Bug 2295602

Summary: python-cryptography fails to build in ELN
Product: [Fedora] Fedora Reporter: Miro Hrončok <mhroncok>
Component: python-cryptographyAssignee: Jeremy Cline <jeremy>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: rawhideCC: cheimes, ftrivino, jeremy, python-packagers-sig, yselkowi
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: python-cryptography-43.0.0-2.fc42 python-cryptography-43.0.0-2.fc41 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2024-08-20 13:43:40 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Miro Hrončok 2024-07-03 16:44:20 UTC
Description of problem:
After https://src.fedoraproject.org/rpms/python-cryptography/c/cb16ef22f994a7232a1c9825f4cb99473cfae70d?branch=rawhide python-cryptography fails to build in ELN.

The error is:

    error: the configured Python interpreter version (3.13) is newer than PyO3's maximum supported version (3.12)

Version-Release number of selected component: python-cryptography-42.0.8-1.eln141


Steps to Reproduce: fedpkg --release eln build (--scratch)

Actual results: fails to build


Expected results: builds fine


Additional info:
Additionally, the package now depends on tox (unwanted in ELN) due to the -t flag for %pyproject_buildrequires. But that requirement is likely bogus because there is no tox configuration.

Comment 1 Miro Hrončok 2024-07-03 16:49:29 UTC
> Additionally, the package now depends on tox (unwanted in ELN) due to the -t flag for %pyproject_buildrequires. But that requirement is likely bogus because there is no tox configuration.

https://src.fedoraproject.org/rpms/python-cryptography/pull-request/34

Comment 2 Jeremy Cline 2024-07-03 17:36:58 UTC
(In reply to Miro Hrončok from comment #1)
> > Additionally, the package now depends on tox (unwanted in ELN) due to the -t flag for %pyproject_buildrequires. But that requirement is likely bogus because there is no tox configuration.
> 
> https://src.fedoraproject.org/rpms/python-cryptography/pull-request/34

Merged that.

As for PyO3, we can either build with PYO3_USE_ABI3_FORWARD_COMPATIBILITY=1 or ELN can bump to PyO3 >= 0.22.0.

Comment 3 Miro Hrončok 2024-07-03 17:51:07 UTC
> or ELN can bump to PyO3 >= 0.22.0.

The ELN build bundles old PyO3.

Comment 4 Yaakov Selkowitz 2024-07-03 18:44:32 UTC
I used PYO3_USE_ABI3_FORWARD_COMPATIBILITY=1 to fix a similar issue in python-rpds-py; I suggest doing the same here.

Comment 5 Jeremy Cline 2024-07-03 18:46:00 UTC
Ah, I see.

Looking at the Rawhide logs it is also building on PyO3 0.20, but I'm not familiar enough with PyO3 or the Fedora Rust packaging to see where it's setting PYO3_USE_ABI3_FORWARD_COMPATIBILITY - I assume it must be since it (clearly) doesn't build without it. I'm inclined to hack it in for eln until upstream migrates to 0.22.

https://src.fedoraproject.org/rpms/python-cryptography/pull-request/35

Comment 6 Fedora Update System 2024-07-30 15:33:20 UTC
FEDORA-2024-f62eda62b5 (python-cryptography-43.0.0-2.fc41, rust-asn1-0.16.2-1.fc41, and 1 more) has been submitted as an update to Fedora 41.
https://bodhi.fedoraproject.org/updates/FEDORA-2024-f62eda62b5

Comment 7 Fedora Update System 2024-08-20 10:40:56 UTC
FEDORA-2024-42d8c5bd2d (freeipa-4.12.1-3.fc42, pyOpenSSL-24.2.1-1.fc42, and 4 more) has been submitted as an update to Fedora 42.
https://bodhi.fedoraproject.org/updates/FEDORA-2024-42d8c5bd2d

Comment 8 Fedora Update System 2024-08-20 13:43:40 UTC
FEDORA-2024-42d8c5bd2d (freeipa-4.12.1-3.fc42, pyOpenSSL-24.2.1-1.fc42, and 4 more) has been pushed to the Fedora 42 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 9 Fedora Update System 2024-08-26 13:55:59 UTC
FEDORA-2024-f62eda62b5 (freeipa-4.12.1-2.fc41, pyOpenSSL-24.2.1-1.fc41, and 3 more) has been pushed to the Fedora 41 stable repository.
If problem still persists, please make note of it in this bug report.