From 39087ecc8581227a7c469260485229f71511215d Mon Sep 17 00:00:00 2001 From: Mark Asselstine Date: Tue, 17 Jan 2017 14:34:51 -0500 Subject: python: satisfy setup.py 'setup_requires' Python setuptools will attempt to satisfy the packages defined as 'setup_requires' in setup.py by first looking for the package availability locally and ultimately by downloading it from PyPI. This is actually a huge security hole and packages should move to using pip instead, but this is another story that the upstream packages have to address. This also disregards BB_NO_NETWORK and may prove to introduce host contamination. The best approach is to ensure we have the -native version of the 'setup_requires' packages present such that setup.py will not attempt to complete the download from PyPI. Make 'pbr' -native available and for packages which we have identified as having 'setup_requires' include 'pbr' add the necessary python-pbr-native DEPENDS. Signed-off-by: Mark Asselstine Signed-off-by: Bruce Ashfield --- meta-openstack/recipes-devtools/python/python-heatclient_git.bb | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'meta-openstack/recipes-devtools/python/python-heatclient_git.bb') diff --git a/meta-openstack/recipes-devtools/python/python-heatclient_git.bb b/meta-openstack/recipes-devtools/python/python-heatclient_git.bb index 10428c2..26d86be 100644 --- a/meta-openstack/recipes-devtools/python/python-heatclient_git.bb +++ b/meta-openstack/recipes-devtools/python/python-heatclient_git.bb @@ -9,6 +9,11 @@ DEPENDS += " \ python-pbr \ " +# Satisfy setup.py 'setup_requires' +DEPENDS += " \ + python-pbr-native \ + " + RDEPENDS_${PN} +="python-cliff \ python-httplib2 \ python-iso8601 \ -- cgit v1.2.3-54-g00ecf