Bug 2072053 - Remove python-pynacl and libsodium from the distribution
Summary: Remove python-pynacl and libsodium from the distribution
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: distribution
Version: 17.0 (Wallaby)
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: rc
: 17.1
Assignee: Jon Schlueter
QA Contact: Lon Hohberger
URL:
Whiteboard:
Depends On: 2072044
Blocks:
TreeView+ depends on / blocked
 
Reported: 2022-04-05 13:52 UTC by Lon Hohberger
Modified: 2023-08-09 11:45 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: No Doc Update
Doc Text:
Clone Of:
Environment:
Last Closed: 2023-05-26 13:16:11 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker OSP-14519 0 None None None 2022-04-05 14:01:21 UTC

Description Lon Hohberger 2022-04-05 13:52:01 UTC
Description of problem: These packages are utilized in only one, non-default location - by python-oslo-db talking to MySQL with auth_ed25519 for password hashing.

Since we would like to drop support for this feature, we can drop these packages as well.

Comment 1 Jon Schlueter 2022-06-23 19:54:09 UTC
still used in a couple of other places which will have to be cleaned up first.

Comment 2 Lon Hohberger 2022-06-24 17:38:56 UTC
It's (unfortunately) broadly used. So, we can't drop it at this point. FIPS installations will simply lack certain features.

Comment 3 Jon Schlueter 2023-05-16 13:01:59 UTC
digging on this again

libsodium -> python3-pynacl
libsodium -> zeromq

python3-pynacl -> python3-paramiko

python3-paramiko -> 

    openstack-heat-common-1:16.1.1-1.20230416001030.2d5a87d.el9ost.noarch
    python3-cinder-common-1:18.2.2-1.20230411050850.109f91a.el9ost.noarch
    python3-heat-tests-tempest-0:1.5.0-1.20220727192425.ba43685.el9ost.noarch
    python3-manila-1:12.1.3-1.20230224120957.1274f07.el9ost.noarch
    python3-neutron-tests-tempest-0:2.1.0-1.20230222141314.021ce91.el9ost.noarch
    python3-nova-1:23.2.3-1.20230425111023.9813eac.el9ost.noarch
    python3-os-ken-0:1.4.1-1.20220727164145.018d755.el9ost.noarch
    python3-os-xenapi-0:0.3.4-1.20220727134446.12c68d0.el9ost.noarch
    python3-tempest-1:33.0.0-1.20230406160852.1580f6f.el9ost.noarch
    python3-tripleo-common-0:15.4.1-1.20230427121020.85a3a44.el9ost.noarch


zeromq -> python3-zmq
python3-zmq -> python3-tinyrpc
python3-tinyrpc -> python3-os-ken
python3-os-ken -> 
    openstack-neutron-bgp-dragent-0:18.1.1-1.20221108161121.1ba3fb1.el9ost.noarch
    python3-neutron-1:18.6.1-1.20230424171011.41e13d6.el9ost.noarch
    python3-neutron-lib-0:2.10.2-1.20221021161157.6bbae46.el9ost.noarch
    python3-neutron-tests-tempest-0:2.1.0-1.20230222141314.021ce91.el9ost.noarch


So unless we can break the linkages we will have to continue shipping these.


Note You need to log in before you can comment on or make changes to this bug.