uyuni-project/sumaform

SLES12SP4 python-cryptography dependency issue

srbarrios opened this issue · 2 comments

Related to https://github.com/SUSE/spacewalk/issues/13314

By default in our official image, from sumaform, we have pre-installed:

python-cryptography-1.3.1-7.10.1.x86_64

That results on this issue, at boostrap:

From cffi callback <function ssl_verify_callback at 0x7f3797639488>:
Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/OpenSSL/SSL.py", line 214, in wrapper
    _lib.X509_up_ref(x509)
AttributeError: 'module' object has no attribute 'X509_up_ref'
An error has occurred:
rhn-plugin: The SSL certificate failed verification.
See /var/log/up2date for more information

But in our repos we have the proper version 2.1.4:
zypper actually display the correct version is also available

--+----------------------+------------+--------------+--------+---------------
v | python-cryptography  | package    | 2.1.4-7.28.2 | x86_64 | os_update_repo
v | python-cryptography  | package    | 1.7.2-7.24.1 | x86_64 | os_update_repo
v | python-cryptography  | package    | 1.3.1-7.13.4 | x86_64 | os_update_repo
i | python-cryptography  | package    | 1.3.1-7.10.1 | x86_64 | os_pool_repo  

We need to figure out which is the package that depends on python-cryptography, to evaluate a proper solution.
For now, we did a workaround to upgrade this package manually before we start the bootstrap.

  • We need to see if we want to document this manual step in our official documentation
  • We need to evalute the possibility to upgrade it on the boostrap stage, instead of manually.

The workaround does not work anymore:

[2021-05-25T17:45:11.354Z] module.sles12sp4-client.module.client.module.host.null_resource.provisioning[0]
 (remote-exec):     31m Comment: The following packages failed to update: python-cryptography`

Furthermore, it is not okay to hide a product problem in sumaform. I prefer it to fail in the test suite.

I'll do a PR to remove the hack.

Not a sumaform issue, closing.