From 39087ecc8581227a7c469260485229f71511215d Mon Sep 17 00:00:00 2001 From: Mark Asselstine Date: Tue, 17 Jan 2017 14:34:51 -0500 Subject: python: satisfy setup.py 'setup_requires' Python setuptools will attempt to satisfy the packages defined as 'setup_requires' in setup.py by first looking for the package availability locally and ultimately by downloading it from PyPI. This is actually a huge security hole and packages should move to using pip instead, but this is another story that the upstream packages have to address. This also disregards BB_NO_NETWORK and may prove to introduce host contamination. The best approach is to ensure we have the -native version of the 'setup_requires' packages present such that setup.py will not attempt to complete the download from PyPI. Make 'pbr' -native available and for packages which we have identified as having 'setup_requires' include 'pbr' add the necessary python-pbr-native DEPENDS. Signed-off-by: Mark Asselstine Signed-off-by: Bruce Ashfield --- meta-openstack/recipes-devtools/python/python-pbr_1.8.1.bb | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'meta-openstack/recipes-devtools/python/python-pbr_1.8.1.bb') diff --git a/meta-openstack/recipes-devtools/python/python-pbr_1.8.1.bb b/meta-openstack/recipes-devtools/python/python-pbr_1.8.1.bb index fdf80b3..2018a1b 100644 --- a/meta-openstack/recipes-devtools/python/python-pbr_1.8.1.bb +++ b/meta-openstack/recipes-devtools/python/python-pbr_1.8.1.bb @@ -21,6 +21,10 @@ DEPENDS += " \ python-pip \ " +DEPENDS_class-native += "" + # RDEPENDS_default: RDEPENDS_${PN} += " \ " + +BBCLASSEXTEND = "native" -- cgit v1.2.3-54-g00ecf