Skip to content

[GLUTEN-8232][VL] Enable dynamic openssl lib in vcpkg packaging#11444

Draft
zhouyuan wants to merge 7 commits into
apache:mainfrom
zhouyuan:wip_openssl_dynamic
Draft

[GLUTEN-8232][VL] Enable dynamic openssl lib in vcpkg packaging#11444
zhouyuan wants to merge 7 commits into
apache:mainfrom
zhouyuan:wip_openssl_dynamic

Conversation

@zhouyuan
Copy link
Copy Markdown
Member

@zhouyuan zhouyuan commented Jan 19, 2026

What changes are proposed in this pull request?

This patch enabled dynamic openssl to include FIPS feature in vcpkg build

How was this patch tested?

pass GHA

Related issue: #8232

Signed-off-by: Yuan <yuanzhou@apache.org>
Signed-off-by: Yuan <yuanzhou@apache.org>
@zhouyuan zhouyuan force-pushed the wip_openssl_dynamic branch from ce8f244 to b55532a Compare January 19, 2026 14:35
@zhouyuan zhouyuan changed the title [GLUTEN-8232][VL] enable dynamic openssl in vcpkg [GLUTEN-8232][VL] Enable dynamic openssl lib in vcpkg packaging Jan 19, 2026
@zhouyuan zhouyuan requested a review from philo-he January 19, 2026 14:43
Signed-off-by: Yuan <yuanzhou@apache.org>
@zhouyuan zhouyuan force-pushed the wip_openssl_dynamic branch from 9febdcd to 5079457 Compare January 19, 2026 17:44
Copy link
Copy Markdown
Member

@philo-he philo-he left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Two comments. Please check if they make sense. Thanks.

run: |
docker pull apache/gluten:vcpkg-centos-7
docker run -v $GITHUB_WORKSPACE:/work -w /work apache/gluten:vcpkg-centos-7 bash -c "
docker pull apache/gluten:vcpkg-centos-9
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggest setting container field with centos 9 image, which is a standard way. I assume it's compatible with GHA checkout.

endif()

if(PORT STREQUAL "openssl")
set(VCPKG_LIBRARY_LINKAGE dynamic)
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can we use dynamic link only when FIPS is enabled?

My understanding is that FIPS is not a requirement for many users. Then, the current static link for openssl may be good for them.

Signed-off-by: Yuan <yuanzhou@apache.org>
@zhouyuan zhouyuan force-pushed the wip_openssl_dynamic branch from aabd20e to 2f47e7d Compare January 20, 2026 18:06
Signed-off-by: Yuan <yuanzhou@apache.org>
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Mar 7, 2026

This PR is stale because it has been open 45 days with no activity. Remove stale label or comment or this will be closed in 10 days.

@github-actions github-actions Bot added the stale stale label Mar 7, 2026
@github-actions
Copy link
Copy Markdown

This PR was auto-closed because it has been stalled for 10 days with no activity. Please feel free to reopen if it is still valid. Thanks.

@github-actions github-actions Bot closed this Mar 17, 2026
@FelixYBW
Copy link
Copy Markdown
Contributor

@zhouyuan @philo-he has a fix of #8293

@FelixYBW FelixYBW reopened this May 16, 2026
@github-actions github-actions Bot removed the stale stale label May 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants