curl symbol lookup

[g-linville]

I noticed a problem in the cgr.dev/chainguard/postgres:latest-dev image today. If you launch the container and run apk add curl, any curl command will fail with the error curl: symbol lookup error: curl: undefined symbol: curl_easy_ssls_export. I did not notice this behavior until this morning.

If there is a better place to report this as a bug, please let me know. Not a bug.

More details:

I'm running into this specific issue on aarch64. Here is the list of installed packages (apk list -I):

apk-tools-2.14.4-r2 aarch64 {apk-tools} (GPL-2.0-only) [installed]
bash-5.2.37-r2 aarch64 {bash} (GPL-3.0-or-later) [installed]
busybox-1.37.0-r0 aarch64 {busybox} (GPL-2.0-only) [installed]
ca-certificates-bundle-20241121-r1 aarch64 {ca-certificates} (MPL-2.0 AND MIT) [installed]
curl-8.12.0-r0 aarch64 {curl} (MIT) [installed]
cyrus-sasl-2.1.28-r5 aarch64 {cyrus-sasl} (BSD-3-Clause) [installed]
gdbm-1.24-r2 aarch64 {gdbm} (GPL-3.0-or-later) [installed]
git-2.48.1-r0 aarch64 {git} (GPL-2.0-or-later) [installed]
glibc-2.40-r8 aarch64 {glibc} (LGPL-2.1-or-later) [installed]
glibc-locale-en-2.40-r8 aarch64 {glibc} (LGPL-2.1-or-later) [installed]
glibc-locale-posix-2.40-r8 aarch64 {glibc} (LGPL-2.1-or-later) [installed]
gosu-1.17-r10 aarch64 {gosu} (Apache-2.0) [installed]
heimdal-libs-7.8.0-r7 aarch64 {heimdal} (BSD-3-Clause) [installed]
icu-data-full-75.1-r6 aarch64 {icu} (MIT) [installed]
icu-libs-75.1-r6 aarch64 {icu} (MIT) [installed]
keyutils-libs-1.6.3-r5 aarch64 {keyutils} (GPL-2.0-or-later OR LGPL-2.0-or-later) [installed]
krb5-conf-1.0-r3 aarch64 {krb5-conf} (MIT) [installed]
krb5-libs-1.21.3-r2 aarch64 {krb5} (MIT) [installed]
ld-linux-2.40-r8 aarch64 {glibc} (LGPL-2.1-or-later) [installed]
libbrotlicommon1-1.1.0-r4 aarch64 {brotli} (MIT) [installed]
libbrotlidec1-1.1.0-r4 aarch64 {brotli} (MIT) [installed]
libcom_err-1.47.2-r0 aarch64 {e2fsprogs} (GPL-2.0-or-later AND LGPL-2.0-or-later AND BSD-3-Clause AND MIT) [installed]
libcrypt1-2.40-r8 aarch64 {glibc} (LGPL-2.1-or-later) [installed]
libcrypto3-3.4.0-r6 aarch64 {openssl} (Apache-2.0) [installed]
libcurl-openssl4-8.11.1-r0 aarch64 {curl} (MIT) [installed]
libedit-3.1-r5 aarch64 {libedit} (BSD-3-Clause) [installed]
libevent-2.1.12-r6 aarch64 {libevent} (BSD-3-Clause) [installed]
libexpat1-2.6.4-r1 aarch64 {expat} (MIT) [installed]
libgcc-14.2.0-r8 aarch64 {gcc} (GPL-3.0-or-later WITH GCC-exception-3.1) [installed]
libidn2-2.3.7-r3 aarch64 {libidn2} (GPL-2.0-or-later AND LGPL-3.0-or-later) [installed]
libldap-2.6.9-r0 aarch64 {openldap} (OLDAP-2.8) [installed]
libnghttp2-14-1.64.0-r1 aarch64 {nghttp2} (MIT) [installed]
libpcre2-8-0-10.44-r2 aarch64 {pcre2} (BSD-3-Clause) [installed]
libpq-17-17.2-r2 aarch64 {postgresql-17} (BSD-3-Clause) [installed]
libpsl-0.21.5-r4 aarch64 {libpsl} (MIT) [installed]
libssl3-3.4.0-r6 aarch64 {openssl} (Apache-2.0) [installed]
libstdc++-14.2.0-r8 aarch64 {gcc} (GPL-3.0-or-later WITH GCC-exception-3.1) [installed]
libunistring-1.3-r1 aarch64 {libunistring} (GPL-2.0-or-later OR LGPL-3.0-or-later) [installed]
libuuid-2.40.4-r0 aarch64 {util-linux} (GPL-3.0-or-later AND GPL-2.0-or-later AND GPL-2.0-only AND GPL-1.0-only AND LGPL-2.1-or-later AND BSD-1-Clause AND BSD-3-Clause AND BSD-4-Clause-UC AND MIT AND CC-PDDC) [installed]
libverto-0.3.2-r4 aarch64 {libverto} (MIT) [installed]
libxcrypt-4.4.38-r0 aarch64 {libxcrypt} (GPL-2.0-or-later AND LGPL-2.1-or-later) [installed]
libxml2-2.13.5-r0 aarch64 {libxml2} (MIT) [installed]
ncurses-6.5_p20241228-r0 aarch64 {ncurses} (MIT) [installed]
ncurses-terminfo-base-6.5_p20241228-r0 aarch64 {ncurses} (MIT) [installed]
pgaudit-17-17.0-r0 aarch64 {pgaudit-17} (BSD-3-Clause) [installed]
posix-libc-utils-2.40-r8 aarch64 {glibc} (LGPL-2.1-or-later) [installed]
postgresql-17-17.2-r2 aarch64 {postgresql-17} (BSD-3-Clause) [installed]
postgresql-17-base-17.2-r2 aarch64 {postgresql-17} (BSD-3-Clause) [installed]
postgresql-17-client-17.2-r2 aarch64 {postgresql-17} (BSD-3-Clause) [installed]
postgresql-17-client-base-17.2-r2 aarch64 {postgresql-17} (BSD-3-Clause) [installed]
postgresql-17-contrib-17.2-r2 aarch64 {postgresql-17} (BSD-3-Clause) [installed]
postgresql-17-oci-entrypoint-17.2-r2 aarch64 {postgresql-17} (BSD-3-Clause) [installed]
postgresql-17-oci-entrypoint-base-17.2-r2 aarch64 {postgresql-17} (BSD-3-Clause) [installed]
readline-8.2.13-r1 aarch64 {readline} (GPL-3.0-or-later) [installed]
sqlite-libs-3.48.0-r0 aarch64 {sqlite} (blessing) [installed]
wget-1.25.0-r0 aarch64 {wget} (MPL-2.0 AND MIT) [installed]
wolfi-baselayout-20230201-r16 aarch64 {wolfi-baselayout} (MIT) [installed]
xz-5.6.4-r0 aarch64 {xz} (GPL-3.0-or-later) [installed]
zlib-1.3.1-r5 aarch64 {zlib} (MPL-2.0 AND MIT) [installed]

[xnox]

Please upgrade all packages, as you cannot have library & utility of different major versions:

sed -i 's|=.*||' /etc/apk/world
apk upgrade --all
apk add curl

Currently 32% of images have been rebuilt with the new libcurl version & abi, but not 100% thus many images are affected.

Separately, we are affected by throttling of trying to rebuild the full catalog and upgrade all images.

[g-linville]

Thank you, this fixed it!

[dannf]

Note that the answer that may be seemingly obvious to some readers is, in unfortunately, not that simple:
#41405