Skip to content

Automatic dep management#2

Open
dannysauer wants to merge 3 commits into
thmo:masterfrom
Kong:dep-management
Open

Automatic dep management#2
dannysauer wants to merge 3 commits into
thmo:masterfrom
Kong:dep-management

Conversation

@dannysauer
Copy link
Copy Markdown

Moved the python modules out to a separate requirements.txt so dependabot can more happily update modules when they're released, and to reduce direct Dockerfile editing. Maybe the requirements.txt should go in /tmp, but I thought it might be useful for diagnostics later. 🤷

I also had to install compat-openssl10 for the containers to behave. I didn't dig in to what requires the old library name. More shrugging. :D

Set package versions in an external requirements.txt file
This facilitates more easily adding/removing modules without editing the Dockerfile itself
Possibly more importantly, this also facilitates having dependabot tracking on the modules so it can make PRs to update the repo as new module versions are published to pypi
Track Python, Docker, and actions
@dannysauer dannysauer changed the title Dep management Automatic dep management Mar 15, 2021
@dannysauer
Copy link
Copy Markdown
Author

dannysauer commented Mar 15, 2021

I left the gunicorn version out of the requirements.txt for this PR, since it's not managed in this fork or upstream currently. In my fork, I have the version on that as well so any dependency update will trigger a container rebuild. There's nothing to necessarily indicate that's desired here, so I erred on the side of caution. :)

I'm a fan of removing gunicorn from the requirements.txt altogether and using this if all the deps should be in there, I guess.

docker build --target build -t pulp-core-build .
docker run --rm pulp-core-build /opt/pulp/bin/pip freeze --all -l -r /opt/pulp/pulp-requirements.txt > requirements.txt
docker rmi pulp-core-build

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant