New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Unable to install MRI Rubies on RHEL 6 (missing libyaml-devel) #3175
Conversation
Looks like CVE-2014-9130[1] prompted them to drop the EPEL 6 version of libyaml, and -devel went along with it[2]. Supposedly RHEL 6.6 now includes the libyaml library so this may be fixed by an OS update. |
@nickveys can you try to update? I really don't get epel maintainers. |
Yeah it seems to undermine the stability of that repo for sure. I'll update as soon as I get a chance to run through the installation process on an updated RHEL 6.6 install. Ideally tomorrow. |
Ok, it seems like it's truly gone. There is a source RPM in the RHEL 6 SRPMS repo, but it's v0.1.3 from April 2014, there are at least two CVE's against that I thought. One could build the RPMs from the SRPM, then install libyaml and libyaml-devel, but that seems more messy than just adding RHEL 6 to the list of OSs to build libyaml from scratch, does it not? I tried applying the following patch:
It will get the libyaml library to build in the /usr/local/rvm/usr/lib, but again, psych can't see it during the RubyGems installation (see previous comment). There is one apparent error during the process:
Looking into it, it's happening in Anything I can try? |
ok created branch with your changes, you can get it with: rvm get branch /bugfix/compile_yaml_on_redhat_6_gh_3175 and test it with: rvm install 2.1.2 |
Fantastic, this builds successfully and I can run |
merged to master => |
We've been successfully using rvm on an un-changed RHEL 6 image, even up until a couple of days ago. Now, provisioning a new instance of it, installations fail with this:
Looking at the EPEL repos, it looks like the
libyaml-devel
package is gone. Finding a couple stale repos that probably haven't synced yet, it's still out there, but any current one it's missing. So either they removed it or someone messed up and the mistake got propagated. I can't find mention of it anywhere.I saw in #2998 that RHEL 7 is also missing this library, so I extended the fix from 4538416 to apply to RHEL 6 as well, and the libyaml will install, along with the desired Ruby (2.1.2 in my case), but a RubyGems install step of some kind fails saying
psych.so
can't findlibyaml.so
, I'm guessing I have something missing in my library path?Any advice? Is this an upstream thing?
Thanks!