@heiko said in salt-master: error: Failed to load configuration: Cannot load native module 'Cryptodome.Cipher._raw_des':
I encountered the same problem today upgrading from salt-minion-2017.7.5-1 to salt-minion-2017.7.6-1 on an Redhat Enterprise Linux 7.
The minion won't start and doesn't log anything.
systemctl tells about:
salt-minion: error: Failed to load configuration: Cannot load native module 'Cryptodome.Cipher._raw_des': Trying '_raw_des.so': /usr/li...
I guess the problem is not staltstack itself but the Cryptodome lib that received an update aswell.
python -m Cryptodome.SelfTest
Traceback (most recent call last):
File "/usr/lib64/python2.7/runpy.py", line 162, in _run_module_as_main
"__main__", fname, loader, pkg_name)
File "/usr/lib64/python2.7/runpy.py", line 72, in _run_code
exec code in run_globals
File "/usr/lib64/python2.7/site-packages/Cryptodome/SelfTest/__main__.py", line 30, in <module>
SelfTest.run(stream=sys.stdout, verbosity=1, config= {'slow_tests' : slow_tests })
File "/usr/lib64/python2.7/site-packages/Cryptodome/SelfTest/__init__.py", line 60, in run
tests = get_tests(config=config)
File "/usr/lib64/python2.7/site-packages/Cryptodome/SelfTest/__init__.py", line 81, in get_tests
from Cryptodome.SelfTest import Cipher; tests += Cipher.get_tests(config=config)
File "/usr/lib64/python2.7/site-packages/Cryptodome/SelfTest/Cipher/__init__.py", line 36, in get_tests
from Cryptodome.SelfTest.Cipher import test_DES3; tests += test_DES3.get_tests(config=config)
File "/usr/lib64/python2.7/site-packages/Cryptodome/SelfTest/Cipher/test_DES3.py", line 30, in <module>
from Cryptodome.Cipher import DES3
File "/usr/lib64/python2.7/site-packages/Cryptodome/Cipher/DES3.py", line 57, in <module>
""")
File "/usr/lib64/python2.7/site-packages/Cryptodome/Util/_raw_api.py", line 191, in load_pycryptodome_raw_lib
raise OSError("Cannot load native module '%s': %s" % (name, ", ".join(attempts)))
OSError: Cannot load native module 'Cryptodome.Cipher._raw_des3': Trying '_raw_des3.so': /usr/lib64/python2.7/site-packages/Cryptodome/Util/../Cipher/_raw_des3.so: undefined symbol: des3_ecb_decrypt, Trying '_raw_des3module.so': /usr/lib64/python2.7/site-packages/Cryptodome/Util/../Cipher/_raw_des3module.so: cannot open shared object file: No such file or directory
After downgrading to the previous version, salt-minion (2017.7.6-1) starts again.
yum downgrade python2-pycryptodomex-3.4.3-2.el7.x86_64
However downgrading that package is only a workaround and it will hopefully be fixed soon.
This is my current python2-pycryptodomex installed package, will try to downgrade as well to test it out.
Installed Packages
Name : python2-pycryptodomex
Arch : x86_64
Version : 3.4.11
Release : 2.el7
Size : 16 M
Repo : installed
From repo : saltstack
Summary : Self-contained Python package of low-level cryptographic
: primitives
URL : https://pycryptodome.readthedocs.io
License : Public Domain and BSD
Description : PyCryptodome is a fork of PyCrypto. It brings the following
: enhancements with respect to the last official version of PyCrypto
: (2.6.1):
:
: * Authenticated encryption modes (GCM, CCM, EAX, SIV, OCB)
: * Accelerated AES on Intel platforms via AES-NI
: * First class support for PyPy
: * Elliptic curves cryptography (NIST P-256 curve only)
: * Better and more compact API (nonce and iv attributes for
: ciphers, automatic generation of random nonces and IVs,
: simplified CTR cipher mode, and more)
: * SHA-3 (including SHAKE XOFs) and BLAKE2 hash algorithms
: * Salsa20 and ChaCha20 stream ciphers
: * scrypt and HKDF
: * Deterministic (EC)DSA
: * Password-protected PKCS#8 key containers
: * Shamir’s Secret Sharing scheme
: * Random numbers get sourced directly from the OS (and not from a
: CSPRNG in userspace)
: * Cleaner RSA and DSA key generation (largely based on FIPS 186-4)
: * Major clean ups and simplification of the code base
:
: PyCryptodome is not a wrapper to a separate C library like
: OpenSSL. To the largest possible extent, algorithms are
: implemented in pure Python. Only the pieces that are extremely
: critical to performance (e.g. block ciphers) are implemented as C
: extensions.
:
: Python 2 version.
