This update resolves multiple issues with python-cryptography
causing keystone server and nova deployment to fail.
This is a temporary workaround until I196f025dbf1a9ac297946b8165620676645f7210
has landed and the extraneous dependency on python-cryptography (the
package) has been removed.
Change-Id: Ifb29b9089197c0429a5fc1cd08a25d2095d481f1
| ... | ... |
@@ -88,6 +88,22 @@ else |
| 88 | 88 |
export PYTHON=$(which python 2>/dev/null) |
| 89 | 89 |
fi |
| 90 | 90 |
|
| 91 |
+if is_suse; then |
|
| 92 |
+ # novnc has an extraneous dependency on pyOpenSSL, which causes symbol conflicts |
|
| 93 |
+ # in the bundled libssl of python-cryptography. when both are loaded into the same |
|
| 94 |
+ # process, they start hanging or segfaulting. |
|
| 95 |
+ install_package novnc |
|
| 96 |
+ # deinstall the extra but irrelevant dependencies |
|
| 97 |
+ sudo rpm -e --nodeps python-cffi python-cryptography python-pyOpenSSL |
|
| 98 |
+ # reinstall cffi which got overwriten by the package. |
|
| 99 |
+ sudo pip install -I cffi |
|
| 100 |
+ # now reinstall cryptography from source, in order to rebuilt it against the |
|
| 101 |
+ # system libssl rather than the bundled openSSL 1.1, which segfaults when combined |
|
| 102 |
+ # with the system provided (which libpython links against) openSSL 1.0 |
|
| 103 |
+ sudo pip install cryptography --no-binary :all: |
|
| 104 |
+fi |
|
| 105 |
+ |
|
| 106 |
+ |
|
| 91 | 107 |
# Mark end of run |
| 92 | 108 |
# --------------- |
| 93 | 109 |
|