dotnet / dotnet/dotnet-docker

Strong naming signing fails on Azure Linux 4.0

Open
#7,296 6 comments 0 reactions 0 assignees View on GitHub
area-dockerfiles
Dominant language
Dockerfile
Stars
4.9k
Forks
2k
Avg merge
1d 14h
Merged PRs (30d)
26

Description

### Describe the bug

After #7288 was fixed, I updated two test jobs with have in the OpenTelemetry .NET SDK that use Azure Linux to use the new Azure Linux 4.0 images: https://github.com/open-telemetry/opentelemetry-dotnet/pull/6899/commits/0ae525b09c23054f6cff6f78bdbde16ef9ba5247.

These jobs fail with the following [error](https://github.com/open-telemetry/opentelemetry-dotnet/actions/runs/29854974727/job/88717161871?pr=6899#step:3:211):

```text
#14 5.048 /usr/share/dotnet/sdk/11.0.100-preview.6.26359.118/Sdks/Microsoft.NET.Sdk/targets/Microsoft.NET.RuntimeIdentifierInference.targets(385,5): message NETSDK1057: You are using a preview version of .NET. See: https://aka.ms/dotnet-support-policy [/repo/test/OpenTelemetry.Instrumentation.W3cTraceContext.Tests/OpenTelemetry.Instrumentation.W3cTraceContext.Tests.csproj::TargetFramework=net10.0]
#14 6.194 /usr/share/dotnet/sdk/11.0.100-preview.6.26359.118/Sdks/Microsoft.NET.Sdk/targets/Microsoft.NET.RuntimeIdentifierInference.targets(385,5): message NETSDK1057: You are using a preview version of .NET. See: https://aka.ms/dotnet-support-policy [/repo/src/OpenTelemetry.Api/OpenTelemetry.Api.csproj::TargetFramework=net10.0]
#14 19.97 /usr/share/dotnet/sdk/11.0.100-preview.6.26359.118/Roslyn/Microsoft.CSharp.Core.targets(97,5): error : Unhandled exception. Interop+Crypto+OpenSslCryptographicException: error:03000098:digital envelope routines::invalid digest [/repo/src/OpenTelemetry.Api/OpenTelemetry.Api.csproj::TargetFramework=net10.0]
#14 19.97 /usr/share/dotnet/sdk/11.0.100-preview.6.26359.118/Roslyn/Microsoft.CSharp.Core.targets(97,5): error : at Interop.Crypto.RsaSignHash(SafeEvpPKeyHandle pkey, RSASignaturePaddingMode paddingMode, HashAlgorithmName digestAlgorithm, ReadOnlySpan`1 hash, Span`1 destination) [/repo/src/OpenTelemetry.Api/OpenTelemetry.Api.csproj::TargetFramework=net10.0]
#14 19.97 /usr/share/dotnet/sdk/11.0.100-preview.6.26359.118/Roslyn/Microsoft.CSharp.Core.targets(97,5): error : at System.Security.Cryptography.RSAOpenSsl.SignHash(Byte[] hash, HashAlgorithmName hashAlgorithm, RSASignaturePadding padding) [/repo/src/OpenTelemetry.Api/OpenTelemetry.Api.csproj::TargetFramework=net10.0]
#14 19.97 /usr/share/dotnet/sdk/11.0.100-preview.6.26359.118/Roslyn/Microsoft.CSharp.Core.targets(97,5): error : at Microsoft.CodeAnalysis.SigningUtilities.CalculateRsaSignature(IEnumerable`1 content, RSAParameters privateKey) [/repo/src/OpenTelemetry.Api/OpenTelemetry.Api.csproj::TargetFramework=net10.0]
#14 19.97 /usr/share/dotnet/sdk/11.0.100-preview.6.26359.118/Roslyn/Microsoft.CSharp.Core.targets(97,5): error : at Microsoft.CodeAnalysis.DesktopStrongNameProvider.<>c__DisplayClass12_0.b__0(IEnumerable`1 content) [/repo/src/OpenTelemetry.Api/OpenTelemetry.Api.csproj::TargetFramework=net10.0]
#14 19.97 /usr/share/dotnet/sdk/11.0.100-preview.6.26359.118/Roslyn/Microsoft.CSharp.Core.targets(97,5): error : at System.Reflection.PortableExecutable.PEBuilder.Sign(BlobBuilder peImage, Blob strongNameSignatureFixup, Func`2 signatureProvider) [/repo/src/OpenTelemetry.Api/OpenTelemetry.Api.csproj::TargetFramework=net10.0]
#14 19.97 /usr/share/dotnet/sdk/11.0.100-preview.6.26359.118/Roslyn/Microsoft.CSharp.Core.targets(97,5): error : at Microsoft.Cci.PeWriter.WritePeToStream(EmitContext context, CommonMessageProvider messageProvider, Func`1 getPeStream, Func`1 getPortablePdbStreamOpt, PdbWriter nativePdbWriterOpt, String pdbPathOpt, Boolean metadataOnly, Boolean isDeterministic, Boolean emitTestCoverageData, Nullable`1 privateKeyOpt, CancellationToken cancellationToken) [/repo/src/OpenTelemetry.Api/OpenTelemetry.Api.csproj::TargetFramework=net10.0]
#14 19.97 /usr/share/dotnet/sdk/11.0.100-preview.6.26359.118/Roslyn/Microsoft.CSharp.Core.targets(97,5): error : at Microsoft.CodeAnalysis.Compilation.SerializePeToStream(CommonPEModuleBuilder moduleBeingBuilt, DiagnosticBag metadataDiagnostics, CommonMessageProvider messageProvider, Func`1 getPeStream, Func`1 getMetadataPeStreamOpt, Func`1 getPortablePdbStreamOpt, PdbWriter nativePdbWriterOpt, String pdbPathOpt, RebuildData rebuildData, Boolean metadataOnly, Boolean includePrivateMembers, Boolean isDeterministic, Boolean emitTestCoverageData, Nullable`1 privateKeyOpt, CancellationToken cancellationToken) [/repo/src/OpenTelemetry.Api/OpenTelemetry.Api.csproj::TargetFramework=net10.0]
#14 19.97 /usr/share/dotnet/sdk/11.0.100-preview.6.26359.118/Roslyn/Microsoft.CSharp.Core.targets(97,5): error : at Microsoft.CodeAnalysis.Compilation.SerializeToPeStream(CommonPEModuleBuilder moduleBeingBuilt, EmitStreamProvider peStreamProvider, EmitStreamProvider metadataPEStreamProvider, EmitStreamProvider pdbStreamProvider, RebuildData rebuildData, Func`2 testSymWriterFactory, DiagnosticBag diagnostics, EmitOptions emitOptions, Nullable`1 privateKeyOpt, CancellationToken cancellationToken) [/repo/src/OpenTelemetry.Api/OpenTelemetry.Api.csproj::TargetFramework=net10.0]
#14 19.97 /usr/share/dotnet/sdk/11.0.100-preview.6.26359.118/Roslyn/Microsoft.CSharp.Core.targets(97,5): error : at Microsoft.CodeAnalysis.CommonCompiler.CompileAndEmit(TouchedFileLogger touchedFilesLogger, Compilation& compilation, ImmutableArray`1 analyzers, ImmutableArray`1 generators, ImmutableArray`1 additionalTextFiles, AnalyzerConfigSet analyzerConfigSet, ImmutableArray`1 sourceFileAnalyzerConfigOptions, ImmutableArray`1 embeddedTexts, DiagnosticBag diagnostics, ErrorLogger errorLogger, CancellationToken cancellationToken, CancellationTokenSource& analyzerCts, AnalyzerDriver& analyzerDriver, Nullable`1& generatorTimingInfo) [/repo/src/OpenTelemetry.Api/OpenTelemetry.Api.csproj::TargetFramework=net10.0]
#14 19.97 /usr/share/dotnet/sdk/11.0.100-preview.6.26359.118/Roslyn/Microsoft.CSharp.Core.targets(97,5): error : at Microsoft.CodeAnalysis.CommonCompiler.g__compileAndReport|73_0(<>c__DisplayClass73_0&) [/repo/src/OpenTelemetry.Api/OpenTelemetry.Api.csproj::TargetFramework=net10.0]
#14 19.97 /usr/share/dotnet/sdk/11.0.100-preview.6.26359.118/Roslyn/Microsoft.CSharp.Core.targets(97,5): error : at Microsoft.CodeAnalysis.CommonCompiler.RunCore(TextWriter consoleOutput, ErrorLogger errorLogger, CancellationToken cancellationToken) [/repo/src/OpenTelemetry.Api/OpenTelemetry.Api.csproj::TargetFramework=net10.0]
#14 19.97 /usr/share/dotnet/sdk/11.0.100-preview.6.26359.118/Roslyn/Microsoft.CSharp.Core.targets(97,5): error : at Microsoft.CodeAnalysis.CommonCompiler.Run(TextWriter consoleOutput, CancellationToken cancellationToken) [/repo/src/OpenTelemetry.Api/OpenTelemetry.Api.csproj::TargetFramework=net10.0]
#14 19.97 /usr/share/dotnet/sdk/11.0.100-preview.6.26359.118/Roslyn/Microsoft.CSharp.Core.targets(97,5): error : at Microsoft.CodeAnalysis.CSharp.CommandLine.Csc.Run(String[] args, BuildPaths buildPaths, TextWriter textWriter, IAnalyzerAssemblyLoader analyzerLoader) [/repo/src/OpenTelemetry.Api/OpenTelemetry.Api.csproj::TargetFramework=net10.0]
#14 19.97 /usr/share/dotnet/sdk/11.0.100-preview.6.26359.118/Roslyn/Microsoft.CSharp.Core.targets(97,5): error : at Microsoft.CodeAnalysis.CommandLine.BuildClient.RunCompilation(IEnumerable`1 originalArguments, BuildPaths buildPaths, TextWriter textWriter, String pipeName) [/repo/src/OpenTelemetry.Api/OpenTelemetry.Api.csproj::TargetFramework=net10.0]
#14 19.97 /usr/share/dotnet/sdk/11.0.100-preview.6.26359.118/Roslyn/Microsoft.CSharp.Core.targets(97,5): error : at Microsoft.CodeAnalysis.CommandLine.BuildClient.Run(IEnumerable`1 arguments, RequestLanguage language, CompileFunc compileFunc, CompileOnServerFunc compileOnServerFunc, ICompilerServerLogger logger) [/repo/src/OpenTelemetry.Api/OpenTelemetry.Api.csproj::TargetFramework=net10.0]
#14 19.97 /usr/share/dotnet/sdk/11.0.100-preview.6.26359.118/Roslyn/Microsoft.CSharp.Core.targets(97,5): error : at Microsoft.CodeAnalysis.CSharp.CommandLine.Program.MainCore(String[] args) [/repo/src/OpenTelemetry.Api/OpenTelemetry.Api.csproj::TargetFramework=net10.0]
#14 19.97 /usr/share/dotnet/sdk/11.0.100-preview.6.26359.118/Roslyn/Microsoft.CSharp.Core.targets(97,5): error : at Microsoft.CodeAnalysis.CSharp.CommandLine.Program.Main(String[] args) [/repo/src/OpenTelemetry.Api/OpenTelemetry.Api.csproj::TargetFramework=net10.0]
#14 ERROR: process "/bin/sh -c dotnet publish \"OpenTelemetry.Instrumentation.W3cTraceContext.Tests.csproj\" -c \"${PUBLISH_CONFIGURATION}\" -f \"${PUBLISH_FRAMEWORK}\" -o /drop -p:IntegrationBuild=true" did not complete successfully: exit code: 1
------
> [build 4/5] RUN dotnet publish "OpenTelemetry.Instrumentation.W3cTraceContext.Tests.csproj" -c "Release" -f "net10.0" -o /drop -p:IntegrationBuild=true:
19.97 /usr/share/dotnet/sdk/11.0.100-preview.6.26359.118/Roslyn/Microsoft.CSharp.Core.targets(97,5): error : at Microsoft.CodeAnalysis.Compilation.SerializeToPeStream(CommonPEModuleBuilder moduleBeingBuilt, EmitStreamProvider peStreamProvider, EmitStreamProvider metadataPEStreamProvider, EmitStreamProvider pdbStreamProvider, RebuildData rebuildData, Func`2 testSymWriterFactory, DiagnosticBag diagnostics, EmitOptions emitOptions, Nullable`1 privateKeyOpt, CancellationToken cancellationToken) [/repo/src/OpenTelemetry.Api/OpenTelemetry.Api.csproj::TargetFramework=net10.0]
19.97 /usr/share/dotnet/sdk/11.0.100-preview.6.26359.118/Roslyn/Microsoft.CSharp.Core.targets(97,5): error : at Microsoft.CodeAnalysis.CommonCompiler.CompileAndEmit(TouchedFileLogger touchedFilesLogger, Compilation& compilation, ImmutableArray`1 analyzers, ImmutableArray`1 generators, ImmutableArray`1 additionalTextFiles, AnalyzerConfigSet analyzerConfigSet, ImmutableArray`1 sourceFileAnalyzerConfigOptions, ImmutableArray`1 embeddedTexts, DiagnosticBag diagnostics, ErrorLogger errorLogger, CancellationToken cancellationToken, CancellationTokenSource& analyzerCts, AnalyzerDriver& analyzerDriver, Nullable`1& generatorTimingInfo) [/repo/src/OpenTelemetry.Api/OpenTelemetry.Api.csproj::TargetFramework=net10.0]
19.97 /usr/share/dotnet/sdk/11.0.100-preview.6.26359.118/Roslyn/Microsoft.CSharp.Core.targets(97,5): error : at Microsoft.CodeAnalysis.CommonCompiler.g__compileAndReport|73_0(<>c__DisplayClass73_0&) [/repo/src/OpenTelemetry.Api/OpenTelemetry.Api.csproj::TargetFramework=net10.0]
Dockerfile:21
```

It looks like some sort of image/OpenSSL configuration that forbids SHA-1?

### Which .NET image(s) are you using?

mcr.microsoft.com/dotnet/sdk:11.0.100-preview.6-azurelinux4.0@sha256:4fae6b560baea20005499293fcb98ce6cdfd682cf3121e6f618d4a52666454d0

### Steps to reproduce

1. Clone and checkout https://github.com/open-telemetry/opentelemetry-dotnet/pull/6899/commits/0ae525b09c23054f6cff6f78bdbde16ef9ba5247
2. Run `docker compose --file=test/OpenTelemetry.Instrumentation.W3cTraceContext.Tests/docker-compose.yml "--file=build/docker-compose.net11.0.yml" --project-directory=. up --exit-code-from=tests --build`

### Other information

_No response_

### Output of `docker version`

```console

```

### Output of `docker info`

```console

```

Contributor guide

Open the contributing guide

Research direction

Start with Dockerfile line 21 and the two compose files used in the reproduction, then run the listed docker compose command with the Azure Linux 4.0 SDK image. Trace the strong-name signing failure and verify the fix by making the net10.0 publish complete successfully in the W3C Trace Context tests.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker, linux
Domain
build-system, infrastructure
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.