Git.jl is having issues with version mismatch of OpenSSL_jll

[uncomfyhalomacro]

Initialized empty Git repository in /tmp/jl_307B6d/.git/
OpenSSL version mismatch. Built against 30100030, you have 300000c0
fatal: Could not read from remote repository.

See https://ci.codeberg.org/repos/12769/pipeline/51/4#L155

The OS image used here is openSUSE:Tumbleweed

[mortenpi]

Sigh... Git is such a headache.

Are you able to replicate by running something like

using Git
run(`$(Git.git()) init`)

by any chance? I assume it's an upstream issue, but would be good to have an MWE for Git.jl.

[mortenpi]

FWIW, Git_jll should be linking against the OpenSSL JLL, so not quite sure how the system's OpenSSL is getting involved here.

https://github.com/JuliaPackaging/Yggdrasil/blob/82b88b6bd25b047030d7f94b735cf7bfcafc2413/G/Git/build_tarballs.jl#L117

[uncomfyhalomacro]

FWIW, Git_jll should be linking against the OpenSSL JLL, so not quite sure how the system's OpenSSL is getting involved here.

https://github.com/JuliaPackaging/Yggdrasil/blob/82b88b6bd25b047030d7f94b735cf7bfcafc2413/G/Git/build_tarballs.jl#L117

Same. Hence, "probably". Running this on my local machine seems fine though.

using Git
run(`$(Git.git()) init`)

Do note I am using a temporary project environment.

[uncomfyhalomacro]

hmm doing the thing locally is reproducible

└ Deploying: ✔
hint: Using 'master' as the name for the initial branch. This default branch name
hint: is subject to change. To configure the initial branch name to use in all
hint: of your new repositories, which will suppress this warning, call:
hint: 
hint: 	git config --global init.defaultBranch <name>
hint: 
hint: Names commonly chosen instead of 'master' are 'main', 'trunk' and
hint: 'development'. The just-created branch can be renamed via this command:
hint: 
hint: 	git branch -m <name>
Initialized empty Git repository in /tmp/jl_dFGXjT/.git/
OpenSSL version mismatch. Built against 30100030, you have 300000c0
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.
┌ Error: Git failed to fetch git@codeberg.org:uncomfyhalomacro/Rudolf.jl.git
│ This can be caused by a DOCUMENTER_KEY variable that is not correctly set up.
│ Make sure that the environment variable is properly set up as a Base64-encoded string
│ of the SSH private key. You may need to re-generate the keys with DocumenterTools.

[uncomfyhalomacro]

I wonder if it's because the remote repository's host is using another version... https://stackoverflow.com/questions/24096069/openssl-version-mismatch-built-against-1000105f-you-have-10001080

Old but maybe still relevant

[mortenpi]

If you can't repro it with Git.git(), is there a repro for Documenter.git()?

Documenter.jl/src/utilities/utilities.jl

Lines 760 to 780 in 452057c

	function git(; nothrow = false, kwargs...)
	# DOCUMENTER_KEY etc are never needed for git operations
	cmd = addenv(Git.git(), NO_KEY_ENV)
	if Sys.iswindows()
	cmd = addenv(cmd,
	# For deploydocs() in particular, we need to use symlinks, but it looks like those
	# need to be explicitly force-enabled on Windows. So we make sure that we configure
	# core.symlinks=true via environment variables on that platform.
	"GIT_CONFIG_COUNT" => "1",
	"GIT_CONFIG_KEY_0" => "core.symlinks",
	"GIT_CONFIG_VALUE_0" => "true",
	# Previously we used to set GIT_TEMPLATE_DIR=/usr/share/git-core/templates on all platforms.
	# This was so that we wouldn't pick up the user's Git configuration. Git.jl, however, points
	# the GIT_TEMPLATE_DIR to the artifact directory, and so we're mostly fine without setting
	# now.. _except_ on Windows, where it doesn't set it. So we still set the environment variable
	# on Windows, just in case.
	"GIT_TEMPLATE_DIR" => "/usr/share/git-core/templates",
	)
	end
	return cmd
	end

[uncomfyhalomacro]

@mortenpi Using a debian-based image, specifically julia image, on my branch where I added OpenSSL_jll with compat 3.0.8

I will check the one using the branch that is used for the PR.

Reference: https://github.com/uncomfyhalomacro/Documenter.jl/tree/test-compat-openssl
CI: https://ci.codeberg.org/repos/12769/pipeline/61/4

[uncomfyhalomacro]

Using the branch used on this PR #2339 and using a julia (probably based on debian) image:

labels:
  platform: linux/amd64

when:
  event: [push, tag]
  branch:
    - main
    - dev

steps:
  test:
    image: julia
    commands:
      - echo "${CI_FORGE_URL}"
      - julia --project=. --startup-file=no --history-file=no -e "import Pkg; Pkg.test()"
  docs:
    when:
      branch:
        - main
    image: julia
    commands:
      - apt-get -y update
      - apt-get -y install openssh-server
      - julia --project=docs/ --startup-file=no --history-file=no -e "import Pkg; Pkg.instantiate()"
      - julia --project=docs/ --startup-file=no --history-file=no docs/make.jl
    secrets: [ documenter_key, project_access_token ]

The CI succeeded https://ci.codeberg.org/repos/12769/pipeline/63/4. I think this is not Documenter.jl bug but an OpenSSH bug. weird.

[uncomfyhalomacro]

If you can't repro it with Git.git(), is there a repro for Documenter.git()?

Documenter.jl/src/utilities/utilities.jl

Lines 760 to 780 in 452057c

	function git(; nothrow = false, kwargs...)
	# DOCUMENTER_KEY etc are never needed for git operations
	cmd = addenv(Git.git(), NO_KEY_ENV)
	if Sys.iswindows()
	cmd = addenv(cmd,
	# For deploydocs() in particular, we need to use symlinks, but it looks like those
	# need to be explicitly force-enabled on Windows. So we make sure that we configure
	# core.symlinks=true via environment variables on that platform.
	"GIT_CONFIG_COUNT" => "1",
	"GIT_CONFIG_KEY_0" => "core.symlinks",
	"GIT_CONFIG_VALUE_0" => "true",
	# Previously we used to set GIT_TEMPLATE_DIR=/usr/share/git-core/templates on all platforms.
	# This was so that we wouldn't pick up the user's Git configuration. Git.jl, however, points
	# the GIT_TEMPLATE_DIR to the artifact directory, and so we're mostly fine without setting
	# now.. _except_ on Windows, where it doesn't set it. So we still set the environment variable
	# on Windows, just in case.
	"GIT_TEMPLATE_DIR" => "/usr/share/git-core/templates",
	)
	end
	return cmd
	end

Running this on my openSUSE Tumbleweed machine seems fine

julia> run(`$(Documenter.git()) init`)
hint: Using 'master' as the name for the initial branch. This default branch name
hint: is subject to change. To configure the initial branch name to use in all
hint: of your new repositories, which will suppress this warning, call:
hint: 
hint: 	git config --global init.defaultBranch <name>
hint: 
hint: Names commonly chosen instead of 'master' are 'main', 'trunk' and
hint: 'development'. The just-created branch can be renamed via this command:
hint: 
hint: 	git branch -m <name>
Initialized empty Git repository in /run/host/home/uncomfy/.git/
Process(setenv(`/home/uncomfy/development/projects/.julia/artifacts/8cb25db9a73519e871cc50d6915f8ab2770096f3/bin/git init`,["PATH=/home/uncomfy/development/projects/.julia/artifacts/2bce74229f51de64c33433272240af5734619b33/bin:/home/uncomfy/development/projects/.julia/artifacts/ae704eae3dc4960eeba012795147a52e3420ddc9/bin:/home/uncomfy/development/projects/.julia/artifacts/8cb25db9a73519e871cc50d6915f8ab2770096f3/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/sbin:/home/uncomfy/.local/share/zinit/polaris/bin:/home/uncomfy/.local/bin:/home/uncomfy/bin", "ZYPP_MULTICURL=0", "EDITOR=kak", "CPU=x86_64", "ATUIN_HISTORY_ID=018c190d062c7b299948cb4c7b87f0a7", "DISTROBOX_HOST_HOME=/home/uncomfy", "JRE_HOME=/usr/lib64/jvm/java", "FROM_HEADER=", "G_FILENAME_ENCODING=@locale,UTF-8,ISO-8859-15,CP1252", "NO_AT_BRIDGE=1"  …  "MANROFFOPT=-c", "PYTHONSTARTUP=/etc/pythonstart", "MORE=-sl", "XCURSOR_PATH=/home/uncomfy/.icons:/usr/share/icons:/usr/share/pixmaps:/usr/X11R6/lib/X11/icons:~/.local/share/icons", "AUDIODRIVER=pulseaudio", "GIT_SSL_CAINFO=/home/uncomfy/development/projects/.julia/juliaup/julia-1.9.4+0.x64.linux.gnu/share/julia/cert.pem", "DISTROBOX_ENTER_PATH=/usr/bin/distrobox-enter", "JAVA_BINDIR=/usr/lib64/jvm/java/bin", "CONTAINER_ID=tumbleweed", "OPENBLAS_MAIN_FREE=1"]), ProcessExited(0))

[uncomfyhalomacro]

So switching from opensuse/tumbleweed image to julia image seems to fix it.

thoughts \cc @mortenpi for what might be the cause of failure?

[mortenpi]

Something is going wrong with linking the shared libraries to the Git_jll Git binary. But I think we already know that much. Can't really say much else without digging in.

For ease of debugging, I would check if this can be replicated with a vanilla tumbleweed Docker image, and also by just using either Documenter.git() or Git.git().