mold icon indicating copy to clipboard operation
mold copied to clipboard

Binary linked with mold 2.40.4 fails SSL+Kerberos test

Open MikaelSmith opened this issue 2 months ago • 3 comments

The Impala project is trying to switch to linking with mold. IMPALA-14527 notes our attempt to use mold 2.40.4 to build our project.

We ran into a failure that appears across our tests using SSL with Kerberos. The simplest example is https://github.com/apache/impala/blob/master/be/src/rpc/thrift-server-test.cc#L221 in ThriftKerberizedParamsTest.SslConnectivity. With our default linker (gold), the test passes. With mold, it fails to establish a connection with

Error: Couldn't open transport for localhost:62955 (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.  Minor code may provide more information (Server krbtgt/[email protected] not found in Kerberos database))

We've encountered this on both x86_64 Ubuntu 20.04 and aarch64 Ubuntu 24.04 builds.

Any suggestions on tracking down why? I've done objdump -x of each binary, but not sure what to look at to narrow down the cause. The output compresses to 2MB each, so I could upload them if that helps.

MikaelSmith avatar Nov 06 '25 19:11 MikaelSmith

I’m having a hard time reproducing the issue. I’m completely new to Apache Impala, and it's not easy to figure out how to build it and run its tests. Would you mind writing a minimal Dockerfile to reproduce the failure?

rui314 avatar Nov 07 '25 01:11 rui314

I should be able to simplify it, I'll see if I can put something together this afternoon.

MikaelSmith avatar Nov 07 '25 22:11 MikaelSmith

I tried creating a reproduction from scratch and don't see the problem. So probably has to do with how large the test binary is. I'll try some ideas to make it a bit more self-contained.

MikaelSmith avatar Nov 13 '25 01:11 MikaelSmith