This is an automated email from the ASF dual-hosted git repository.
snuyanzin pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/flink.git
The following commit(s) were added to refs/heads/master by this push:
new ce373fe8b9e [hotfix][ci] Remove obsolete libssl download for e2e
netty-tcnative on Ubuntu 26.04
ce373fe8b9e is described below
commit ce373fe8b9e4131a0d756b739449e410318a74b5
Author: Sergey Nuyanzin <[email protected]>
AuthorDate: Tue Nov 3 22:42:33 2026 +0100
[hotfix][ci] Remove obsolete libssl download for e2e netty-tcnative on
Ubuntu 26.04
---
flink-end-to-end-tests/test-scripts/common_ssl.sh | 5 -----
tools/azure-pipelines/e2e-template.yml | 15 ---------------
2 files changed, 20 deletions(-)
diff --git a/flink-end-to-end-tests/test-scripts/common_ssl.sh
b/flink-end-to-end-tests/test-scripts/common_ssl.sh
index 2f8215c0f39..aa1f3c7b629 100644
--- a/flink-end-to-end-tests/test-scripts/common_ssl.sh
+++ b/flink-end-to-end-tests/test-scripts/common_ssl.sh
@@ -79,11 +79,6 @@ function _set_conf_ssl_helper {
if [ "${provider}" = "OPENSSL" -a "${provider_lib}" = "dynamic" ]; then
cp $FLINK_DIR/opt/flink-shaded-netty-tcnative-dynamic-*.jar
$FLINK_DIR/lib/
- # if the CI prepared a newer OpenSSL than the system one (see
e2e-template.yml), prefer it;
- # local/developer runs without that variable set keep using the system
OpenSSL as before
- if [ -n "${FLINK_E2E_OPENSSL32_LIB:-}" ]; then
- export
LD_LIBRARY_PATH="${FLINK_E2E_OPENSSL32_LIB}${LD_LIBRARY_PATH:+:${LD_LIBRARY_PATH}}"
- fi
elif [ "${provider}" = "OPENSSL" -a "${provider_lib}" = "static" ]; then
# Flink is not providing the statically-linked library because of
potential licensing issues
# -> we need to build it ourselves
diff --git a/tools/azure-pipelines/e2e-template.yml
b/tools/azure-pipelines/e2e-template.yml
index 171af6ecb81..7f5e504cb7b 100644
--- a/tools/azure-pipelines/e2e-template.yml
+++ b/tools/azure-pipelines/e2e-template.yml
@@ -147,21 +147,6 @@ jobs:
echo "Installing required software for netty-tcnative"
sudo apt-get install -y bc libapr1
-
- # flink-shaded-netty-tcnative-dynamic links against OpenSSL symbols
newer than what this
- # Ubuntu release ships (system libssl.so.3 lacks OPENSSL_3.2.0). Per
netty's own guidance
- # for this exact case (http://netty.io/wiki/forked-tomcat-native.html:
"If your Linux
- # distro's package manager doesn't provide a new enough OpenSSL, you
will need to compile
- # it by your own and set the LD_LIBRARY_PATH"), fetch a newer prebuilt
libssl/libcrypto
- # into a private directory instead of replacing the system package, so
the rest of this
- # job keeps using the OS's own OpenSSL.
- FLINK_E2E_OPENSSL32_LIB="$(pwd)/openssl32-lib"
- mkdir -p "${FLINK_E2E_OPENSSL32_LIB}"
- wget -q -O /tmp/libssl3t64.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl3t64_3.5.5-1ubuntu3.5_amd64.deb
- dpkg-deb -x /tmp/libssl3t64.deb /tmp/libssl3t64-extracted
- cp /tmp/libssl3t64-extracted/usr/lib/x86_64-linux-gnu/libssl.so.3
/tmp/libssl3t64-extracted/usr/lib/x86_64-linux-gnu/libcrypto.so.3
"${FLINK_E2E_OPENSSL32_LIB}/"
- rm -rf /tmp/libssl3t64.deb /tmp/libssl3t64-extracted
- echo "##vso[task.setvariable
variable=FLINK_E2E_OPENSSL32_LIB]${FLINK_E2E_OPENSSL32_LIB}"
displayName: Prepare E2E run
condition: not(eq(variables['SKIP'], '1'))
# e2e only needs the built binary; MVN_LICENSE_CHECK_ARGS="" skips all QA
(convergence, license, structural) and the DEBUG shade logging, which run in
the license_check job.
