Bug: SAM build fails with a broken openssl dependency after upgrading to Fedora 43

[twistypigeon]

Description:

An OpenSSL dependency is broken after upgrading to Fedora 43 when using the latest AWS SAM CLI version (1.151.0)

Steps to reproduce:

1. Upgrade from Fedora 42 to Fedora 43
2. Execute sam build in a NodeJS project

Observed result:

2026-01-02 10:12:46,957 | Building codeuri: /home/<user>/git/<project>/src runtime: nodejs24.x architecture: arm64 functions: DocumentProductionLambda          
2026-01-02 10:12:46,958 | Building to following folder /home/<user>/git/<project>/.aws-sam/build/Lambda                                       
2026-01-02 10:12:46,958 | Loading workflow module 'aws_lambda_builders.workflows'                                                                                                             
...               
2026-01-02 10:12:46,969 | npm installation actions install only production dependencies. Dev dependencies are omitted from the Lambda artifacts package                                       
2026-01-02 10:12:46,969 | Running workflow 'NodejsNpmBuilder'                                                                                                                                 
2026-01-02 10:12:46,970 |  Running NodejsNpmBuilder:NpmPack                                                                                                                                   
2026-01-02 10:12:46,970 | NODEJS packaging file:/home/<user>/git/<project>/src to /tmp/tmpff1uuq0k                                                              
2026-01-02 10:12:46,970 | executing NPM: ['npm', 'pack', '-q', 'file:/home/<user>/git/<project>/src']                                                           
2026-01-02 10:12:46,972 | NodejsNpmBuilder:NpmPack failed                                                                                                                                     
Traceback (most recent call last):                                                                                                                                                            
  File "aws_lambda_builders/workflows/nodejs_npm/actions.py", line 61, in execute                                                                                                             
  File "aws_lambda_builders/workflows/nodejs_npm/npm.py", line 72, in run                                                                                                                     
aws_lambda_builders.workflows.nodejs_npm.exceptions.NpmExecutionError: NPM Failed: /usr/bin/node-22: /usr/local/aws-sam-cli/1.151.0/dist/_internal/libcrypto.so.3: version `OPENSSL_3.4.0' not
found (required by /lib64/libnode.so.127)                                                                                                                                                     
                                                                                                                                                                                              
During handling of the above exception, another exception occurred:                                                                                                                           
                                                                                                                                                                                              
Traceback (most recent call last):                                                                                                                                                            
  File "aws_lambda_builders/workflow.py", line 374, in run                                                                                                                                    
  File "aws_lambda_builders/workflows/nodejs_npm/actions.py", line 72, in execute                                                                                                             
aws_lambda_builders.actions.ActionFailedError: NPM Failed: /usr/bin/node-22: /usr/local/aws-sam-cli/1.151.0/dist/_internal/libcrypto.so.3: version `OPENSSL_3.4.0' not found (required by     
/lib64/libnode.so.127)                                                                                                                                                                        

Build Failed

Expected result:

build should have completed normally as it did on Fedora 42

Additional environment details (Ex: Windows, Mac, Amazon Linux etc)

{
  "version": "1.151.0",
  "system": {
    "python": "3.11.10",
    "os": "Linux-6.17.12-300.fc43.x86_64-x86_64-with-glibc2.42"
  },
  "additional_dependencies": {
    "container_engine": "Docker(v29.1.3)",
    "aws_cdk": "Not available",
    "terraform": "Not available"
  },
  "available_beta_feature_env_vars": [
    "SAM_CLI_BETA_FEATURES",
    "SAM_CLI_BETA_BUILD_PERFORMANCE",
    "SAM_CLI_BETA_TERRAFORM_SUPPORT",
    "SAM_CLI_BETA_PACKAGE_PERFORMANCE",
    "SAM_CLI_BETA_RUST_CARGO_LAMBDA"
  ]
}

[twistypigeon]

Renaming the internal dependencies so that the system openssl install is used is a workaround but not ideal.

mv /usr/local/aws-sam-cli/1.151.0/dist/_internal/libssl.so.3 /usr/local/aws-sam-cli/1.151.0/dist/_internal/libssl.so.3.bak
mv /usr/local/aws-sam-cli/1.151.0/dist/_internal/libcrypto.so.3 /usr/local/aws-sam-cli/1.151.0/dist/_internal/libcrypto.so.3.bak