Dependency Problem with python-pyasn1

[David Rabel]

To install openstack-keystone, the dependency python-cryptography needs to be installed. Current version of python-cryptography in Cloud:OpenStack:Newton is 1.3.1-2.1 which itself has a dependency on python-pyasn1 >= 0.1.8 , but the version of python-pyasn1 in SLES12 is 0.1.7-5.7 . A newer version of python-pyasn1 (0.1.9-53.1) is already part of Cloud:OpenStack:Master, so you can add this repo to get the needed version.

Of course it would be nice to have python-pyasn1 in Cloud:OpenStack:Newton though.

-----------------------------------
Release: 0.1 on 2016-10-21 06:59
SHA: dc3b7fe3fce684dc3a3ea6e13d493a58a3fdac10
Source: http://git.openstack.org/cgit/openstack/openstack-manuals/tree/doc/install-guide/source/keystone-install.rst
URL: http://docs.openstack.org/newton/install-guide-obs/keystone-install.html

[Alexandra Settle (alexandra-settle)]

Hi David,

Could you please clearly indicate your desired outcome from this bug report? Are you asking for the documentation team to indicate in a notation form that you need to install the dependency?

Or would you like python-pyasn1 in Cloud:OpenStack:Newton? If so, this bug is not applicable to the OpenStack manuals team.

[David Rabel (rabel-b1)]

Hi Alexandra,

the desired outcome from this bug report is actually to mention in the documentation that you have to install this dependency and how to do this.

I don't know if it is better to file a bug to get the required version of python-pyasn1 into Cloud:OpenStack:Newton. But I did not even know where to file such a bug.

[Alexandra Settle (alexandra-settle)]

Installing any/all dependencies, as a general rule, is usually up to the deployer and not something we document unless it's a necessary pre-requisite before any given installation or deployment of an OpenStack product.

Although this is an opinion. I would be interested to see what others have to say.

[David Rabel (rabel-b1)]

>"unless it's a necessary pre-requisite before any given installation or deployment of an OpenStack product."

I think it is. Without the correct version of python-pyasn1 you are not able to install openstack-keystone .

The rest of the install-guide always tells you exactly which package you have to install and even which repository you have to use and I think in this place it is basically the same, but it does not work because of a packaging-mistake. This is worth mentioning, I guess.

[Alexandra Settle (alexandra-settle)]

Good point! Might be best in this case if we add a note reminding the deployer to ensure they have the correct version of python-pyasn1 installed. Would this suit you?

[David Rabel (rabel-b1)]

Yes, that would be great. Maybe with a hint to the repository where to find the package version.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/421395

[Alexandra Settle (alexandra-settle)]

David - please review the above patch :)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/421395
Committed: https://git.openstack.org/cgit/openstack/openstack-manuals/commit/?id=937fed40161c3e31b8ea0a9756d28a7f195b8fa0
Submitter: Jenkins
Branch: master

commit 937fed40161c3e31b8ea0a9756d28a7f195b8fa0
Author: Alexandra Settle <email address hidden>
Date: Tue Jan 17 17:27:03 2017 +0000

    Update keystone install instructions with prereq

    Change-Id: I5d1d3a2559afb4ffb7ef8e2961fabb12f89a3202
    Closes-bug: 1635546

[Alexandra Settle (alexandra-settle)]

Reopening this patch. Roger Luethi pointed out a very valid error in my initial patch:

" SLES12 shipped (ships?) an old version of that package. Other reasonably
    current distros (such as Ubuntu 16.04) don't, and the keystone package
    installs there just fine without manually upgrading to the latest version
    (0.2.3).

    Of course users will have to update dependencies that are too old, but
    Ubuntu users (and probably others) were never affected by a problem with
    this particular package and upgrading to the "most recent version" from
    pypi means going off to download and install software from the Internet for
    no good reason (which has not been tested by the distro and might even
    be incompatible).

    I suggest making this comment conditional for SLES and mentioning the
    version that we know is required."

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/444815

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/444815
Committed: https://git.openstack.org/cgit/openstack/openstack-manuals/commit/?id=b78dc338189cf6ca2d1c00087610d84a40dcd86d
Submitter: Jenkins
Branch: master

commit b78dc338189cf6ca2d1c00087610d84a40dcd86d
Author: Alexandra Settle <email address hidden>
Date: Mon Mar 13 10:58:12 2017 +0000

    [install-guide] Update Obs-only comment

    The original patch was pushed with this comment for
    all distros. This was incorrect. It should be noted
    that this change should only be required/noted by
    the SLES users.

    See the bug report for further explanation.

    Change-Id: I06343a4b3fb94d544a3d6332aac79760944d8779
    Closes-bug: 1635546

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/openstack-manuals 15.0.0 release.