Pulp

Suggestion from 19-FEB FIPS checkin: arrange to apply the pulpcore md5-is-useful-sometimes patch, only in the CI/test environment/role

Suggestion: dev-role (only) delivers branched/patched django

I think we could run these commands in the dev and test environments to patch django:

django_location=$(pip show django | grep Location | cut -d' ' -f2)
sed -i 's/hashlib.md5()/hashlib.md5(usedforsecurity=False)/' "$django_location/django/db/backends/utils.py"

daviddavis wrote:

I think we could run these commands in the dev and test environments to patch django:

django_location=$(pip show django | grep Location | cut -d' ' -f2)
sed -i 's/hashlib.md5()/hashlib.md5(usedforsecurity=False)/' "$django_location/django/db/backends/utils.py"

For a dev and test environment, I'm +1 to this.

The django fips fork lives at https://github.com/pulp/django/tree/fips. We should remove this repo as part of this work.

- name: Patch Django
  shell: >-
    django_location=$({{ pulp_install_dir }}/bin/pip show django | grep Location | cut -d' ' -f2)
    sed -i 's/hashlib.md5()/hashlib.md5(usedforsecurity=False)/' "$django_location/django/db/backends/utils.py"