Skip to content

Disable aws-lc-sys jitter entropy to avoid startup SIGABRT #6776

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
blp merged 1 commit into from
Jul 31, 2026
Merged

Disable aws-lc-sys jitter entropy to avoid startup SIGABRT #6776

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 9 additions & 0 deletions .cargo/config.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,3 +6,12 @@
# - Also note that we can't change the major version without making sure
# the database directories in ~/.feldera for users get upgraded too.
POSTGRESQL_VERSION = "=15.13.0"

# aws-lc-sys's CPU Jitter Entropy source can fail its startup health check on
# freshly-started VMs/containers (timing jitter too regular in the first
# seconds of process life), which aws-lc treats as fatal and aborts with no
# stderr output. This disables jitter entropy at build time, leaving
# getrandom(2) as the sole (and still sound) entropy source.
# See https://github.com/feldera/cloud/issues/1845 and
# https://github.com/aws/aws-lc-rs/issues/1072
AWS_LC_SYS_NO_JITTER_ENTROPY = "1"
6 changes: 6 additions & 0 deletions crates/pipeline-manager/src/compiler/rust_compiler.rs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1590,6 +1590,12 @@ async fn call_compiler(
// Set compiler stack size to 20MB (10x the default) to prevent
// SIGSEGV when the compiler runs out of stack on large programs.
.env("RUST_MIN_STACK", "20971520")
// aws-lc-sys's CPU Jitter Entropy source can fail its startup health
// check on freshly-started VMs/containers and aborts the whole
// process with no stderr output (see feldera/cloud#1845). This env
// var must be set for this build too, since it links the pipeline
// binary that hits the abort, not just the pipeline-manager binary.
.env("AWS_LC_SYS_NO_JITTER_ENTROPY", "1")
.current_dir(&workspace_dir)
.arg("build")
.arg("--workspace")
Expand Down
Loading