Unable to install on Alma Linux 9 - ssl dependency error

[michael-stevens]

Bug Report

Describe the bug
Install fails on Alma linux 9 with dependency error

To Reproduce

• Steps to reproduce the problem:

Run:

curl https://raw.githubusercontent.com/fluent/fluent-bit/master/install.sh | sh

on Alma Linux 9.

Expected behavior
Installs cleanly.

Actual behaviour

[mstevens@localhost ~]$ sudo su -
[sudo] password for mstevens: 
Last login: Wed May 14 09:49:17 BST 2025 on pts/0
[root@localhost ~]# curl https://raw.githubusercontent.com/fluent/fluent-bit/master/install.sh | sh
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  3917  100  3917    0     0  19107      0 --:--:-- --:--:-- --:--:-- 19107
================================
 Fluent Bit Installation Script 
================================
This script requires superuser access to install packages.
You will be prompted for your password by sudo.
[fluent-bit]
name = Fluent Bit
# Legacy server style
baseurl = https://packages.fluentbit.io/centos/$releasever/
gpgcheck=1
repo_gpgcheck=1
gpgkey=https://packages.fluentbit.io/fluentbit.key
enabled=1
Fluent Bit                                      960  B/s | 866  B     00:00    
Fluent Bit                                       18 kB/s | 3.1 kB     00:00    
Importing GPG key 0x3888C1CD:
 Userid     : "Fluentbit releases (Releases signing key) <releases@fluentbit.io>"
 Fingerprint: C3C0 A285 34B9 293E AF51 FABD 9F9D DC08 3888 C1CD
 From       : https://packages.fluentbit.io/fluentbit.key
Fluent Bit                                       66 kB/s |  77 kB     00:01    
Error: 
 Problem: cannot install the best candidate for the job
  - nothing provides libcrypto.so.3(OPENSSL_3.4.0)(64bit) needed by fluent-bit-4.0.2-1.aarch64 from fluent-bit
(try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)

Your Environment

• Version used: Latest single line install script from https://docs.fluentbit.io/manual/installation/linux/redhat-centos
• Server type and version: aarch64 (alma linux vm on macos)
• Operating System and version: Alma Linux 9

Additional context

Unable to install or update on Alma Linux 9.

[patrick-stephens]

I'm guessing the Centos build was switched to using a dependency that Alma is not providing now. @edsiper what do you want to do with it? We can keep it back but then folks will complain about using the older open SSL, there's an open issue on it.

@michael-stevens do you know if there is a version of the dependency available for Alma either now or coming?

[patrick-stephens]

A better option may be to expand our targets to build explicitly for Alma and Rocky to prevent future issues too.

I can do that as a longer term solution.

[Elwell]

Yes please for an alma/Rocky (which is what I'm using) / RHEL 9 compatible build

[patrick-stephens]

Well we do use CentOS 9 as the base image so it seems the definition of "compatible" is a bit fluid :)

fluent-bit/packaging/distros/centos/Dockerfile

Line 192 in f28e61e

FROM --platform=arm64 quay.io/centos/centos:stream9 AS centos-9.arm64v8-base

I guess stream is now going to be a faster moving target than the old Centos which is probably why this happened.

[Elwell]

Yep - current (Rocky 9.5 with updates to 2025-05-15) list the following:

[aelwell@admiral ~]$ rpm -q --provides openssl
openssl = 1:3.2.2-6.el9_5.1
openssl(x86-64) = 1:3.2.2-6.el9_5.1
[aelwell@admiral ~]$ rpm -q --provides openssl-libs
config(openssl-libs) = 1:3.2.2-6.el9_5.1
libcrypto.so.3()(64bit)
libcrypto.so.3(OPENSSL_3.0.0)(64bit)
libcrypto.so.3(OPENSSL_3.0.1)(64bit)
libcrypto.so.3(OPENSSL_3.0.3)(64bit)
libcrypto.so.3(OPENSSL_3.0.8)(64bit)
libcrypto.so.3(OPENSSL_3.0.9)(64bit)
libcrypto.so.3(OPENSSL_3.1.0)(64bit)
libcrypto.so.3(OPENSSL_3.2.0)(64bit)
libssl.so.3()(64bit)
libssl.so.3(OPENSSL_3.0.0)(64bit)
libssl.so.3(OPENSSL_3.2.0)(64bit)
openssl-libs = 1:3.2.2-6.el9_5.1
openssl-libs(x86-64) = 1:3.2.2-6.el9_5.1
[aelwell@admiral ~]$ rpm -q --requires fluent-bit | grep -i ssl
libcrypto.so.3(OPENSSL_3.0.0)(64bit)
libssl.so.3()(64bit)
libssl.so.3(OPENSSL_3.0.0)(64bit)

so you've only got up to and including libcrypto.so.3(OPENSSL_3.2.0)(64bit)

It looks like upstream (centos stream) are already building with 3.5: https://kojihub.stream.centos.org/koji/packageinfo?packageID=1415

[patrick-stephens]

Autoclosed by PR but a release will be needed to actually provide the new packages.

[alindobre]

Hi @patrick-stephens, thanks for providing a fix. Any idea when new packages will be released? Current https://packages.fluentbit.io/ still only provides centos not almalinux.

[patrick-stephens]

Next release should create them.