[feat] Debian 12 Support

Ghost commented

2023-01-26 19:04:08 +00:00

The idea

Debian 12 will be released in a few months. Any plans to support Akkoma with the new release?

The reasoning

I noticed that Akkoma does not work on Debian Testing right now because it does not ship with libcrypt.so.1 anymore.

Have you searched for this feature request?

I have double-checked and have not found this feature request mentioned anywhere.
This feature is related to the Akkoma backend specifically, and not pleroma-fe.

### The idea Debian 12 will be released in a few months. Any plans to support Akkoma with the new release? ### The reasoning I noticed that Akkoma does not work on Debian Testing right now because it does not ship with libcrypt.so.1 anymore. ### Have you searched for this feature request? - [x] I have double-checked and have not found this feature request mentioned anywhere. - [x] This feature is related to the Akkoma backend specifically, and not pleroma-fe.

Ghost added the

feature request

label 2023-01-26 19:04:08 +00:00

Ghost commented

2023-01-27 00:29:04 +00:00

Author

Akkoma doesn't ship anything in regards to OpenSSL libraries. It works fine. You need to install libssl1.1 (openssl-1.1) since the migration to OpenSSL 3.0 dropped libcrypt.so.1 libraries across distros, but a compatibility package exists for most distros.

Ghost commented

2023-01-27 00:46:02 +00:00

Author

How are we supposed to install OpenSSL 1.1 when modern distros no longer support it? Are users expected to compile from source or find a workaround for it? That will be a pain for users. Here is the errors when Akkoma starts with Debian Testing

=ERROR REPORT==== 26-Jan-2023::17:45:17.881225 ===
Unable to load crypto library. Failed with error:
"load_failed, Failed to load NIF library /opt/akkoma/lib/crypto-5.1.2/priv/lib/crypto: 'libcrypto.so.1.1: cannot open shared object file: No such file or directory'"
OpenSSL might not be installed on this system.

=SUPERVISOR REPORT==== 26-Jan-2023::17:45:17.882170 ===
    supervisor: {local,kernel_sup}
    errorContext: start_error
    reason: {on_load_function_failed,crypto,
                {error,
                    {load_failed,
                        "Failed to load NIF library /opt/akkoma/lib/crypto-5.1.2/priv/lib/crypto: 'libcrypto.so.1.1: cannot open shared object file: No such file or directory'"}}}
    offender: [{pid,undefined},
               {id,kernel_safe_sup},
               {mfargs,{supervisor,start_link,
                                   [{local,kernel_safe_sup},kernel,safe]}},
               {restart_type,permanent},
               {significant,false},
               {shutdown,infinity},
               {child_type,supervisor}]

How are we supposed to install OpenSSL 1.1 when modern distros no longer support it? Are users expected to compile from source or find a workaround for it? That will be a pain for users. Here is the errors when Akkoma starts with Debian Testing ``` =ERROR REPORT==== 26-Jan-2023::17:45:17.881225 === Unable to load crypto library. Failed with error: "load_failed, Failed to load NIF library /opt/akkoma/lib/crypto-5.1.2/priv/lib/crypto: 'libcrypto.so.1.1: cannot open shared object file: No such file or directory'" OpenSSL might not be installed on this system. =SUPERVISOR REPORT==== 26-Jan-2023::17:45:17.882170 === supervisor: {local,kernel_sup} errorContext: start_error reason: {on_load_function_failed,crypto, {error, {load_failed, "Failed to load NIF library /opt/akkoma/lib/crypto-5.1.2/priv/lib/crypto: 'libcrypto.so.1.1: cannot open shared object file: No such file or directory'"}}} offender: [{pid,undefined}, {id,kernel_safe_sup}, {mfargs,{supervisor,start_link, [{local,kernel_safe_sup},kernel,safe]}}, {restart_type,permanent}, {significant,false}, {shutdown,infinity}, {child_type,supervisor}] ```

Ghost commented

2023-01-27 01:02:35 +00:00

Author

No one's saying you have to build anything yourself. OpenSSL is still maintaining compatibility support for OpenSSL 1.x. All you have to do is follow what I said above: install libssl1.1.

Modern distros support OpenSSL 1.x just fine: by installing libssl1.1 / openssl-1.1

There's nothing for Akkoma to do.

No one's saying you have to build anything yourself. OpenSSL is still maintaining compatibility support for OpenSSL 1.x. All you have to do is follow what I said above: install libssl1.1. Modern distros support OpenSSL 1.x just fine: by installing libssl1.1 / openssl-1.1 There's nothing for Akkoma to do.

Ghost commented

2023-01-27 01:09:05 +00:00

Author

Distros DO NOT PROVIDE that package anymore. libssl11.1 has been depreciated. I struggled with other apps that require this also.

Example:

https://askubuntu.com/questions/1408000/unable-to-locate-package-libssl1-1

https://wiki.debian.org/OpenSSL-1.1

So Akkoma needs to address this quickly since they use a depreciated libary that is no longer in the next Stable release of Debian and every other distro.

Distros DO NOT PROVIDE that package anymore. libssl11.1 has been depreciated. I struggled with other apps that require this also. Example: https://askubuntu.com/questions/1408000/unable-to-locate-package-libssl1-1 https://wiki.debian.org/OpenSSL-1.1 So Akkoma needs to address this quickly since they use a depreciated libary that is no longer in the next Stable release of Debian and every other distro.

floatingghost commented

2023-01-27 01:19:49 +00:00

Owner

seconding that there's nothing for us to do

it's the Erlang runtime that requires 1.1

idk how you installed Erlang, if it was via asdf, recompile it

seconding that there's nothing for us to do it's the Erlang runtime that requires 1.1 idk how you installed Erlang, if it was via asdf, recompile it

floatingghost commented

2023-01-27 01:23:34 +00:00

Owner

you didnt specify, but if you're using OTP, the ubuntu-jammy flavour supports sslv3, because of the split

Ghost commented

2023-01-27 01:24:13 +00:00

Author

I am using the OTP release of Akkoma. Does it need Erlang updated?

floatingghost commented

2023-01-27 01:26:12 +00:00

Owner

use the jammy flavour then, that should work

I'll add on the flavour notes that Debian unstable should use it as well

use the jammy flavour then, that should work I'll add on the flavour notes that Debian unstable should use it as well

Ghost commented

2023-01-27 01:28:53 +00:00

Author

OTP releases ship with Erlang though. Users do not install it from the distro repo. This means that Akkoma needs to update the Erlang/Elixer that is bundled with the OTP release right?