oflebbe edited a comment on pull request #643:
URL: https://github.com/apache/bigtop/pull/643#issuecomment-639044461


   Ok found out what's the root cause. logstash is using jruby. jruby depends 
on jnr-posix . jnr-posix for some reasons is tied to load libcrypt.so.1 
   
https://github.com/jnr/jnr-posix/blob/acbaf0fe6dd3667a125a77bc690a64ec250a49f5/src/main/java/jnr/posix/POSIXFactory.java#L315
   However Fedora considers some of the interfaces of the libcrypt insecure 
since it is tied to the DES algorithm, which is considered insecure today.  
   
https://fedoraproject.org/wiki/Changes/FullyRemoveDeprecatedAndUnsafeFunctionsFromLibcrypt#Detailed_Description
   However libcrypt's crypt() seems the only function used 
   
https://github.com/jnr/jnr-posix/blob/9f86fd649cf01ff22c7b8ccf17c1bf9590c6be23/src/main/java/jnr/posix/BaseNativePOSIX.java#L96
   This function crypt() seems no to be deprecated.
   To summarize: the workaround libxcrypt-compat is perfectly ok. And the 
source explains why Debian works as well.
   So +1 from me


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to