image builds broken: c/_cffi_backend.c:15:17: fatal error: ffi.h: No such file or directory

[Adam Gandelman]

gate and local builds are broken:

http://logs.openstack.org/44/317744/1/check/gate-functional-dsvm-astara-appliance-src/bdede77/logs/devstacklog.txt.gz#_2016-05-17_23_43_47_466

The image build fails on a missing build dependency:

05-17 23:43:47.466 | running build_ext
 11 2016-05-17 23:43:47.466 | building '_cffi_backend' extension
 10 2016-05-17 23:43:47.466 | creating build/temp.linux-x86_64-2.7
  9 2016-05-17 23:43:47.466 | creating build/temp.linux-x86_64-2.7/c
  8 2016-05-17 23:43:47.466 | x86_64-linux-gnu-gcc -pthread -DNDEBUG -g -fwrapv -O2 -Wall -Wstrict-prototypes -fno-strict-aliasing -D_FORTIFY_SOURCE=2 -g -fstack-protector-strong -Wformat -Werror=format-security -fPIC -DUSE__THREAD -I/usr/include/ffi -I/usr/include/libffi -I/usr/include/python2.7 -c c/_cffi _backend.c -o build/temp.linux-x86_64-2.7/c/_cffi_backend.o
  7 2016-05-17 23:43:47.466 | c/_cffi_backend.c:15:17: fatal error: ffi.h: No such file or directory
  6 2016-05-17 23:43:47.466 | #include <ffi.h>
  5 2016-05-17 23:43:47.466 | ^
  4 2016-05-17 23:43:47.466 | compilation terminated.
  3 2016-05-17 23:43:47.466 | error: command 'x86_64-linux-gnu-gcc' failed with exit status 1
  2 2016-05-17 23:43:47.466 |

In the astara-appliance's ansible DIB element, we install a couple of pip requirements:

https://git.openstack.org/cgit/openstack/astara-appliance/tree/diskimage-builder/elements/ansible/install.d/ansible-source-install/30-ansible-source#n30

$ANSIBLE_VENV_DIR/bin/pip install paramiko PyYAML jinja2 httplib2

Note that these are unconstrainted wrt versions. Looks like we now pull in a newer paramiko 2.0, which swapped its pycrypto dependency for the cryptography library, which requires libffi-dev to build.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/liberty
Review: https://review.openstack.org/318366

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/318366
Committed: https://git.openstack.org/cgit/openstack/astara-appliance/commit/?id=b984661c43d95f0269d7dad059390cde3d568bd6
Submitter: Jenkins
Branch: stable/liberty

commit b984661c43d95f0269d7dad059390cde3d568bd6
Author: Adam Gandelman <email address hidden>
Date: Tue May 17 14:44:54 2016 -0700

    DIB: add libffi-dev to ansible element's build deps

    Newer versions of paramiko (pulled in via ansible install)
    now require libffi-dev to build.

    Closes-bug: #1583321
    Change-Id: If3794ededacfcf53857328a19627cf0331878822
    (cherry picked from commit ba8bae537289bd930e03845826dbbcfe85df6c72)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/317744
Committed: https://git.openstack.org/cgit/openstack/astara-appliance/commit/?id=010808ffdbb972ffaf6b52624216ca3960e208c9
Submitter: Jenkins
Branch: master

commit 010808ffdbb972ffaf6b52624216ca3960e208c9
Author: Adam Gandelman <email address hidden>
Date: Tue May 17 14:44:54 2016 -0700

    DIB: add libffi-dev to ansible element's build deps

    Newer versions of paramiko (pulled in via ansible install)
    now require libffi-dev to build.

    Closes-bug: #1583321
    Change-Id: If3794ededacfcf53857328a19627cf0331878822

[Doug Hellmann (doug-hellmann)]

This issue was fixed in the openstack/astara-appliance 9.0.0.0b1 development milestone.