-
Notifications
You must be signed in to change notification settings - Fork 26
MAINT: wheels 1.8.1 prep #167
MAINT: wheels 1.8.1 prep #167
Conversation
* restore Pythran for Windows builds to see if we are good to go there (if so, we can close MacPythongh-162 as well) * bump `BUILD_COMMIT` to point to the latest relevant maintenance branch--this should also tell me if anything strange is happening with things that may be pinned since the `1.8.0` rel
All Linux test runs on Azure and Travis (various platforms) suffer a single test failure:
|
I think it is missing a pipe after |
* try pinning setuptools for Linux jobs; the wheel versions seem wrong with bleeding edge setuptools
I think something is wrong with the wheel building somehow. If I look at the final wheel name produced in Linux CI there is a weird version number with
For a MacOS job it looks normal:
The Linux job I checked uses a crazy-new version of |
The version problem looks familiar, NumPy CI had similar problems with some tests that used docker images and I'm sort of expecting them for 1.22.4. See https://github.com/numpy/numpy/pull/21350/files for an example. This may need fixing in multibuild if that is what you are using. @matthew-brett Thoughts? EDIT: https://github.com/numpy/numpy/pull/21368/files is another example. |
Another option might be to pin the manylinux docker version. I think the problem started upstream a couple of days ago, but didn't test that solution because the other fixes worked. |
Crazy, maybe related to this Git vulnerability: https://github.blog/2022-04-12-git-security-vulnerability-announced/ Maybe I should look into pinning the docker version if I can do that without too much hassle using an env variable or similar, without adjusting upstream. |
@tylerjereddy That git change sounds right. I did check git releases and didn't see that, but the announcement timing is right. |
There is a |
I opened a multibuild issue for this: multi-build/multibuild#470 |
Thanks Chuck, yeah I'm just working on other stuff at the moment, but I'll think about some of your suggestions. |
* try pinning `DOCKER_TEST_IMAGE` to avoid the issues related to: https://github.blog/2022-04-12-git-security-vulnerability-announced/
Ok, let's see what happens with a pin to a March 31 version of the manylinux2014 images. |
Hmm, I suspect this may need to be fixed upstream--for example, not only is there an issue using the hardcoded docker image, but the version number is already corrupted from the "build" of the wheel before |
Well, another option may be to try to stick the |
This reverts commit a090151.
* try using this command: pypa/manylinux#1309 (comment) * to deal with this in newer manylinux images: https://github.blog/2022-04-12-git-security-vulnerability-announced/
* try to address some of the issues with `git config` commands showing up in CI
* revert some `config.sh` changes that were not helping
* try shimming the `git` commands in `clean_code()` based on feedback from Matti related to the new `git` vulnerability fix
|
* disable most of the CI while I debug
I've cut the CI down to a single Linux Azure entry while I debug with some of the recent suggestions. |
* try adding the safe directory command inside of `repo_dir`, which presumably will include running this command in each of the submodules
4cc2155
to
f464405
Compare
I can reproduce locally if I run And I can also reproduce that
Why isn't the command helping? Not sure, and amazingly, it doesn't even help if I add the option on both users involved. Only running as the true/genuine owning user works for me at the moment. |
For a quick fix, I think the safe directory can be |
* this is an attempt to deal with the new security measure in git: https://github.blog/2022-04-12-git-security-vulnerability-announced/ * it has been blocking the release of SciPy 1.8.1 and NumPy point release for some time * I'm going to try to point the problem wheels repo PR at the hash of this commit/branch before merging if possible: MacPython/scipy-wheels#167 * based on feedback from Henry over here, this does seem to help locally: pypa/manylinux#1309 (comment)
Alright, Henry's code change suggestion seems to help locally, so now temporarily pointing this PR at my fork and a commit that modifies |
Given the success of Henry's suggestion, I've effectively restored the original diff that simply points to the latest version of the maintenance branch and restores Pythran usage on Windows. I'll let this run overnight--fingers crossed. |
the one windows failure is sporadic, restarted |
The single test failure in 1/5 Appveyor builds is just the |
restore Pythran for Windows builds to see
if we are good to go there (if so, we can close
BUG: cl.exe used instead of clang-cl.exe for Windows pythran building #162 as well)
bump
BUILD_COMMIT
to point to the latestrelevant maintenance branch--this should also
tell me if anything strange is happening with
things that may not be pinned since the
1.8.0
rel