Binary linked with mold 2.40.4 fails SSL+Kerberos test

[MikaelSmith]

The Impala project is trying to switch to linking with mold. IMPALA-14527 notes our attempt to use mold 2.40.4 to build our project.

We ran into a failure that appears across our tests using SSL with Kerberos. The simplest example is https://github.com/apache/impala/blob/master/be/src/rpc/thrift-server-test.cc#L221 in ThriftKerberizedParamsTest.SslConnectivity. With our default linker (gold), the test passes. With mold, it fails to establish a connection with

Error: Couldn't open transport for localhost:62955 (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.  Minor code may provide more information (Server krbtgt/localhost@KRBTEST.COM not found in Kerberos database))

We've encountered this on both x86_64 Ubuntu 20.04 and aarch64 Ubuntu 24.04 builds.

Any suggestions on tracking down why? I've done objdump -x of each binary, but not sure what to look at to narrow down the cause. The output compresses to 2MB each, so I could upload them if that helps.

[rui314]

I’m having a hard time reproducing the issue. I’m completely new to Apache Impala, and it's not easy to figure out how to build it and run its tests. Would you mind writing a minimal Dockerfile to reproduce the failure?

[MikaelSmith]

I should be able to simplify it, I'll see if I can put something together this afternoon.

[MikaelSmith]

I tried creating a reproduction from scratch and don't see the problem. So probably has to do with how large the test binary is. I'll try some ideas to make it a bit more self-contained.