syslog-ng http destination does not load with latest update
The latest Turris OS update updated syslog-ng to version 4.4.0. This version adds compression to the http() destination (https://www.syslog-ng.com/community/b/blog/posts/compressing-http-traffic-in-syslog-ng) using zlib from curl. However, syslog-ng cannot load the http module:
root@turris:~# syslog-ng -V
syslog-ng 4 (4.4.0)
Config version: 4.2
Installer-Version: 4.4.0
Revision:
Compile-Date: Oct 9 2023 18:02:40
Module-Directory: /usr/lib/syslog-ng
Module-Path: /usr/lib/syslog-ng
Include-Path: /usr/share/syslog-ng/include
Error opening plugin module; module='http', error='Error relocating /usr/lib/syslog-ng/libhttp.so: deflateEnd: symbol not found'
Available-Modules: kvformat,json-plugin,timestamp,rate-limit-filter,correlation,hook-commands,map-value-pairs,cryptofuncs,basicfuncs,disk-buffer,syslogformat,metrics-probe,secure-logging,cef,system-source,afprog,afstomp,afuser,add-contextual-data,linux-kmsg-format,azure-auth-header,xml,afsocket,tfgetent,pseudofile,regexp-parser,tags-parser,csvparser,confgen,affile,appmodel,graphite,stardate,examples
Enable-Debug: off
Enable-GProf: off
Enable-Memtrace: off
Enable-IPv6: on
Enable-Spoof-Source: off
Enable-TCP-Wrapper: off
Enable-Linux-Caps: off
Enable-Systemd: off
Is zlib compression enabled in the curl package?
This problem does not affect the default configuration. However, if a user created a configuration to log to elasticsearch or one of the cloud services, like Slack or Sumologic, then starting syslog-ng fails.