Thursday, 2023-11-16

SumitGuptaHi there, Is there a way to conditionally include a statement like this in requirements.txt, where a package's certain level is installed if python version is 3.x.y ? For example, install zuul-sphinx>=0.2.0 only when python version is greater than 3.8.007:10
tkajinamSumitGupta, that may be using python_version ... but afaik requirement check does not allow it now.07:44
tkajinamthat may be possible by using *07:44
tkajinamhttps://review.opendev.org/c/openstack/oslo.utils/+/89762307:44
SumitGuptatkajinam, I am doing like this, is this supported format: cryptography>=41.0.3;python>=3.908:43
fricklerSumitGupta: see the linked patch: cryptography>=41.0.3;python_version>="3.9"08:47
tkajinamSumitGupta, you need quotes around 3.908:48
tkajinamas frickler pointed out08:48
tkajinamhttps://review.opendev.org/c/openstack/requirements/+/901119 may be needed to get requirement check passing08:48
SumitGuptasure. Thanks !!08:49
tkajinamthough I don't fully understand what's that for. If that is to pulling cytptography version broken in py 39 then I feel like that is not what we should maintain in our repos.08:52
* tkajinam has to leave now08:52
SumitGuptaI need to put that because there are some security vulnerabilities in lower versions of 2-3 packages (ex. cryptography 40.x.x). They'll go away if package is at higher level.08:54
tkajinammy concern is maintaining recommended package version of all dependent libraries sound like a huge task08:55
tkajinamthe version in requirements usually explain the minimum required version for functionality08:55
SumitGuptaI'd like to maintain a minimum non-vulnerable version if it is available on client's python version. If it is not available, then there is no choice. 08:59
fricklerSumitGupta: about which project is this? I get the impression that this is not related to this channel08:59
SumitGuptaFurthermore, it is not for all libs, but for those which are vulnerable to security threats. This is about IBM's cinder driver code.09:00
fricklerI'm not convinced that requirements are the right place to handle this. like distro versions may get fixed without bumping the library version. also likely #openstack-requirements is a better place for discussion09:02
SumitGuptaSure. I'll discuss there.09:11
opendevreviewLajos Katona proposed openstack/devstack master: Option for SQLAlchemy and alembic git source  https://review.opendev.org/c/openstack/devstack/+/90112410:36
opendevreviewLajos Katona proposed openstack/devstack master: Option for SQLAlchemy and alembic git source  https://review.opendev.org/c/openstack/devstack/+/90112410:37
opendevreviewMaxim Sava proposed openstack/tempest master: Add delete image from specific store API  https://review.opendev.org/c/openstack/tempest/+/89854413:32
opendevreviewyatin proposed openstack/devstack master: Option for SQLAlchemy and alembic git source  https://review.opendev.org/c/openstack/devstack/+/90112414:19
opendevreviewMerged openstack/whitebox-tempest-plugin master: Add global nodes variable  https://review.opendev.org/c/openstack/whitebox-tempest-plugin/+/88490316:53
opendevreviewArtom Lifshitz proposed openstack/whitebox-tempest-plugin master: WIP: Test resize with mem_page_size in flavor  https://review.opendev.org/c/openstack/whitebox-tempest-plugin/+/82477218:05
opendevreviewArtom Lifshitz proposed openstack/whitebox-tempest-plugin master: Remove unit tests  https://review.opendev.org/c/openstack/whitebox-tempest-plugin/+/90119718:05
opendevreviewArtom Lifshitz proposed openstack/whitebox-tempest-plugin master: Remove old huge pages tests and reverse dependencies  https://review.opendev.org/c/openstack/whitebox-tempest-plugin/+/90119818:05
opendevreviewArtom Lifshitz proposed openstack/whitebox-tempest-plugin master: WIP: Test resize with mem_page_size in flavor  https://review.opendev.org/c/openstack/whitebox-tempest-plugin/+/82477219:46
opendevreviewMerged openstack/devstack master: Option for SQLAlchemy and alembic git source  https://review.opendev.org/c/openstack/devstack/+/90112420:53
opendevreviewMerged openstack/whitebox-tempest-plugin master: Remove unit tests  https://review.opendev.org/c/openstack/whitebox-tempest-plugin/+/90119721:09

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!