Openssl uninstalled after dnf remove firefox (not a mission-critical system)

I’d like to start by saying this is not a system that I’m trying to recover, I have no important data on here or anything. I’m just curious to dive in and see what happened or what I did that caused this before I wipe it and reinstall, or do a btrfs-rollback.

Hello all, on a recent install of Fedora Workstation 43, I attempted to remove the DNF version of Firefox as I use my browsers in flatpak.

When doing so it wanted to remove some important looking dependencies such as clevis and openssl.

Does anyone have any clues as to what could have caused this?

I manually re-installed what looked like important packages afterwards as well as ffmpeg-free (It was a poor choice to go ahead with the removal instead of figuring out what was going on, but alas here I am)

Here is my DNF history:

ID Command line                                                                                                                                                    Date and time       Action(s) Altered
13 dnf install clevis clevis-luks clevis-pin-tpm2 cockpit-bridge cockpit-storaged cockpit-system cockpit-ws cockpit-ws-selinux ffmpeg-free freeglut jose libavc139 2025-12-05 01:12:43                24
12 dnf install openssl                                                                                                                                             2025-12-05 01:09:43                 1
11 dnf install clevis                                                                                                                                              2025-12-05 01:08:58                 4
10 dnf remove firefox                                                                                                                                              2025-12-05 01:05:38                33
9 dnf install btrfs-assistant                                                                                                                                     2025-12-04 21:58:11                 6
8 dnf install gnome-shell-extension-dash-to-dock                                                                                                                  2025-12-04 15:33:03                 1
7 dnf install gnome-shell-extension-blur-my-shell                                                                                                                 2025-12-04 15:22:22                 1
6 dnf install gnome-shell-extension-caffeine                                                                                                                      2025-12-04 15:20:30                 1
5 dnf install gnome-shell-extension-appindicator                                                                                                                  2025-12-04 15:19:58                 4
4 dnf install gnome-shell-extension-just-perfection                                                                                                               2025-12-04 15:17:12                 2
3 dnf upgrade                                                                                                                                                     2025-12-04 04:21:23              1071
2 dnf5 --config /kiwi_dnf5.config -y --disable-plugin=priorities,versionlock --releasever=43 --exclude=device-mapper-multipath --exclude=dhcp-client --exclude=fc 2025-10-23 04:04:50              1710
1 dnf5 --config /builddir/result/image/build/image-root/kiwi_dnf5.config -y --disable-plugin=priorities,versionlock --installroot /builddir/result/image/build/im 2025-10-23 03:50:45               286

I also uninstalled “Gnome Videos” aka totem using gnome-software which is the only other removal that I know of

When I run dnf repoquery --whatrequires firefox, I get this output:

Updating and loading repositories:
 Fedora 43 - x86_64 - Updates                                                                                                                                                                                                                      100% | 140.3 KiB/s |  30.9 KiB |  00m00s
Repositories loaded.
abook-0:0.6.1-30.fc43.x86_64
anaconda-webui-0:53.1^20251022g00cddf56-1.fc43.noarch
firefox-langpacks-0:143.0.3-1.fc43.x86_64
firefox-langpacks-0:145.0.1-1.fc43.x86_64
gnome-kiosk-search-appliance-0:49.0-1.fc43.noarch
hugin-0:2024.0.0-10.fc43.x86_64
hugin-0:2025.0.0-1.fc43.x86_64
xfce4-smartbookmark-plugin-0:0.5.3-3.fc43.x86_64

This is a fully installed system, which I forgot to change the hostname of so it retained the localhost-live name, and /proc/cmdline confirms I’m not running from an iso or anything, but an installed system.

nia@localhost-live:~$ cat /proc/cmdline
BOOT_IMAGE=(hd0,gpt2)/vmlinuz-6.17.9-300.fc43.x86_64 root=UUID=e6c72599-3f85-498a-b2bc-baaea7387fdb ro rootflags=subvol=root rd.luks.uuid=luks-0e045aed-4ea8-4df1-b2cc-8bfce1bcbc8f rhgb quiet
nia@localhost-live:~$ 

After all of this happened, I ran into issues like the Element flatpak saying that the system keyring was found, but that encryption was not available, which I suspect is due to openssl having been removed in the dependency cleanup.

Does anyone have any ideas for me to poke around further on what caused them to be orphaned?

Would flatpak be able to download anything without OpenSSL? I think Firefox is the only default-included GUI app on Workstation to expectedly use SSL, but I’m curious how dnf or Software would work, or even GNOME Accounts? (seems like other core apps would lock openssl before firefox)


Unless you use LVM partitioning maybe, everything else in the list mostly looks optional. I used zenity for notifications but guess Firefox or one of those deps isn’t using something else? (notify-send iirc is more modern)

It seems that DNF and Flatpak can both successfully download and install things with it removed, and I was able to sign into an account on Gnome Accounts just now. I assume that after I reboot those would definitely not work though.

I had already re-installed most of those so just for curiosity removed openssl again before doing that. This is definitely one of those learning by breaking things situations.

1 Like

There are many packages that have several dependencies.
When removing something like firefox you could use the --noautoremove option to dnf and avoid removing most of those items.

$ sudo dnf remove firefox --noautoremove
Package                                            Arch         Version                                            Repository                        Size
Removing:
 firefox                                           x86_64       145.0.1-1.fc43                                     updates                      255.5 MiB
Removing dependent packages:
 anaconda-live                                     noarch       43.44-3.fc43                                       fedora               32.2 KiB
 anaconda-webui                                    noarch       53.1^20251022g00cddf56-1.fc43                      fedora                5.7 MiB
 firefox-langpacks                                 x86_64       145.0.1-1.fc43                                     updates                       41.5 MiB

Transaction Summary:
 Removing:           4 packages

Note though that anaconda-webui and anaconda-live (the installer) both appear to rely on firefox

In contrast, without the --noautoremove option

$ sudo dnf remove firefox
Package                                           Arch        Version                                           Repository                           Size
Removing:
 firefox                                          x86_64      145.0.1-1.fc43                                    updates                         255.5 MiB
Removing dependent packages:
 anaconda-live                                    noarch      43.44-3.fc43                                      fedora                           32.2 KiB
Removing unused dependencies:
 anaconda-webui                                   noarch      53.1^20251022g00cddf56-1.fc43                     fedora                            5.7 MiB
 clevis                                           x86_64      21-12.fc43                                        fedora                          124.4 KiB
 clevis-luks                                      x86_64      21-12.fc43                                        fedora                           73.0 KiB
 clevis-pin-tpm2                                  x86_64      0.5.3-10.fc43                                     fedora                            2.6 MiB
 cockpit-bridge                                   noarch      351-1.fc43                                        updates                           2.1 MiB
 cockpit-storaged                                 noarch      351-1.fc43                                        updates                         818.3 KiB
 cockpit-system                                   noarch      351-1.fc43                                        updates                           3.0 MiB
 cockpit-ws                                       x86_64      351-1.fc43                                        updates                           1.8 MiB
 cockpit-ws-selinux                               x86_64      351-1.fc43                                        updates                          44.9 KiB
 firefox-langpacks                                x86_64      145.0.1-1.fc43                                    updates                          41.5 MiB
 jose                                             x86_64      14-5.fc43                                         fedora                          113.4 KiB
 libjose                                          x86_64      14-5.fc43                                         fedora                          145.9 KiB
 libluksmeta                                      x86_64      10-1.fc43                                         updates                          45.2 KiB
 luksmeta                                         x86_64      10-1.fc43                                         updates                          23.6 KiB
 mozilla-openh264                                 x86_64      2.6.0-2.fc43                                      fedora-cisco-openh264             1.1 MiB
 speech-dispatcher-utils                          x86_64      0.12.1-5.fc43                                     updates-testing                  51.2 KiB
 sscg                                             x86_64      4.0.0-1.fc43                                      updates-testing                 117.2 KiB
 udisks2-btrfs                                    x86_64      2.11.0-1.fc43                                     updates                         575.0 KiB
 udisks2-lvm2                                     x86_64      2.11.0-1.fc43                                     updates                         636.0 KiB

Transaction Summary:
 Removing:          21 packages
1 Like

I was curious and did sudo dnf remove anaconda-* (removed openssl + 65 other stuff); Firefox, Thunderbird, and an online game with wine still work! (F43 Workstation all rpms)

The openssl packages only provides the /usr/bin/openssl command and the associated man pages. Most packages that need openssl will depend on openssl-libs.

The anaconda and cockpit packages are only needed by the live system to actually install your system, so there would be no need to re-install those. The cockpit packages could be useful if you need to configure your system remotely, but that is mostly only relevant for server installations.

2 Likes