Can't install ansible-2.10.7 with ansible-operator:v1.26.1 & 1.27.0 on s390x platform while 1.26.0 works #6342

YanFenGuo · 2023-02-28T15:25:41Z

Bug Report

What did you do?

I'm trying to install Ansible 2.10 into ansible-operator:v1.26.1.

What did you expect to see?

I want to install Ansible 2.10 into ansible-operator:v1.26.1, I can do this with ansible-operator:v1.26.0, but not 1.26.1.
I can also do this on x86 or ppc64le, only s390x platform doesn't work.

What did you see instead? Under which circumstances?

Launch Ansible Operator with below command:

docker run -u 0 -it --entrypoint="" --rm \
--name operator \
-e WATCH_NAMESPACE=ecm-fncm-s \
-e run="run --watches-file=./watches.yaml --ansible-verbosity 5" \
-e operator="/usr/local/bin/ansible-operator " \
quay.io/operator-framework/ansible-operator:v1.26.1 \
bash

Then execute below commands to update Ansible:

$pip3 uninstall -y ansible;
$python3.8 -m pip install --upgrade pip;
$yum install -y rust;
$pip3 install --no-cache-dir ansible==2.10.7

It failed with below error:

bash-4.4# pip3 install --no-cache-dir ansible==2.10.7
Collecting ansible==2.10.7
  Downloading ansible-2.10.7.tar.gz (29.9 MB)
     ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 29.9/29.9 MB 699.7 kB/s eta 0:00:00
  Preparing metadata (setup.py) ... done
Collecting ansible-base<2.11,>=2.10.5
  Downloading ansible-base-2.10.17.tar.gz (6.1 MB)
     ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 6.1/6.1 MB 797.7 kB/s eta 0:00:00
  Preparing metadata (setup.py) ... done
Requirement already satisfied: jinja2 in /usr/local/lib/python3.8/site-packages (from ansible-base<2.11,>=2.10.5->ansible==2.10.7) (3.1.2)
Requirement already satisfied: PyYAML in /usr/local/lib64/python3.8/site-packages (from ansible-base<2.11,>=2.10.5->ansible==2.10.7) (6.0)
Collecting cryptography
  Downloading cryptography-39.0.1.tar.gz (603 kB)
     ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 603.6/603.6 kB 814.3 kB/s eta 0:00:00
  Installing build dependencies ... done
  Getting requirements to build wheel ... done
  Preparing metadata (pyproject.toml) ... done
Collecting packaging
  Downloading packaging-23.0-py3-none-any.whl (42 kB)
     ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 42.7/42.7 kB 1.0 MB/s eta 0:00:00
Requirement already satisfied: cffi>=1.12 in /usr/local/lib64/python3.8/site-packages (from cryptography->ansible-base<2.11,>=2.10.5->ansible==2.10.7) (1.15.1)
Requirement already satisfied: MarkupSafe>=2.0 in /usr/local/lib64/python3.8/site-packages (from jinja2->ansible-base<2.11,>=2.10.5->ansible==2.10.7) (2.1.2)
Requirement already satisfied: pycparser in /usr/local/lib/python3.8/site-packages (from cffi>=1.12->cryptography->ansible-base<2.11,>=2.10.5->ansible==2.10.7) (2.21)
Building wheels for collected packages: cryptography
  Building wheel for cryptography (pyproject.toml) ... error
  error: subprocess-exited-with-error

  × Building wheel for cryptography (pyproject.toml) did not run successfully.
  │ exit code: 1
  ╰─> [181 lines of output]
      running bdist_wheel
      running build
      running build_py
      creating build
      creating build/lib.linux-s390x-cpython-38
      creating build/lib.linux-s390x-cpython-38/cryptography
      copying src/cryptography/__about__.py -> build/lib.linux-s390x-cpython-38/cryptography
      copying src/cryptography/__init__.py -> build/lib.linux-s390x-cpython-38/cryptography
      copying src/cryptography/exceptions.py -> build/lib.linux-s390x-cpython-38/cryptography
      copying src/cryptography/fernet.py -> build/lib.linux-s390x-cpython-38/cryptography
      copying src/cryptography/utils.py -> build/lib.linux-s390x-cpython-38/cryptography
      creating build/lib.linux-s390x-cpython-38/cryptography/hazmat
      copying src/cryptography/hazmat/__init__.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat
      copying src/cryptography/hazmat/_oid.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat
      creating build/lib.linux-s390x-cpython-38/cryptography/x509
      copying src/cryptography/x509/__init__.py -> build/lib.linux-s390x-cpython-38/cryptography/x509
      copying src/cryptography/x509/base.py -> build/lib.linux-s390x-cpython-38/cryptography/x509
      copying src/cryptography/x509/certificate_transparency.py -> build/lib.linux-s390x-cpython-38/cryptography/x509
      copying src/cryptography/x509/extensions.py -> build/lib.linux-s390x-cpython-38/cryptography/x509
      copying src/cryptography/x509/general_name.py -> build/lib.linux-s390x-cpython-38/cryptography/x509
      copying src/cryptography/x509/name.py -> build/lib.linux-s390x-cpython-38/cryptography/x509
      copying src/cryptography/x509/ocsp.py -> build/lib.linux-s390x-cpython-38/cryptography/x509
      copying src/cryptography/x509/oid.py -> build/lib.linux-s390x-cpython-38/cryptography/x509
      creating build/lib.linux-s390x-cpython-38/cryptography/hazmat/backends
      copying src/cryptography/hazmat/backends/__init__.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/backends
      creating build/lib.linux-s390x-cpython-38/cryptography/hazmat/bindings
      copying src/cryptography/hazmat/bindings/__init__.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/bindings
      creating build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives
      copying src/cryptography/hazmat/primitives/__init__.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives
      copying src/cryptography/hazmat/primitives/_asymmetric.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives
      copying src/cryptography/hazmat/primitives/_cipheralgorithm.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives
      copying src/cryptography/hazmat/primitives/_serialization.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives
      copying src/cryptography/hazmat/primitives/cmac.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives
      copying src/cryptography/hazmat/primitives/constant_time.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives
      copying src/cryptography/hazmat/primitives/hashes.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives
      copying src/cryptography/hazmat/primitives/hmac.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives
      copying src/cryptography/hazmat/primitives/keywrap.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives
      copying src/cryptography/hazmat/primitives/padding.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives
      copying src/cryptography/hazmat/primitives/poly1305.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives
      creating build/lib.linux-s390x-cpython-38/cryptography/hazmat/backends/openssl
      copying src/cryptography/hazmat/backends/openssl/__init__.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/backends/openssl
      copying src/cryptography/hazmat/backends/openssl/aead.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/backends/openssl
      copying src/cryptography/hazmat/backends/openssl/backend.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/backends/openssl
      copying src/cryptography/hazmat/backends/openssl/ciphers.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/backends/openssl
      copying src/cryptography/hazmat/backends/openssl/cmac.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/backends/openssl
      copying src/cryptography/hazmat/backends/openssl/decode_asn1.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/backends/openssl
      copying src/cryptography/hazmat/backends/openssl/dh.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/backends/openssl
      copying src/cryptography/hazmat/backends/openssl/dsa.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/backends/openssl
      copying src/cryptography/hazmat/backends/openssl/ec.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/backends/openssl
      copying src/cryptography/hazmat/backends/openssl/ed25519.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/backends/openssl
      copying src/cryptography/hazmat/backends/openssl/ed448.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/backends/openssl
      copying src/cryptography/hazmat/backends/openssl/hashes.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/backends/openssl
      copying src/cryptography/hazmat/backends/openssl/hmac.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/backends/openssl
      copying src/cryptography/hazmat/backends/openssl/poly1305.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/backends/openssl
      copying src/cryptography/hazmat/backends/openssl/rsa.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/backends/openssl
      copying src/cryptography/hazmat/backends/openssl/utils.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/backends/openssl
      copying src/cryptography/hazmat/backends/openssl/x25519.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/backends/openssl
      copying src/cryptography/hazmat/backends/openssl/x448.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/backends/openssl
      creating build/lib.linux-s390x-cpython-38/cryptography/hazmat/bindings/openssl
      copying src/cryptography/hazmat/bindings/openssl/__init__.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/bindings/openssl
      copying src/cryptography/hazmat/bindings/openssl/_conditional.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/bindings/openssl
      copying src/cryptography/hazmat/bindings/openssl/binding.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/bindings/openssl
      creating build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/asymmetric
      copying src/cryptography/hazmat/primitives/asymmetric/__init__.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/asymmetric
      copying src/cryptography/hazmat/primitives/asymmetric/dh.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/asymmetric
      copying src/cryptography/hazmat/primitives/asymmetric/dsa.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/asymmetric
      copying src/cryptography/hazmat/primitives/asymmetric/ec.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/asymmetric
      copying src/cryptography/hazmat/primitives/asymmetric/ed25519.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/asymmetric
      copying src/cryptography/hazmat/primitives/asymmetric/ed448.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/asymmetric
      copying src/cryptography/hazmat/primitives/asymmetric/padding.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/asymmetric
      copying src/cryptography/hazmat/primitives/asymmetric/rsa.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/asymmetric
      copying src/cryptography/hazmat/primitives/asymmetric/types.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/asymmetric
      copying src/cryptography/hazmat/primitives/asymmetric/utils.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/asymmetric
      copying src/cryptography/hazmat/primitives/asymmetric/x25519.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/asymmetric
      copying src/cryptography/hazmat/primitives/asymmetric/x448.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/asymmetric
      creating build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/ciphers
      copying src/cryptography/hazmat/primitives/ciphers/__init__.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/ciphers
      copying src/cryptography/hazmat/primitives/ciphers/aead.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/ciphers
      copying src/cryptography/hazmat/primitives/ciphers/algorithms.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/ciphers
      copying src/cryptography/hazmat/primitives/ciphers/base.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/ciphers
      copying src/cryptography/hazmat/primitives/ciphers/modes.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/ciphers
      creating build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/kdf
      copying src/cryptography/hazmat/primitives/kdf/__init__.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/kdf
      copying src/cryptography/hazmat/primitives/kdf/concatkdf.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/kdf
      copying src/cryptography/hazmat/primitives/kdf/hkdf.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/kdf
      copying src/cryptography/hazmat/primitives/kdf/kbkdf.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/kdf
      copying src/cryptography/hazmat/primitives/kdf/pbkdf2.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/kdf
      copying src/cryptography/hazmat/primitives/kdf/scrypt.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/kdf
      copying src/cryptography/hazmat/primitives/kdf/x963kdf.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/kdf
      creating build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/serialization
      copying src/cryptography/hazmat/primitives/serialization/__init__.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/serialization
      copying src/cryptography/hazmat/primitives/serialization/base.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/serialization
      copying src/cryptography/hazmat/primitives/serialization/pkcs12.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/serialization
      copying src/cryptography/hazmat/primitives/serialization/pkcs7.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/serialization
      copying src/cryptography/hazmat/primitives/serialization/ssh.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/serialization
      creating build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/twofactor
      copying src/cryptography/hazmat/primitives/twofactor/__init__.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/twofactor
      copying src/cryptography/hazmat/primitives/twofactor/hotp.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/twofactor
      copying src/cryptography/hazmat/primitives/twofactor/totp.py -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/primitives/twofactor
      running egg_info
      writing src/cryptography.egg-info/PKG-INFO
      writing dependency_links to src/cryptography.egg-info/dependency_links.txt
      writing requirements to src/cryptography.egg-info/requires.txt
      writing top-level names to src/cryptography.egg-info/top_level.txt
      reading manifest file 'src/cryptography.egg-info/SOURCES.txt'
      reading manifest template 'MANIFEST.in'
      no previously-included directories found matching 'docs/_build'
      warning: no previously-included files found matching 'vectors'
      warning: no previously-included files matching '*' found under directory 'vectors'
      warning: no previously-included files matching '*' found under directory '.github'
      warning: no previously-included files found matching 'release.py'
      warning: no previously-included files found matching '.readthedocs.yml'
      warning: no previously-included files found matching 'ci-constraints-requirements.txt'
      warning: no previously-included files found matching 'tox.ini'
      warning: no previously-included files found matching 'mypy.ini'
      adding license file 'LICENSE'
      adding license file 'LICENSE.APACHE'
      adding license file 'LICENSE.BSD'
      adding license file 'LICENSE.PSF'
      writing manifest file 'src/cryptography.egg-info/SOURCES.txt'
      copying src/cryptography/py.typed -> build/lib.linux-s390x-cpython-38/cryptography
      copying src/cryptography/hazmat/bindings/_openssl.pyi -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/bindings
      creating build/lib.linux-s390x-cpython-38/cryptography/hazmat/bindings/_rust
      copying src/cryptography/hazmat/bindings/_rust/__init__.pyi -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/bindings/_rust
      copying src/cryptography/hazmat/bindings/_rust/asn1.pyi -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/bindings/_rust
      copying src/cryptography/hazmat/bindings/_rust/ocsp.pyi -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/bindings/_rust
      copying src/cryptography/hazmat/bindings/_rust/pkcs7.pyi -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/bindings/_rust
      copying src/cryptography/hazmat/bindings/_rust/x509.pyi -> build/lib.linux-s390x-cpython-38/cryptography/hazmat/bindings/_rust
      running build_ext
      generating cffi module 'build/temp.linux-s390x-cpython-38/cryptography.hazmat.bindings._openssl.c'
      creating build/temp.linux-s390x-cpython-38
      running build_rust
      /tmp/pip-build-env-4nb5oi_9/overlay/lib/python3.8/site-packages/setuptools/command/build_py.py:202: SetuptoolsDeprecationWarning:     Installing 'cryptography.hazmat.bindings._rust' as data is deprecated, please list it in `packages`.
          !!


          ############################
          # Package would be ignored #
          ############################
          Python recognizes 'cryptography.hazmat.bindings._rust' as an importable package,
          but it is not listed in the `packages` configuration of setuptools.

          'cryptography.hazmat.bindings._rust' has been automatically added to the distribution only
          because it may contain data files, but this behavior is likely to change
          in future versions of setuptools (and therefore is considered deprecated).

          Please make sure that 'cryptography.hazmat.bindings._rust' is included as a package by using
          the `packages` configuration field or the proper discovery methods
          (for example by using `find_namespace_packages(...)`/`find_namespace:`
          instead of `find_packages(...)`/`find:`).

          You can read more about "package discovery" and "data files" on setuptools
          documentation page.


      !!

        check.warn(importable)
      cargo rustc --lib --message-format=json-render-diagnostics --manifest-path src/rust/Cargo.toml --release -v --features pyo3/abi3-py36 pyo3/extension-module -- --crate-type cdylib

          =============================DEBUG ASSISTANCE=============================
          If you are seeing a compilation error please try the following steps to
          successfully install cryptography:
          1) Upgrade to the latest pip and try again. This will fix errors for most
             users. See: https://pip.pypa.io/en/stable/installing/#upgrading-pip
          2) Read https://cryptography.io/en/latest/installation/ for specific
             instructions for your platform.
          3) Check our frequently asked questions for more information:
             https://cryptography.io/en/latest/faq/
          4) Ensure you have a recent Rust toolchain installed:
             https://cryptography.io/en/latest/installation/#rust

          Python: 3.8.13
          platform: Linux-4.18.0-372.32.1.el8_6.s390x-s390x-with-glibc2.2
          pip: n/a
          setuptools: 67.4.0
          setuptools_rust: 1.5.2
          rustc: 1.62.1 (Red Hat 1.62.1-1.module+el8.7.0+16002+ac58477b)
          =============================DEBUG ASSISTANCE=============================

      error: Unable to execute 'cargo' - this package requires Rust to be installed and cargo to be on the PATH
      [end of output]

  note: This error originates from a subprocess, and is likely not a problem with pip.
  ERROR: Failed building wheel for cryptography
Failed to build cryptography
ERROR: Could not build wheels for cryptography, which is required to install pyproject.toml-based projects
bash-4.4#

Pls let me know how I can make this work. Thank you.

The text was updated successfully, but these errors were encountered:

YanFenGuo · 2023-03-03T06:20:14Z

ansible-operator:v1.27.0 has same issue.

everettraven · 2023-03-06T20:43:27Z

@YanFenGuo Thanks for raising this issue! We had a previous issue open that I believe is related to this (#6302) that we thought we had resolved but resulted in some build failures while we were trying to cut the v1.28.0 release.

I think this particular error you are receiving is the exact problem we were encountering in our build process and we had significant trouble resolving that error. I recently created a PR (#6348) to revert our changes that led to the creation of #6302. The plan as of now is to make sure this fix lands in the v1.28.0 release successfully and then create patch releases for v1.26 and v1.27 that fixes the problem in v1.26.1 and v1.27.0.

caixiangibm · 2023-03-10T16:02:23Z

@everettraven , the PR (#6348) reset cryptography = "==3.3.2" . While is it possible for ansible-operator to preset cryptography to 39.0.1 or higher to address vulnerability CVE-2023-23931 on all supported architectures (including amd64/s390x/ppc64le). I noticed there is active PR for that #6297 but no further updates.

everettraven · 2023-03-10T16:13:17Z

@caixiangibm #6348 was reverting a bump to cryptography 39.0.0 that was made in #6269 . This caused some issues in our CI resulting in our s390x and ppc64le builds of the ansible-operator no longer working properly because the cryptography package does not have a wheel built by default for these architectures. We attempted to try and update the build process to build the cryptography package within the image but that would consistently fail in our CI resulting in no images being built and we were unable to figure out why.

Due to this, our short-term plan is to stick with rolling back to cryptography 3.3.2 since that it what it was pinned to previously. We are still looking into and discussing longer term solutions.

openshift-bot · 2023-06-16T01:01:05Z

Issues go stale after 90d of inactivity.

Mark the issue as fresh by commenting /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.
Exclude this issue from closing by commenting /lifecycle frozen.

If this issue is safe to close now please do so with /close.

/lifecycle stale

caixiangibm · 2023-06-16T02:28:38Z

@everettraven , what about your long-term solution for cryptography version upgrade on s390x / ppc64le ?
It seems that we still have to cryptography 3.3.2 pinned currently?

everettraven · 2023-07-03T18:36:11Z

@caixiangibm Apologies for my delayed response! I just recently created a PR (#6483) that is a fairly large update to the ansible operator and dependencies. I included multi-stage builds in that PR in an attempt to make it so that these changes are also available on s390x and ppc64le architectures

caixiangibm · 2023-07-05T01:23:24Z

Thanks @everettraven , hope the PR to be merged soon and we will see it will be fixed in which version.

openshift-bot · 2023-08-04T08:30:22Z

Stale issues rot after 30d of inactivity.

Mark the issue as fresh by commenting /remove-lifecycle rotten.
Rotten issues close after an additional 30d of inactivity.
Exclude this issue from closing by commenting /lifecycle frozen.

If this issue is safe to close now please do so with /close.

/lifecycle rotten
/remove-lifecycle stale

caixiangibm · 2023-08-14T10:05:42Z

@everettraven , Found that the released version of quay.io/operator-framework/ansible-operator:v1.31.0 with your PR - #6483, and cryptography on amd64/s390x/ppc64le all at 41.0.2 version.
While I found it seems "cryptography 41.0.2" is preset "fixed" version on zLinux (s390x) and powerLinux (ppc64le), as when I tried to upgrade "cryptography 41.0.2" to higher version of 41.0.3, it passed on amd64 but got following errors on zLinux (s390x) and powerLinux (ppc64le). Is that as design?

on zLinux (s390x)
bash-4.4# uname -m
s390x
bash-4.4# pip3 install --upgrade cryptography
WARNING: The directory '/opt/ansible/.cache/pip' or its parent directory is not owned or is not writable by the current user. The cache has been disabled. Check the permissions and owner of that directory. If executing pip with sudo, you should use sudo's -H flag.
Requirement already satisfied: cryptography in /usr/local/lib64/python3.9/site-packages (41.0.2)
Collecting cryptography
  Downloading cryptography-41.0.3.tar.gz (630 kB)
     ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 630.1/630.1 kB 4.0 MB/s eta 0:00:00
  Installing build dependencies ... done
  Getting requirements to build wheel ... done
  Preparing metadata (pyproject.toml) ... done
Requirement already satisfied: cffi>=1.12 in /usr/local/lib64/python3.9/site-packages (from cryptography) (1.15.1)
Requirement already satisfied: pycparser in /usr/local/lib/python3.9/site-packages (from cffi>=1.12->cryptography) (2.21)
Building wheels for collected packages: cryptography
  Building wheel for cryptography (pyproject.toml) ... error
  error: subprocess-exited-with-error

  × Building wheel for cryptography (pyproject.toml) did not run successfully.
  │ exit code: 1
  ╰─> [172 lines of output]
      /tmp/pip-build-env-4ji0h1p3/overlay/lib/python3.9/site-packages/setuptools/config/pyprojecttoml.py:66: _BetaConfiguration: Support for `[tool.setuptools]` in `pyproject.toml` is still *beta*.
        config = read_configuration(filepath, True, ignore_option_errors, dist)
      running bdist_wheel
      running build
      running build_py
      creating build
...
      copying src/cryptography/hazmat/bindings/_rust/openssl/x448.pyi -> build/lib.linux-s390x-cpython-39/cryptography/hazmat/bindings/_rust/openssl
      running build_ext
      running build_rust
...
      error: can't find Rust compiler
...
  ERROR: Failed building wheel for cryptography
Failed to build cryptography
ERROR: Could not build wheels for cryptography, which is required to install pyproject.toml-based projects

powerLinux (ppc64le)
the same error

everettraven · 2023-08-14T15:56:29Z

I tried to upgrade "cryptography 41.0.2" to higher version of 41.0.3, it passed on amd64 but got following errors on zLinux (s390x) and powerLinux (ppc64le). Is that as design?

Hi @caixiangibm , this is because cryptography 41.Y.Z doesn't have prebuilt wheels for the s390x and ppc64le architectures. When we build the ansible-operator base image we install Rust and build all our dependencies in a build stage and copy them over to reduce image bloat. If you are wanting to update that package and rebuild the images for that architecture you will likely need to do a similar multi-stage build process to ensure Rust is installed and can build the wheels as necessary for those architectures.

openshift-bot · 2023-09-14T00:00:34Z

Rotten issues close after 30d of inactivity.

Reopen the issue by commenting /reopen.
Mark the issue as fresh by commenting /remove-lifecycle rotten.
Exclude this issue from closing again by commenting /lifecycle frozen.

/close

openshift-ci · 2023-09-14T00:00:39Z

@openshift-bot: Closing this issue.

In response to this:

Rotten issues close after 30d of inactivity.

Reopen the issue by commenting /reopen.
Mark the issue as fresh by commenting /remove-lifecycle rotten.
Exclude this issue from closing again by commenting /lifecycle frozen.

/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

YanFenGuo changed the title ~~Can't install ansible-2.10.7 with ansible-operator:v1.26.1 on s390x platform while 1.26.0 works~~ Can't install ansible-2.10.7 with ansible-operator:v1.26.1 & 1.27.0 on s390x platform while 1.26.0 works Mar 6, 2023

varshaprasad96 assigned everettraven Mar 6, 2023

varshaprasad96 added this to the v1.28.0 milestone Mar 6, 2023

everettraven mentioned this issue Mar 6, 2023

(actions): Fix Ansible-Operator base image build problems due to cryptography package #6348

Merged

2 tasks

efussi mentioned this issue Mar 15, 2023

Package 'cryptography' is missing from non-amd64 images in ansible-operator images > v1.26.0 #6302

Closed

oceanc80 modified the milestones: v1.28.0, Backlog Mar 17, 2023

openshift-ci bot added the lifecycle/stale Denotes an issue or PR has remained open with no activity and has become stale. label Jun 16, 2023

openshift-ci bot added lifecycle/rotten Denotes an issue or PR that has aged beyond stale and will be auto-closed. and removed lifecycle/stale Denotes an issue or PR has remained open with no activity and has become stale. labels Aug 4, 2023

openshift-ci bot closed this as completed Sep 14, 2023

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Can't install ansible-2.10.7 with ansible-operator:v1.26.1 & 1.27.0 on s390x platform while 1.26.0 works #6342

Can't install ansible-2.10.7 with ansible-operator:v1.26.1 & 1.27.0 on s390x platform while 1.26.0 works #6342

YanFenGuo commented Feb 28, 2023 •

edited

Loading

YanFenGuo commented Mar 3, 2023

everettraven commented Mar 6, 2023

caixiangibm commented Mar 10, 2023

everettraven commented Mar 10, 2023

openshift-bot commented Jun 16, 2023

caixiangibm commented Jun 16, 2023

everettraven commented Jul 3, 2023

caixiangibm commented Jul 5, 2023

openshift-bot commented Aug 4, 2023

caixiangibm commented Aug 14, 2023

everettraven commented Aug 14, 2023

openshift-bot commented Sep 14, 2023

openshift-ci bot commented Sep 14, 2023

Can't install ansible-2.10.7 with ansible-operator:v1.26.1 & 1.27.0 on s390x platform while 1.26.0 works #6342

Can't install ansible-2.10.7 with ansible-operator:v1.26.1 & 1.27.0 on s390x platform while 1.26.0 works #6342

Comments

YanFenGuo commented Feb 28, 2023 • edited Loading

Bug Report

What did you do?

What did you expect to see?

What did you see instead? Under which circumstances?

YanFenGuo commented Mar 3, 2023

everettraven commented Mar 6, 2023

caixiangibm commented Mar 10, 2023

everettraven commented Mar 10, 2023

openshift-bot commented Jun 16, 2023

caixiangibm commented Jun 16, 2023

everettraven commented Jul 3, 2023

caixiangibm commented Jul 5, 2023

openshift-bot commented Aug 4, 2023

caixiangibm commented Aug 14, 2023

everettraven commented Aug 14, 2023

openshift-bot commented Sep 14, 2023

openshift-ci bot commented Sep 14, 2023

YanFenGuo commented Feb 28, 2023 •

edited

Loading