group_vars: repo_all: Always build cryptography from source
cryptography may bundle openssl in the wheel and that causes symbol
conflicts if a different openssl is provided by the distribution.
As such, it's probably safer to re-build cryptography ourselves just
to be sure that the correct distro libraries are used. This has been
addressed in openstack-ansible-tests/test-vars.yaml
(https://review.openstack.org/#/c/486580/) to fix the CI tests but the
problem is also present on regular deployments so we set it in the
group_variables for the repo_all group of hosts so it's built from
source in the wheel repository.
Reviewed: https:/ /review. openstack. org/486173 /git.openstack. org/cgit/ openstack/ openstack- ansible/ commit/ ?id=9220732958c 2d0303e5a4b77a4 84a412ef6d605b
Committed: https:/
Submitter: Jenkins
Branch: master
commit 9220732958c2d03 03e5a4b77a484a4 12ef6d605b
Author: Markos Chandras <email address hidden>
Date: Fri Jul 21 17:07:00 2017 +0100
group_vars: repo_all: Always build cryptography from source
cryptography may bundle openssl in the wheel and that causes symbol ansible- tests/test- vars.yaml /review. openstack. org/#/c/ 486580/) to fix the CI tests but the
conflicts if a different openssl is provided by the distribution.
As such, it's probably safer to re-build cryptography ourselves just
to be sure that the correct distro libraries are used. This has been
addressed in openstack-
(https:/
problem is also present on regular deployments so we set it in the
group_variables for the repo_all group of hosts so it's built from
source in the wheel repository.
Related-Bug: 1705521 /github. com/pyca/ cryptography/ issues/ 3804 4c633930bc7e8cc 65397f86659
Link: https:/
Change-Id: I54ba3c1fa48a2f