#11962·foundationdb

fdbcli segmentation fault in container when FDB_TLS_VERIFY_PEERS envvar is defined

Author: czephyrCreated Feb 20, 2025Updated Aug 21, 2026

Hello.

I'm bumping into this when using fdbcli inside my podman container:

bash-5.1# fdbcli
Using cluster file `/etc/foundationdb/fdb.cluster'.
SIGNAL: Segmentation fault (11)
Trace: addr2line -e fdbcli.debug -p -C -f -i 0x7f622e19a6f0 0x179043a 0x17925c8 0x19d103e
Segmentation fault

My setup has TLS and I want to define these vars inside my container.

-FDB_TLS_VERIFY_PEERS
-FDB_TLS_CA_FILE
-FDB_TLS_KEY_FILE
-FDB_TLS_CERTIFICATE_FILE
-FDB_CLUSTER_FILE

These settings are also defined in the [fdbserver] config (and the values are the same) but I want to be able to run fdbcli without having to add the flags when inside the container.

It looks like this happens when I mount the container and the podman --envfile contains the env variable FDB_TLS_VERIFY_PEERS.

When I mount an envfile that doesn't contain that var fdbcli works. When I mount an envfile that doesn't contain that var and I later export it after startup it works.

It might be something I'm overlooking, maybe. Image is foundationdb:7.3.59.