

or for the amd64 failed build, directly at

https://launchpad.net/~schopin/+archive/ubuntu/openssl-3.0.0/+build/22099238/+files/buildlog_ubuntu-impish-amd64.ovn_21.09.0~git20210806.d08f89e21-0ubuntu1.1.0~ssl3ppa1.1_BUILDING.txt.gz

We're planning to transition to OpenSSL 3.0 for the 22.04 release, and consider
this issue as blocking for this transition.

You can find general migration informations at
https://www.openssl.org/docs/manmaster/man7/migration_guide.html
For your tests, you can build against libssl-dev as found in the PPA
schopin/openssl-3.0.0

I was unable to find anything related to the failure upstream, and have confirmed
that it is caused by the OpenSSL dependency.

[Frode Nordahl (fnordahl)]

Thank you for raising this issue!

I am unfortunately not able to reproduce this when building against OpenSSL 3.0 locally and running the test suite. I have tried both on amd64 and on s390x to rule out any architecture specific issue.

Looking at the latest Jammy PPA rebuild [0] amd64, arm64 and armhf are successful while a inconsistent set of tests are being retried/failing for ppc64el and s390x.

Could this be a case of tests becoming flaky under build farm load? Would it be possible to retry the current failed builds [1][2] and see if the test results change?

0: https://launchpad.net/~schopin/+archive/ubuntu/openssl-3.0.0/+packages?field.name_filter=ovn&field.status_filter=published&field.series_filter=jammy
1: https://launchpad.net/~schopin/+archive/ubuntu/openssl-3.0.0/+build/22368244
2: https://launchpad.net/~schopin/+archive/ubuntu/openssl-3.0.0/+build/22368245

[Simon Chopin (schopin)]

My guess is that the issue was with a build-dep of ovn that has been fixed in jammy somehow, and that as you suspect we're now just seeing transient build failures. Retried both s390x and ppc64el, I'll keep you informed :)

[Simon Chopin (schopin)]

So, the builds failed again. I'm looking into building it with -proposed + OpenSSL 3.0 on s390x.

[Simon Chopin (schopin)]

... and I can't reproduce the build failure, even when not enabling -proposed (test on canonistack, s390x, adding the PPA to APT sources). This is vexing.

[Launchpad Janitor (janitor)]

[Expired for ovn (Ubuntu) because there has been no activity for 60 days.]

[Simon Chopin (schopin)]

Marking as Confirmed as the FTBFS has actually hit the version currently in the archive.

[Simon Chopin (schopin)]

I'm guessing this has been solved, since the binaries in the release pocket are linked against libssl3 :)