QAT changes for late 2022 release (#811)

Co-authored-by: jhou5 <[email protected]>

QAT/README.md

@@ -1,20 +1,20 @@
 
 
-Enhance security and compression performance in cloud, networking, big data, and storage applications — for data in motion and at rest. Now you can accelerate compute-intensive operations with Intel<sup>&reg;</sup> QuickAssist Technology (Intel QAT).   
+Enhance security and compression performance in cloud, networking, big data, and storage applications — for data in motion and at rest. Now you can accelerate compute-intensive operations with Intel<sup>&reg;</sup> QuickAssist Technology (Intel QAT).
 
 This document describes the system setup to use Intel QAT within docker containers.
 
 ### Install Driver and Service:
 
- - Follow the [instructions](https://01.org/sites/default/files/downloads//336212intelqat-gsg009.pdf) to install the supported OS, kernel, Intel QAT driver and service on the host. 
- - For CentOS 7, get the Linux driver package from [here](https://www.intel.com/content/www/us/en/download/19734/intel-quickassist-technology-driver-for-linux-hw-version-1-7.html). Please check [01.org](https://01.org/intel-quickassist-technology) page for updated driver package if available. Continue following commands under Centos 7:
+ - Follow the [instructions](https://www.intel.com/content/www/us/en/content-details/710059/intel-quickassist-technology-software-for-linux-getting-started-guide-hw-version-1-7.html) to install the supported OS, kernel, Intel QAT driver and service on the host.
+ - For CentOS 7, get the Linux driver package from [here](https://www.intel.com/content/www/us/en/download/19734/intel-quickassist-technology-driver-for-linux-hw-version-1-7.html). Please check [IDZ](https://www.intel.com/content/www/us/en/developer/topic-technology/open/quick-assist-technology/resources.html?s=Newest) page for updated driver package if available. Continue following commands under Centos 7:
 
 ```bash
 tar -zxof <QAT Driver package downloaded above>
 sudo yum -y groupinstall "Development Tools"
 sudo yum -y install pciutils
 sudo yum -y install libudev-devel
-sudo yum -y install kernel-devel-$(uname -r) 
+sudo yum -y install kernel-devel-$(uname -r)
 sudo yum -y install gcc
 sudo yum -y install openssl-devel
 
@@ -23,7 +23,7 @@ make
 make install
 ```
 
-- Enable kernel hugepage support:  
+- Enable kernel hugepage support:
 
 ```bash
 echo 1024 | sudo tee /sys/kernel/mm/hugepages/hugepages-2048kB/nr_hugepages
@@ -32,13 +32,13 @@ sudo systemctl restart qat_service
 
 ### Configure QATzip and QATengine:
 
-QATzip is a utility (`qzip`) for data compression. QATengine is a crypto engine that can be used in the openssl framework. The async mode NGINX requires both QATzip and QATengine.   
+QATzip is a utility (`qzip`) for data compression. QATengine is a crypto engine that can be used in the openssl framework. The async mode NGINX requires both QATzip and QATengine.
 
-While the docker images contain QATzip and QATengine, you **must** configure QATzip and QATengine on each host that the containers run. The QATzip configuration files are located at [QATzip/config_file](https://github.com/intel/QATzip/tree/master/config_file) and the QATengine configuration files are located at [QATengine/qat/config](https://github.com/intel/QAT_Engine/tree/master/qat/config). 
+While the docker images contain QATzip and QATengine, you **must** configure QATzip and QATengine on each host that the containers run. The QATzip configuration files are located at [QATzip/config_file](https://github.com/intel/QATzip/tree/master/config_file) and the QATengine configuration files are located at [QATengine/qat/config](https://github.com/intel/QAT_Engine/tree/master/qat/config).
 
-There are multiple versions of the configuration files optimized for different adapaters and usage scenarios. Select the ones that meet your adapter and usage pattern. Copy them to the `/etc` directory. Note that QATzip looks for `NumberDcInstances` and QATengine looks for `NumberCyInstances`. Thus you will need to merge the QATzip and QATengine configuration files together as you need both in NGINX.    
+There are multiple versions of the configuration files optimized for different adapaters and usage scenarios. Select the ones that meet your adapter and usage pattern. Copy them to the `/etc` directory. Note that QATzip looks for `NumberDcInstances` and QATengine looks for `NumberCyInstances`. Thus you will need to merge the QATzip and QATengine configuration files together as you need both in NGINX.
 
-For example, `/etc/c6xx_dev0.conf` might look similar to the following:  
+For example, `/etc/c6xx_dev0.conf` might look similar to the following:
 
 ```
 ##############################################
@@ -63,7 +63,7 @@ Cy0IsPolled = 1
 Cy0CoreAffinity = 1
 ```
 
-Finally, restart the `qat_service` to initialize the configuration files:   
+Finally, restart the `qat_service` to initialize the configuration files:
 
 ```bash
 sudo systemctl restart qat_service

QAT/centos-7/media/dev/Dockerfile

@@ -102,11 +102,11 @@ RUN cd /opt/build && \
 
 RUN yum install -y wget cmake3 make python devtoolset-9
 
-ARG QAT_CRYPTOMB_REPO=https://github.com/intel/ipp-crypto/archive/ippcp_2021.4.tar.gz
+ARG QAT_CRYPTOMB_REPO=https://github.com/intel/ipp-crypto/archive/ippcp_2021.6.tar.gz
 RUN cd /opt/build && \
     wget -O - ${QAT_CRYPTOMB_REPO} | tar xz && \
-    mkdir -p ipp-crypto-ippcp_2021.4/sources/ippcp/crypto_mb/build && \
-    cd ipp-crypto-ippcp_2021.4/sources/ippcp/crypto_mb/build && \
+    mkdir -p ipp-crypto-ippcp_2021.6/sources/ippcp/crypto_mb/build && \
+    cd ipp-crypto-ippcp_2021.6/sources/ippcp/crypto_mb/build && \
     (. /opt/rh/devtoolset-9/enable &&  CFLAGS="-Wl,-rpath=/usr/local/ssl/lib" cmake3 -DOPENSSL_INCLUDE_DIR=/usr/local/ssl/include -DOPENSSL_LIBRARIES=/usr/local/ssl/lib -DOPENSSL_ROOT_DIR=/usr/local/ssl .. && \
     make -j8 )  && \
     make install && \
@@ -116,7 +116,7 @@ RUN yum install -y git make devtoolset-9
 
 ARG IPSECMB_REPO=https://github.com/intel/intel-ipsec-mb.git
 RUN cd /opt/build && \
-    git clone -b v1.0 ${IPSECMB_REPO} && \
+    git clone -b v1.2 ${IPSECMB_REPO} && \
     cd intel-ipsec-mb && \
     (. /opt/rh/devtoolset-9/enable &&  CFLAGS="-Wl,-rpath=/usr/local/ssl/lib" make -j SAFE_DATA=y SAFE_PARAM=y SAFE_LOOKUP=y )  && \
     make install && \
@@ -125,13 +125,13 @@ RUN cd /opt/build && \
 RUN yum install -y wget make gcc gawk autoconf automake libtool pkg-config
 
 # load qat-engine
-ARG QAT_ENGINE_REPO=https://github.com/intel/QAT_Engine/archive/v0.6.8.tar.gz
+ARG QAT_ENGINE_REPO=https://github.com/intel/QAT_Engine/archive/v0.6.15.tar.gz
 RUN cd /opt/build && \
     wget -O - ${QAT_ENGINE_REPO} | tar xz && \
     cd QAT_Engine* && \
     ./autogen.sh && \
     export PERL5LIB="$(ls -1 -d /opt/build/openssl-*)" && \
-    ./configure --with-qat_dir=/opt/intel/QAT --with-openssl_dir="$PERL5LIB" --with-openssl_install_dir=/usr/local/ssl --prefix=/opt/intel/QATengine --disable-qat_ecx --with-cc-opt="-DQAT_DISABLE_NONZERO_MEMFREE -I/opt/build/ipp-crypto-ippcp_2021.4/sources/ippcp/crypto_mb/include" --enable-multibuff_offload --enable-multibuff_ecx --enable-qat_sw && \
+    ./configure --with-qat_dir=/opt/intel/QAT --with-openssl_dir="$PERL5LIB" --with-openssl_install_dir=/usr/local/ssl --prefix=/opt/intel/QATengine --disable-qat_ecx --with-cc-opt="-DQAT_DISABLE_NONZERO_MEMFREE -I/opt/build/ipp-crypto-ippcp_2021.6/sources/ippcp/crypto_mb/include" --enable-multibuff_offload --enable-multibuff_ecx --enable-qat_sw && \
     make -j8 && \
     make install && \
     tar cf - /usr/local/ssl | (cd /opt/dist && tar xf -)
@@ -161,7 +161,7 @@ RUN cd /opt/build && \
 
 RUN yum install -y wget pcre-devel zlib-devel libxslt-devel 
 
-ARG QAT_NGINX_REPO=https://github.com/intel/asynch_mode_nginx/archive/v0.4.6.tar.gz
+ARG QAT_NGINX_REPO=https://github.com/intel/asynch_mode_nginx/archive/v0.4.7.tar.gz
 RUN wget -O - ${QAT_NGINX_REPO} | tar xz && cd asynch_mode_nginx* && \
     ./configure --with-ld-opt="-Wl,-rpath=/usr/local/ssl/lib,-rpath=/opt/intel/QATengine/lib,-rpath=/opt/intel/QATzip/lib64,-rpath=/opt/intel/QAT/build -L/usr/local/ssl/lib -L/opt/intel/QATzip/lib64 -lqatzip -lz" \
         --with-cc-opt="-DNGX_SECURE_MEM -I/usr/local/ssl/include -I/opt/intel/QATzip/include -I/opt/intel/QAT/quickassist/include/dc -I/opt/intel/QAT/quickassist/include -Wno-error=deprecated-declarations" \
@@ -226,7 +226,7 @@ RUN yum install -y openssl
 
 # Generate a self-certificate for testing purpose
 RUN mkdir -p /opt/dist/etc/nginx && \
-    printf "US\nOR\nPortland\nOregon\nData Center Group\nIntel Corporation\n%s\n[email protected]\n" "$(hostname)" | openssl req -x509 -nodes -days 30 -newkey rsa:4096 -keyout /opt/dist/etc/nginx/cert.key -out /opt/dist/etc/nginx/cert.crt && \
+    printf "US\nOR\nPortland\nOregon\nOpen Visual Cloud\nIntel Corporation\n%s\n[email protected]\n" "$(hostname)" | openssl req -x509 -nodes -days 30 -newkey rsa:4096 -keyout /opt/dist/etc/nginx/cert.key -out /opt/dist/etc/nginx/cert.crt && \
     chmod 640 /opt/dist/etc/nginx/cert.key && \
     chmod 644 /opt/dist/etc/nginx/cert.crt
 

QAT/centos-7/media/nginx/Dockerfile

@@ -103,7 +103,7 @@ RUN cd /opt/build && \
 RUN yum install -y wget make gcc gawk autoconf automake libtool pkg-config
 
 # load qat-engine
-ARG QAT_ENGINE_REPO=https://github.com/intel/QAT_Engine/archive/v0.6.8.tar.gz
+ARG QAT_ENGINE_REPO=https://github.com/intel/QAT_Engine/archive/v0.6.15.tar.gz
 RUN cd /opt/build && \
     wget -O - ${QAT_ENGINE_REPO} | tar xz && \
     cd QAT_Engine* && \
@@ -139,7 +139,7 @@ RUN cd /opt/build && \
 
 RUN yum install -y wget pcre-devel zlib-devel libxslt-devel 
 
-ARG QAT_NGINX_REPO=https://github.com/intel/asynch_mode_nginx/archive/v0.4.6.tar.gz
+ARG QAT_NGINX_REPO=https://github.com/intel/asynch_mode_nginx/archive/v0.4.7.tar.gz
 RUN wget -O - ${QAT_NGINX_REPO} | tar xz && cd asynch_mode_nginx* && \
     ./configure --with-ld-opt="-Wl,-rpath=/usr/local/ssl/lib,-rpath=/opt/intel/QATengine/lib,-rpath=/opt/intel/QATzip/lib64,-rpath=/opt/intel/QAT/build -L/usr/local/ssl/lib -L/opt/intel/QATzip/lib64 -lqatzip -lz" \
         --with-cc-opt="-DNGX_SECURE_MEM -I/usr/local/ssl/include -I/opt/intel/QATzip/include -I/opt/intel/QAT/quickassist/include/dc -I/opt/intel/QAT/quickassist/include -Wno-error=deprecated-declarations" \
@@ -204,7 +204,7 @@ RUN yum install -y openssl
 
 # Generate a self-certificate for testing purpose
 RUN mkdir -p /opt/dist/etc/nginx && \
-    printf "US\nOR\nPortland\nOregon\nData Center Group\nIntel Corporation\n%s\n[email protected]\n" "$(hostname)" | openssl req -x509 -nodes -days 30 -newkey rsa:4096 -keyout /opt/dist/etc/nginx/cert.key -out /opt/dist/etc/nginx/cert.crt && \
+    printf "US\nOR\nPortland\nOregon\nOpen Visual Cloud\nIntel Corporation\n%s\n[email protected]\n" "$(hostname)" | openssl req -x509 -nodes -days 30 -newkey rsa:4096 -keyout /opt/dist/etc/nginx/cert.key -out /opt/dist/etc/nginx/cert.crt && \
     chmod 640 /opt/dist/etc/nginx/cert.key && \
     chmod 644 /opt/dist/etc/nginx/cert.crt
 

QAT/centos-7/media/nginx_sw/Dockerfile

@@ -102,11 +102,11 @@ RUN cd /opt/build && \
 
 RUN yum install -y wget cmake3 make python devtoolset-9
 
-ARG QAT_CRYPTOMB_REPO=https://github.com/intel/ipp-crypto/archive/ippcp_2021.4.tar.gz
+ARG QAT_CRYPTOMB_REPO=https://github.com/intel/ipp-crypto/archive/ippcp_2021.6.tar.gz
 RUN cd /opt/build && \
     wget -O - ${QAT_CRYPTOMB_REPO} | tar xz && \
-    mkdir -p ipp-crypto-ippcp_2021.4/sources/ippcp/crypto_mb/build && \
-    cd ipp-crypto-ippcp_2021.4/sources/ippcp/crypto_mb/build && \
+    mkdir -p ipp-crypto-ippcp_2021.6/sources/ippcp/crypto_mb/build && \
+    cd ipp-crypto-ippcp_2021.6/sources/ippcp/crypto_mb/build && \
     (. /opt/rh/devtoolset-9/enable &&  CFLAGS="-Wl,-rpath=/usr/local/ssl/lib" cmake3 -DOPENSSL_INCLUDE_DIR=/usr/local/ssl/include -DOPENSSL_LIBRARIES=/usr/local/ssl/lib -DOPENSSL_ROOT_DIR=/usr/local/ssl .. && \
     make -j8 )  && \
     make install && \
@@ -116,7 +116,7 @@ RUN yum install -y git make devtoolset-9
 
 ARG IPSECMB_REPO=https://github.com/intel/intel-ipsec-mb.git
 RUN cd /opt/build && \
-    git clone -b v1.0 ${IPSECMB_REPO} && \
+    git clone -b v1.2 ${IPSECMB_REPO} && \
     cd intel-ipsec-mb && \
     (. /opt/rh/devtoolset-9/enable &&  CFLAGS="-Wl,-rpath=/usr/local/ssl/lib" make -j SAFE_DATA=y SAFE_PARAM=y SAFE_LOOKUP=y )  && \
     make install && \
@@ -125,13 +125,13 @@ RUN cd /opt/build && \
 RUN yum install -y wget make gcc gawk autoconf automake libtool pkg-config
 
 # load qat-engine
-ARG QAT_ENGINE_REPO=https://github.com/intel/QAT_Engine/archive/v0.6.8.tar.gz
+ARG QAT_ENGINE_REPO=https://github.com/intel/QAT_Engine/archive/v0.6.15.tar.gz
 RUN cd /opt/build && \
     wget -O - ${QAT_ENGINE_REPO} | tar xz && \
     cd QAT_Engine* && \
     ./autogen.sh && \
     export PERL5LIB="$(ls -1 -d /opt/build/openssl-*)" && \
-    ./configure --with-qat_dir=/opt/intel/QAT --with-openssl_dir="$PERL5LIB" --with-openssl_install_dir=/usr/local/ssl --prefix=/opt/intel/QATengine --disable-qat_ecx --with-cc-opt="-DQAT_DISABLE_NONZERO_MEMFREE -I/opt/build/ipp-crypto-ippcp_2021.4/sources/ippcp/crypto_mb/include" --enable-multibuff_offload --enable-multibuff_ecx --enable-qat_sw && \
+    ./configure --with-qat_dir=/opt/intel/QAT --with-openssl_dir="$PERL5LIB" --with-openssl_install_dir=/usr/local/ssl --prefix=/opt/intel/QATengine --disable-qat_ecx --with-cc-opt="-DQAT_DISABLE_NONZERO_MEMFREE -I/opt/build/ipp-crypto-ippcp_2021.6/sources/ippcp/crypto_mb/include" --enable-multibuff_offload --enable-multibuff_ecx --enable-qat_sw && \
     make -j8 && \
     make install && \
     tar cf - /usr/local/ssl | (cd /opt/dist && tar xf -)
@@ -161,7 +161,7 @@ RUN cd /opt/build && \
 
 RUN yum install -y wget pcre-devel zlib-devel libxslt-devel 
 
-ARG QAT_NGINX_REPO=https://github.com/intel/asynch_mode_nginx/archive/v0.4.6.tar.gz
+ARG QAT_NGINX_REPO=https://github.com/intel/asynch_mode_nginx/archive/v0.4.7.tar.gz
 RUN wget -O - ${QAT_NGINX_REPO} | tar xz && cd asynch_mode_nginx* && \
     ./configure --with-ld-opt="-Wl,-rpath=/usr/local/ssl/lib,-rpath=/opt/intel/QATengine/lib,-rpath=/opt/intel/QATzip/lib64,-rpath=/opt/intel/QAT/build -L/usr/local/ssl/lib -L/opt/intel/QATzip/lib64 -lqatzip -lz" \
         --with-cc-opt="-DNGX_SECURE_MEM -I/usr/local/ssl/include -I/opt/intel/QATzip/include -I/opt/intel/QAT/quickassist/include/dc -I/opt/intel/QAT/quickassist/include -Wno-error=deprecated-declarations" \
@@ -226,7 +226,7 @@ RUN yum install -y openssl
 
 # Generate a self-certificate for testing purpose
 RUN mkdir -p /opt/dist/etc/nginx && \
-    printf "US\nOR\nPortland\nOregon\nData Center Group\nIntel Corporation\n%s\n[email protected]\n" "$(hostname)" | openssl req -x509 -nodes -days 30 -newkey rsa:4096 -keyout /opt/dist/etc/nginx/cert.key -out /opt/dist/etc/nginx/cert.crt && \
+    printf "US\nOR\nPortland\nOregon\nOpen Visual Cloud\nIntel Corporation\n%s\n[email protected]\n" "$(hostname)" | openssl req -x509 -nodes -days 30 -newkey rsa:4096 -keyout /opt/dist/etc/nginx/cert.key -out /opt/dist/etc/nginx/cert.crt && \
     chmod 640 /opt/dist/etc/nginx/cert.key && \
     chmod 644 /opt/dist/etc/nginx/cert.crt
 

QAT/ubuntu-20.04/media/dev/Dockerfile

@@ -102,11 +102,11 @@ RUN apt-get update && \
     wget ca-certificates cmake make python  && \
   rm -rf /var/lib/apt/lists/*
 
-ARG QAT_CRYPTOMB_REPO=https://github.com/intel/ipp-crypto/archive/ippcp_2021.4.tar.gz
+ARG QAT_CRYPTOMB_REPO=https://github.com/intel/ipp-crypto/archive/ippcp_2021.6.tar.gz
 RUN cd /opt/build && \
     wget -O - ${QAT_CRYPTOMB_REPO} | tar xz && \
-    mkdir -p ipp-crypto-ippcp_2021.4/sources/ippcp/crypto_mb/build && \
-    cd ipp-crypto-ippcp_2021.4/sources/ippcp/crypto_mb/build && \
+    mkdir -p ipp-crypto-ippcp_2021.6/sources/ippcp/crypto_mb/build && \
+    cd ipp-crypto-ippcp_2021.6/sources/ippcp/crypto_mb/build && \
      CFLAGS="-Wl,-rpath=/usr/local/ssl/lib" cmake -DOPENSSL_INCLUDE_DIR=/usr/local/ssl/include -DOPENSSL_LIBRARIES=/usr/local/ssl/lib -DOPENSSL_ROOT_DIR=/usr/local/ssl .. && \
     make -j8  && \
     make install && \
@@ -119,7 +119,7 @@ RUN apt-get update && \
 
 ARG IPSECMB_REPO=https://github.com/intel/intel-ipsec-mb.git
 RUN cd /opt/build && \
-    git clone -b v1.0 ${IPSECMB_REPO} && \
+    git clone -b v1.2 ${IPSECMB_REPO} && \
     cd intel-ipsec-mb && \
      CFLAGS="-Wl,-rpath=/usr/local/ssl/lib" make -j SAFE_DATA=y SAFE_PARAM=y SAFE_LOOKUP=y  && \
     make install && \
@@ -131,13 +131,13 @@ RUN apt-get update && \
   rm -rf /var/lib/apt/lists/*
 
 # load qat-engine
-ARG QAT_ENGINE_REPO=https://github.com/intel/QAT_Engine/archive/v0.6.8.tar.gz
+ARG QAT_ENGINE_REPO=https://github.com/intel/QAT_Engine/archive/v0.6.15.tar.gz
 RUN cd /opt/build && \
     wget -O - ${QAT_ENGINE_REPO} | tar xz && \
     cd QAT_Engine* && \
     ./autogen.sh && \
     export PERL5LIB="$(ls -1 -d /opt/build/openssl-*)" && \
-    ./configure --with-qat_dir=/opt/intel/QAT --with-openssl_dir="$PERL5LIB" --with-openssl_install_dir=/usr/local/ssl --prefix=/opt/intel/QATengine --disable-qat_ecx --with-cc-opt="-DQAT_DISABLE_NONZERO_MEMFREE -I/opt/build/ipp-crypto-ippcp_2021.4/sources/ippcp/crypto_mb/include" --enable-multibuff_offload --enable-multibuff_ecx --enable-qat_sw && \
+    ./configure --with-qat_dir=/opt/intel/QAT --with-openssl_dir="$PERL5LIB" --with-openssl_install_dir=/usr/local/ssl --prefix=/opt/intel/QATengine --disable-qat_ecx --with-cc-opt="-DQAT_DISABLE_NONZERO_MEMFREE -I/opt/build/ipp-crypto-ippcp_2021.6/sources/ippcp/crypto_mb/include" --enable-multibuff_offload --enable-multibuff_ecx --enable-qat_sw && \
     make -j8 && \
     make install && \
     tar cf - /usr/local/ssl | (cd /opt/dist && tar xf -)
@@ -173,7 +173,7 @@ RUN apt-get update && \
     wget ca-certificates libpcre3-dev zlib1g-dev libxslt1-dev  && \
   rm -rf /var/lib/apt/lists/*
 
-ARG QAT_NGINX_REPO=https://github.com/intel/asynch_mode_nginx/archive/v0.4.6.tar.gz
+ARG QAT_NGINX_REPO=https://github.com/intel/asynch_mode_nginx/archive/v0.4.7.tar.gz
 RUN wget -O - ${QAT_NGINX_REPO} | tar xz && cd asynch_mode_nginx* && \
     ./configure --with-ld-opt="-Wl,-rpath=/usr/local/ssl/lib,-rpath=/opt/intel/QATengine/lib,-rpath=/opt/intel/QATzip/lib64,-rpath=/opt/intel/QAT/build -L/usr/local/ssl/lib -L/opt/intel/QATzip/lib64 -lqatzip -lz" \
         --with-cc-opt="-DNGX_SECURE_MEM -I/usr/local/ssl/include -I/opt/intel/QATzip/include -I/opt/intel/QAT/quickassist/include/dc -I/opt/intel/QAT/quickassist/include -Wno-error=deprecated-declarations" \
@@ -241,7 +241,7 @@ RUN apt-get update && \
 
 # Generate a self-certificate for testing purpose
 RUN mkdir -p /opt/dist/etc/nginx && \
-    printf "US\nOR\nPortland\nOregon\nData Center Group\nIntel Corporation\n%s\n[email protected]\n" "$(hostname)" | openssl req -x509 -nodes -days 30 -newkey rsa:4096 -keyout /opt/dist/etc/nginx/cert.key -out /opt/dist/etc/nginx/cert.crt && \
+    printf "US\nOR\nPortland\nOregon\nOpen Visual Cloud\nIntel Corporation\n%s\n[email protected]\n" "$(hostname)" | openssl req -x509 -nodes -days 30 -newkey rsa:4096 -keyout /opt/dist/etc/nginx/cert.key -out /opt/dist/etc/nginx/cert.crt && \
     chmod 640 /opt/dist/etc/nginx/cert.key && \
     chmod 644 /opt/dist/etc/nginx/cert.crt
 
@@ -261,7 +261,7 @@ WORKDIR /home
 RUN apt-get update && apt-get upgrade -y systemd
 RUN apt-get update && \
   DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
-    libzip libxml2 libpcre3 zlib1g libxslt1.1  && \
+    libzip5 libxml2 libpcre3 zlib1g libxslt1.1  && \
   rm -rf /var/lib/apt/lists/*
 ENV PKG_CONFIG_PATH=/usr/local/lib/pkgconfig