[GH-ISSUE #3038] dig fails on Ubuntu 16.04 LTS, possibly others #1905

New issue

Closed

opened 2026-05-05 08:34:20 -06:00 by gitea-mirror · 0 comments

gitea-mirror commented

2026-05-05 08:34:20 -06:00

Owner

Originally created by @ghost on GitHub (Nov 11, 2019).
Original GitHub issue: https://github.com/netblue30/firejail/issues/3038

On Arch Linux:

$ firejail --dns=127.0.0.1 dig raw.githubusercontent.com

; <<>> DiG 9.14.7 <<>> raw.githubusercontent.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 39454
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1252
;; QUESTION SECTION:
;raw.githubusercontent.com.	IN	A

;; ANSWER SECTION:
raw.githubusercontent.com. 60	IN	CNAME	github.map.fastly.net.
github.map.fastly.net.	60	IN	A	151.101.36.133

;; Query time: 516 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Mon Nov 11 19:48:37 CET 2019
;; MSG SIZE  rcvd: 105

On Ubuntu 16.04 LTS:

$ firejail --dns=127.0.0.1 dig raw.githubusercontent.com
11-Nov-2019 19:50:26.742 ENGINE_by_id failed (crypto failure)
11-Nov-2019 19:50:26.743 error:25070067:DSO support routines:DSO_load:could not load the shared library:dso_lib.c:233:
11-Nov-2019 19:50:26.743 error:260B6084:engine routines:DYNAMIC_LOAD:dso not found:eng_dyn.c:467:
11-Nov-2019 19:50:26.743 error:2606A074:engine routines:ENGINE_by_id:no such engine:eng_list.c:390:id=gost
/usr/bin/dig: dst_lib_init: crypto failure

Problem seems to be related to private-lib, ignoring it fixes the issue:

$ firejail --dns=127.0.0.1 --ignore=private-lib dig raw.githubusercontent.com

; <<>> DiG 9.10.3-P4-Ubuntu <<>> raw.githubusercontent.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 5079
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1252
;; QUESTION SECTION:
;raw.githubusercontent.com.	IN	A

;; ANSWER SECTION:
raw.githubusercontent.com. 60	IN	CNAME	github.map.fastly.net.
github.map.fastly.net.	60	IN	A	151.101.36.133

;; Query time: 516 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Mon Nov 11 19:48:37 CET 2019
;; MSG SIZE  rcvd: 105

Originally created by @ghost on GitHub (Nov 11, 2019). Original GitHub issue: https://github.com/netblue30/firejail/issues/3038 On Arch Linux: ``` $ firejail --dns=127.0.0.1 dig raw.githubusercontent.com ; <<>> DiG 9.14.7 <<>> raw.githubusercontent.com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 39454 ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1252 ;; QUESTION SECTION: ;raw.githubusercontent.com. IN A ;; ANSWER SECTION: raw.githubusercontent.com. 60 IN CNAME github.map.fastly.net. github.map.fastly.net. 60 IN A 151.101.36.133 ;; Query time: 516 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Mon Nov 11 19:48:37 CET 2019 ;; MSG SIZE rcvd: 105 ``` On Ubuntu 16.04 LTS: ``` $ firejail --dns=127.0.0.1 dig raw.githubusercontent.com 11-Nov-2019 19:50:26.742 ENGINE_by_id failed (crypto failure) 11-Nov-2019 19:50:26.743 error:25070067:DSO support routines:DSO_load:could not load the shared library:dso_lib.c:233: 11-Nov-2019 19:50:26.743 error:260B6084:engine routines:DYNAMIC_LOAD:dso not found:eng_dyn.c:467: 11-Nov-2019 19:50:26.743 error:2606A074:engine routines:ENGINE_by_id:no such engine:eng_list.c:390:id=gost /usr/bin/dig: dst_lib_init: crypto failure ``` Problem seems to be related to `private-lib`, ignoring it fixes the issue: ``` $ firejail --dns=127.0.0.1 --ignore=private-lib dig raw.githubusercontent.com ; <<>> DiG 9.10.3-P4-Ubuntu <<>> raw.githubusercontent.com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 5079 ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1252 ;; QUESTION SECTION: ;raw.githubusercontent.com. IN A ;; ANSWER SECTION: raw.githubusercontent.com. 60 IN CNAME github.map.fastly.net. github.map.fastly.net. 60 IN A 151.101.36.133 ;; Query time: 516 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Mon Nov 11 19:48:37 CET 2019 ;; MSG SIZE rcvd: 105 ```

gitea-mirror

2026-05-05 08:34:20 -06:00

closed this issue
added the
bug
label

gitea-mirror referenced this issue

2026-05-05 10:14:07 -06:00

[PR #1905] [MERGED] typo in disable-common.inc #4120

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1905

No description provided.

Rows
Columns