ERR_DLOPEN_FAILED for Sodium native

[Pfeifenjoy]

Prerequisites

• I have written a descriptive issue title
• I have searched existing issues to ensure the bug has not already been reported

Fastify version

5.2.1

Plugin version

8.1.0

Node.js version

22.13.1

Operating system

Linux

Operating system version (i.e. 20.04, 11.3, 10)

arch

Description

While importing the @fastify/secure-session plugin I get the following error:

Welcome to Node.js v22.13.1.                                                                                                                                                                  
Type ".help" for more information.                                                                                                                                                            
> require("@fastify/secure-session")                                                                                                                                                          
Uncaught:                                                                                                                                                                                     
Error: /home/<path to project>/node_modules/sodium-native/prebuilds/linux-x64/sodium-native.node: cannot enable executable stack as shared object requires: Invalid argument  
    at Object..node (node:internal/modules/cjs/loader:1725:18)                                                                                                                                
    at Module.load (node:internal/modules/cjs/loader:1313:32)                                                                                                                                 
    at Function._load (node:internal/modules/cjs/loader:1123:12)                                                                                                                              
    at TracingChannel.traceSync (node:diagnostics_channel:322:14)                                                                                                                             
    at wrapModuleLoad (node:internal/modules/cjs/loader:217:24)                                                                                                                               
    at Module.require (node:internal/modules/cjs/loader:1335:12)                                                                                                                              
    at require (node:internal/modules/helpers:136:16)                                                                                                                                         
    at load (/home/<path to project>/node_modules/node-gyp-build/node-gyp-build.js:22:10)                                                                                     
    at Object.<anonymous> (/home/<path to project>/node_modules/sodium-native/index.js:1:43) {                                                                                
  code: 'ERR_DLOPEN_FAILED'                                                                                                                                                                   
}

I guess this is a sodium-native bug but this package is required by @fastify/secure-session.

Link to code that reproduces the bug

---

Expected Behavior

No response

[mcollina]

Migh be related to holepunchto/sodium-native#202.

[mcollina]

Can you verify if #247 fixes it?

[Pfeifenjoy]

Thanks the PR solves it.

As a temporary fix I use this #247 (review)

Note that the PR is not merged it still uses the broken version: https://github.com/fastify/fastify-secure-session/blob/main/package.json#L77

Not sure how you want to deal with it, from my side I am ok with the work around of overwriting.

TBH I would not leave it though at the current expression ^4.0.10. Either it should be fixed for the lower version as in the PR or if there is a newer version that fixes it I would upgrade the dependency to be greater or equal to that version.

[mcollina]

I don't have a good solution atm. I think we would need to deprecate this module altogether and drop from the recommendations as sodium-native is not reliable long term.

[dennemark]

This caused me headaches...
Maybe this thread brings some answers, so sodium-native becomes usable again: jedisct1/libsodium#1449

[andreas-soroko]

I just ran into that too... Could someone describe exactly how to fix the problem? I read through the various issues but couldn't figure it out.

When I set the version to 4.2.0, it works for amd64 builds but no longer for arm builds. If I set the version to 4.3.3, the arm build works, but then linux/amd64 no longer works.

PS: I create multi-arch builds with docker buildx.

Edit (sleeping does wonders):
using now 4.2.0 - looks like i forgot to add gcompat in the runtime image...