When sys-apps/kmod is built with the ssl USE flag, it is linked against /usr/lib/libcrypt.so. This can cause boot failures on systems configured with a late-mounting /usr and no initrd. If the primary video driver is dynamically loaded without a fallback (e.g. framebuffer during EFI hand-off), the user might see nothing except "Loading linux <version>...." with a hung system. Reproducible: Always Steps to Reproduce: 1. With /usr on a separate filesystem and no initrd, compile kmod +ssl and reboot. Actual Results: With working video driver built in to the kernel, the user will see openrc starting up, followed quickly by an error about kmod not running because /usr/lib/libcrypt.so couldn't be loaded. Openrc will nevertheless attempt to continue. Without a working video driver built in to the kernel, the user will see a system hang at "Loading linux <version> ...." or similar. Expected Results: System should boot successfully. Some possible ways to handle: * If ssl is enabled, emit a warning about the added dependency on /usr during boot. Additionally, consider not enabling ssl by default. * If ssl is enabled, statically link libcrypt so there's no dependency on /usr. * Make glibc install libcrypt to /lib instead of /usr/lib.
(In reply to David Owen from comment #0) > When sys-apps/kmod is built with the ssl USE flag, it is linked against > /usr/lib/libcrypt.so. ... > * Make glibc install libcrypt to /lib instead of /usr/lib. AFAIS it is linked against /usr/lib*/libcrypto.so.* which is owned by openssl.
AFAIK /usr on separate volume without initramfs is not supported.
(In reply to Alexander Tsoy from comment #1) > AFAIS it is linked against /usr/lib*/libcrypto.so.* which is owned by > openssl. Oh, yes, you're correct on both points.
The bug has been closed via the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=ab4d42b4c700cfb08d601c7741959e6f0483705a commit ab4d42b4c700cfb08d601c7741959e6f0483705a Author: Mike Gilbert <floppym@gentoo.org> AuthorDate: 2019-11-15 17:26:13 +0000 Commit: Mike Gilbert <floppym@gentoo.org> CommitDate: 2019-11-15 18:37:29 +0000 sys-apps/kmod: rename 'ssl' USE flag to 'pkcs7' This better expresses the effect of the --with-openssl configure option. See NEWS for more details. This also has the nice side-effect of disabling the dependency on opensssl by default, which makes kmod work without /usr mounted in early boot. Closes: https://bugs.gentoo.org/700128 Package-Manager: Portage-2.3.79_p3, Repoman-2.3.18_p2 Signed-off-by: Mike Gilbert <floppym@gentoo.org> sys-apps/kmod/kmod-26-r2.ebuild | 6 +++--- sys-apps/kmod/kmod-9999.ebuild | 6 +++--- sys-apps/kmod/metadata.xml | 1 + 3 files changed, 7 insertions(+), 6 deletions(-)
