Skip to content

Update pip to 9.0.3 for TLS brownouts#84

Closed
faltad wants to merge 1 commit intobazel-contrib:masterfrom
faltad:master
Closed

Update pip to 9.0.3 for TLS brownouts#84
faltad wants to merge 1 commit intobazel-contrib:masterfrom
faltad:master

Conversation

@faltad
Copy link
Copy Markdown

@faltad faltad commented Apr 5, 2018

In short, the python infrastructure is using a brownout period which causes pip install to fail:

During that window, clients accessing pypi.python.org with clients that do not support TLSv1.2 will receive an HTTP 403 with the error message "This is a brown out of TLSv1 support. TLSv1 support is going away soon, upgrade to a TLSv1.2+ capable client.".

See:
http://pyfound.blogspot.fi/2017/01/time-to-upgrade-your-python-tls-v12.html

The errors provided by bazel aren't very clear either (even though it's mostly due to pip):

$> bazel --batch run apps/yap/etl:etl --define CONFIG=prod --  bank_operations_importer_job -c ~/Downloads/1712\ Looker\ DrillDown.csv
ERROR: error loading package '': Encountered error while reading extension file 'requirements.bzl': no such package '@all_requirements//': pip_import failed: Collecting awscli==1.11.133 (from -r /Users/J-B/Work/backend/requirements.txt (line 1))
 (  Could not find a version that satisfies the requirement awscli==1.11.133 (from -r /Users/J-B/Work/backend/requirements.txt (line 1)) (from versions: )
No matching distribution found for awscli==1.11.133 (from -r /Users/J-B/Work/backend/requirements.txt (line 1))
)
ERROR: error loading package '': Encountered error while reading extension file 'requirements.bzl': no such package '@all_requirements//': pip_import failed: Collecting awscli==1.11.133 (from -r /Users/J-B/Work/backend/requirements.txt (line 1))
 (  Could not find a version that satisfies the requirement awscli==1.11.133 (from -r /Users/J-B/Work/backend/requirements.txt (line 1)) (from versions: )
No matching distribution found for awscli==1.11.133 (from -r /Users/J-B/Work/backend/requirements.txt (line 1))
)
INFO: Elapsed time: 8.291s
FAILED: Build did NOT complete successfully (0 packages loaded)
ERROR: Build failed. Not running target

From the official mailing list: https://mail.python.org/pipermail/python-announce-list/2018-April/011885.html

Pip 9.0.3 supports TLSv1.2 when running under system Python on macOS <
10.13. Official release notes: https://pip.pypa.io/en/stable/news/

@jkinkead
Copy link
Copy Markdown
Contributor

jkinkead commented Apr 6, 2018

Hah, I also did this - although I updated some other junk using 9.0.1 as well.

See issue #87 + PR #88 .

@duggelz
Copy link
Copy Markdown

duggelz commented Apr 7, 2018

Thanks for this. I merged PR 88 which was substantially the same as this.

@duggelz duggelz closed this Apr 7, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

cla: yes

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@faltad @jkinkead @duggelz @googlebot