The unauthenticated git protocol on port 9418 is no longer supported
Closed this issue · 1 comments
Description
While recently setting up the Bootcamps app I noticed errors while building the containers regarding the packages that we were installing right from git.
We are installing djangosaml2 package from GitHub directly and with Recent Github Security Updates the git:// protocol is not more supported so we will have to update this.
It's possible that we might see similar issues in other repositories too where we are installing the package right from git.
Log:
#16 3.314 Collecting djangosaml2idp
#16 3.314 Cloning git://github.com/OTA-Insight/djangosaml2idp.git (to revision e12319949dc4911657d0fff91c93317fdef691d4) to ./pip-install-yj55lfi2/djangosaml2idp_835dcc3a53e44421887203dea53033b7
#16 3.338 Running command git clone --filter=blob:none --quiet git://github.com/OTA-Insight/djangosaml2idp.git /tmp/pip-install-yj55lfi2/djangosaml2idp_835dcc3a53e44421887203dea53033b7
#16 4.457 fatal: remote error:
#16 4.458 The unauthenticated git protocol on port 9418 is no longer supported.
#16 4.458 Please see https://github.blog/2021-09-01-improving-git-protocol-security-github/ for more information.
#16 4.466 error: subprocess-exited-with-error
#16 4.466
#16 4.466 × git clone --filter=blob:none --quiet git://github.com/OTA-Insight/djangosaml2idp.git /tmp/pip-install-yj55lfi2/djangosaml2idp_835dcc3a53e44421887203dea53033b7 did not run successfully.
#16 4.466 │ exit code: 128
#16 4.466 ╰─> See above for output.
#16 4.466
#16 4.466 note: This error originates from a subprocess, and is likely not a problem with pip.
#16 4.469 error: subprocess-exited-with-error
#16 4.469
#16 4.469 × git clone --filter=blob:none --quiet git://github.com/OTA-Insight/djangosaml2idp.git /tmp/pip-install-yj55lfi2/djangosaml2idp_835dcc3a53e44421887203dea53033b7 did not run successfully.
#16 4.469 │ exit code: 128
#16 4.469 ╰─> See above for output.
#16 4.469
#16 4.469 note: This error originates from a subprocess, and is likely not a problem with pip.
#16 5.069 WARNING: You are using pip version 22.0.3; however, version 22.0.4 is available.
#16 5.069 You should consider upgrading via the '/usr/local/bin/python3 -m pip install --upgrade pip' command.
This was fixed in #1330.
It's possible that we might see similar issues in other repositories too where we are installing the package right from git.
As for the above, I don't think it should be a part of this ticket and probably be a separate effort but at least I'm closing this ticket in Bootcamps.