Bug 1165620

*** Bug 1165673 has been marked as a duplicate of this bug. ***

Asking python-PyYAML maintainer for help

*** Bug 1165544 has been marked as a duplicate of this bug. ***

*** Bug 1165592 has been marked as a duplicate of this bug. ***

Update packages python-PyYAML is to new for docker-compose in Leap.

python-PyYAML in Leap_15.1:Update is version 5.1.2

docker-compose from Leap_15.1 has in spec:
Requires:       python-PyYAML           >= 3.11
Conflicts:      python-PyYAML           >= 4

So i think docker-compose must also update.

maybe need to replace docker-compose with python-docker-compose

Have update to 1.25.1 from devel:python:backports

But you also must update:

python-docker
python-docker-pycreds
python-cached-property
python-dockerpty
python-texttable
python-websocket-client
python-paramiko

I have not tested if docker-compose runs well!

But now i can install patch openSUSE-2020-290 (Update python-PyYAML).

I had to choose on zypper patch if I want to remove docker-compose or not install a security patch. (All the same reasons but those two are not acceptable choices for a stable release like Leap).

Any update on this issue?

what is the actual **question** that is the reason for NEEDINFO?

also, what's the state of things?

I will just try a docker-compose without the upper bound limit of PyYAML.


can you check it out from the stgaged incident?

http://download.opensuse.org/repositories/openSUSE:/Maintenance:/12121/openSUSE_Leap_15.1_Update/

I installed docker-compose from http://download.opensuse.org/repositories/openSUSE:/Maintenance:/12121/openSUSE_Leap_15.1_Update, and ran an AWX deployment on my laptop, seems to work just fine, so I'd say this docker-compose package is good to go.

openSUSE-RU-2020:0347-1: An update that has one recommended fix can now be installed.

Category: recommended (moderate)
Bug References: 1165620
CVE References: 
Sources used:
openSUSE Leap 15.1 (src):    docker-compose-1.17.0-lp151.4.3.1

Now docker-compose has installed no problem, but when trying to call, gives this

Traceback (most recent call last):
  File "/usr/bin/docker-compose", line 6, in <module>
    from pkg_resources import load_entry_point
  File "/usr/lib/python2.7/site-packages/pkg_resources/__init__.py", line 3123, in <module>
    @_call_aside
  File "/usr/lib/python2.7/site-packages/pkg_resources/__init__.py", line 3107, in _call_aside
    f(*args, **kwargs)
  File "/usr/lib/python2.7/site-packages/pkg_resources/__init__.py", line 3136, in _initialize_master_working_set
    working_set = WorkingSet._build_master()
  File "/usr/lib/python2.7/site-packages/pkg_resources/__init__.py", line 580, in _build_master
    return cls._build_from_requirements(__requires__)
  File "/usr/lib/python2.7/site-packages/pkg_resources/__init__.py", line 593, in _build_from_requirements
    dists = ws.resolve(reqs, Environment())
  File "/usr/lib/python2.7/site-packages/pkg_resources/__init__.py", line 781, in resolve
    raise DistributionNotFound(req, requirers)
pkg_resources.DistributionNotFound: The 'PyYAML<4,>=3.10' distribution was not found and is required by docker-compose

I have the same problem as Igor.  How is this even passing openqa?

docker-compose not tested by openqa.

I was confident after the report in comment #c12 by Matthias that it works though.

same "DistributionNotFound" problem for me.

Wouldn't this be maybe a good opportunity to think about upgrading our distro version of docker-compose to a more recent? 
1.17 is from 2017, current is 1.25.4!

(In reply to Michael from Offenbach Germany from comment #17)
> same "DistributionNotFound" problem for me.
> 
> Wouldn't this be maybe a good opportunity to think about upgrading our
> distro version of docker-compose to a more recent? 
> 1.17 is from 2017, current is 1.25.4!

Yes. See comment 7.
But it is not in SLE. :-(

(In reply to Marcus Meissner from comment #16)
> docker-compose not tested by openqa.
> 
> I was confident after the report in comment #c12 by Matthias that it works
> though.

I already had python2-PyYAML installed - so docker-compose worked just fine.

Maybe the update needs some more dependency trickery.

(In reply to Marcus Meissner from comment #16)
> docker-compose not tested by openqa.
> 
> I was confident after the report in comment #c12 by Matthias that it works
> though.

There are tests and for 15.1 and 15.2 which fail now: https://openqa.opensuse.org/tests/1208217#step/docker_compose/15

(In reply to Mathias Homann from comment #19)
> (In reply to Marcus Meissner from comment #16)
> > docker-compose not tested by openqa.
> > 
> > I was confident after the report in comment #c12 by Matthias that it works
> > though.
> 
> I already had python2-PyYAML installed - so docker-compose worked just fine.
> 
> Maybe the update needs some more dependency trickery.

hmm, no, something seems strange if it works for you.

pkg_resources.DistributionNotFound: The 'PyYAML<4,>=3.10' distribution was not found and is required by docker-compose

The current package still expects PyYAML < 4 but the current updated version on 15.1 is 5.x.

I've built a docker-compose package with that upper limit removed (for real) and used that for a few days now. Seems to work while I also agree that 1.17 is quite old and has other known issues.

can you submit tis against openSUSE:Leap:15.1:Update then I can process it and release it

created request id 786522

This is an autogenerated message for OBS integration:
This bug (1165620) was mentioned in
https://build.opensuse.org/request/show/786522 15.1 / docker-compose

openSUSE-RU-2020:0363-1: An update that has one recommended fix can now be installed.

Category: recommended (moderate)
Bug References: 1165620
CVE References: 
Sources used:
openSUSE Backports SLE-15-SP1 (src):    docker-compose-1.17.0-bp151.4.3.1

openSUSE-RU-2020:0364-1: An update that has one recommended fix can now be installed.

Category: recommended (moderate)
Bug References: 1165620
CVE References: 
Sources used:
openSUSE Leap 15.1 (src):    docker-compose-1.17.0-lp151.4.6.1

openSUSE-RU-2020:0390-1: An update that has one recommended fix can now be installed.

Category: recommended (moderate)
Bug References: 1165620
CVE References: 
Sources used:
openSUSE Backports SLE-15-SP1 (src):    docker-compose-1.17.0-bp151.4.6.1

FYI works fine for me after zypper up to the new 1.17.0-lp151.4.6.1 pkg.

THANKS!

Yep, confirming, all is ok now.

Fixed

This is an autogenerated message for OBS integration:
This bug (1165620) was mentioned in
https://build.opensuse.org/request/show/940713 Backports:SLE-12-SP5 / docker-compose+python-docker