Bug 2072053

Summary:	Remove python-pynacl and libsodium from the distribution
Product:	Red Hat OpenStack	Reporter:	Lon Hohberger <lhh>
Component:	distribution	Assignee:	Jon Schlueter <jschluet>
Status:	CLOSED WONTFIX	QA Contact:	Lon Hohberger <lhh>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	17.0 (Wallaby)	CC:	jjoyce, jschluet, mburns, shrjoshi
Target Milestone:	rc	Keywords:	Triaged
Target Release:	17.1
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	No Doc Update
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2023-05-26 13:16:11 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2072044
Bug Blocks:

Description Lon Hohberger 2022-04-05 13:52:01 UTC

Description of problem: These packages are utilized in only one, non-default location - by python-oslo-db talking to MySQL with auth_ed25519 for password hashing.

Since we would like to drop support for this feature, we can drop these packages as well.

Comment 1 Jon Schlueter 2022-06-23 19:54:09 UTC

still used in a couple of other places which will have to be cleaned up first.

Comment 2 Lon Hohberger 2022-06-24 17:38:56 UTC

It's (unfortunately) broadly used. So, we can't drop it at this point. FIPS installations will simply lack certain features.

Comment 3 Jon Schlueter 2023-05-16 13:01:59 UTC

digging on this again

libsodium -> python3-pynacl
libsodium -> zeromq

python3-pynacl -> python3-paramiko

python3-paramiko -> 

    openstack-heat-common-1:16.1.1-1.20230416001030.2d5a87d.el9ost.noarch
    python3-cinder-common-1:18.2.2-1.20230411050850.109f91a.el9ost.noarch
    python3-heat-tests-tempest-0:1.5.0-1.20220727192425.ba43685.el9ost.noarch
    python3-manila-1:12.1.3-1.20230224120957.1274f07.el9ost.noarch
    python3-neutron-tests-tempest-0:2.1.0-1.20230222141314.021ce91.el9ost.noarch
    python3-nova-1:23.2.3-1.20230425111023.9813eac.el9ost.noarch
    python3-os-ken-0:1.4.1-1.20220727164145.018d755.el9ost.noarch
    python3-os-xenapi-0:0.3.4-1.20220727134446.12c68d0.el9ost.noarch
    python3-tempest-1:33.0.0-1.20230406160852.1580f6f.el9ost.noarch
    python3-tripleo-common-0:15.4.1-1.20230427121020.85a3a44.el9ost.noarch


zeromq -> python3-zmq
python3-zmq -> python3-tinyrpc
python3-tinyrpc -> python3-os-ken
python3-os-ken -> 
    openstack-neutron-bgp-dragent-0:18.1.1-1.20221108161121.1ba3fb1.el9ost.noarch
    python3-neutron-1:18.6.1-1.20230424171011.41e13d6.el9ost.noarch
    python3-neutron-lib-0:2.10.2-1.20221021161157.6bbae46.el9ost.noarch
    python3-neutron-tests-tempest-0:2.1.0-1.20230222141314.021ce91.el9ost.noarch


So unless we can break the linkages we will have to continue shipping these.