Issue #975
closed
python-pulp-repoauth requires pulp-server
Description
Some Pulp deployments require content to be served from an httpd instance that is distinct from the "main" Pulp server that services API calls. Such an httpd only serves content and performs repo auth.
Currently, installing python-pulp-repoauth requires pulp-server. This prevents a "lightweight" content delivery httpd instance from being created. Repo authentication should only require at most, pulp-common and not all of pulp-server.
repro steps:
- yum install python-pulp-repoauth
expected result:
python-pulp-repoauth installs with at most, python-pulp-common as a dependency
actual result:
pulp-server is installed
Updated by cduryee over 8 years ago
- Status changed from ASSIGNED to POST
Added by cduryee over 8 years ago
Added by cduryee over 8 years ago
better support for installing standalone repoauth
Previously, the pulp repoauth RPM was not installable without also installing the rest of pulp-server. This was not ideal for instances that served protected content to client systems, but did not run full Pulp installations.
This patch does the following:
-
moves an openssl lib from
pulp.server.commontopulp.repoauth. Note that we couldn't move it topulp.commonsince our openssl code has some calls tosubprocessthat do not work on Python 2.4. -
adds a few deps to python-pulp-repoauth that previously were provided by pulp-server's deps
-
fixes an unrelated issue where a "real" conf file was used in a few unit tests
I confirmed that no plugins are using pulp.server.common.*.
Fixes #975
Updated by cduryee over 8 years ago
- Status changed from POST to MODIFIED
- % Done changed from 0 to 100
Applied in changeset pulp|2888c3784d9a58b76da6f896c5bd2fa23106703d.
Added by cduryee over 8 years ago
Break out OID validation into its own RPM
Previously, OID validation was bundled in with the repoauth RPM. This causes problems for users who want to enable cert-based repo authentication, but do not want this particular authenticator installed.
Instead, break out OID validation into its own RPM. This lets users install it or leave it out depending on if they want this authenticator.
fixes #975
Added by cduryee over 8 years ago
Break out OID validation into its own RPM
Previously, OID validation was bundled in with the repoauth RPM. This causes problems for users who want to enable cert-based repo authentication, but do not want this particular authenticator installed.
Instead, break out OID validation into its own RPM. This lets users install it or leave it out depending on if they want this authenticator.
fixes #975
Added by cduryee over 8 years ago
Depend on python-pulp-oid_validation instead of python-pulp-repoauth
Python-pulp-repoauth now supplies the repo auth framework but does not supply any authenticatiors. The OID validation RPM supplies the actual cert check now.
This depends on https://github.com/pulp/pulp/pull/1869/.
fixes #975
Updated by cduryee over 8 years ago
Applied in changeset pulp|5c5d346d2a19cf4051fbac78af43baa1f87b95c2.
Updated by cduryee over 8 years ago
Applied in changeset pulp_rpm:3a8761dae3ae2d31521e2beacb6fab558f21530a.
Updated by dkliban@redhat.com over 8 years ago
- Status changed from MODIFIED to 5
Updated by igulina@redhat.com about 8 years ago
- Status changed from 5 to 6
There are no any pulp rpm installed and installation of python-pulp-repoauth doesn't require pulp-server:
>> rpm -qa pulp*
>> yum install python-pulp-repoauth
....
Dependencies Resolved
========================================================================================================
Package Arch Version Repository Size
========================================================================================================
Installing:
python-pulp-repoauth noarch 2.7.0-0.3.beta.el7 pulp-2.7-beta 75 k
Installing for dependencies:
apr x86_64 1.4.8-3.el7 rhui-REGION-rhel-server-releases 103 k
apr-util x86_64 1.5.2-6.el7 rhui-REGION-rhel-server-releases 92 k
httpd x86_64 2.4.6-31.el7 rhui-REGION-rhel-server-releases 1.2 M
httpd-tools x86_64 2.4.6-31.el7 rhui-REGION-rhel-server-releases 79 k
mailcap noarch 2.1.41-2.el7 rhui-REGION-rhel-server-releases 31 k
mod_ssl x86_64 1:2.4.6-31.el7 rhui-REGION-rhel-server-releases 99 k
mod_wsgi x86_64 3.4-12.el7_0 rhui-REGION-rhel-server-releases 76 k
python-isodate noarch 0.5.0-4.pulp.el7 pulp-2-stable 50 k
python-pulp-common noarch 2.7.0-0.3.beta.el7 pulp-2.7-beta 120 k
Transaction Summary
========================================================================================================
Install 1 Package (+9 Dependent packages)
Total download size: 1.9 M
Installed size: 5.2 M
Is this ok [y/d/N]: y
Downloading packages:
(1/10): apr-1.4.8-3.el7.x86_64.rpm | 103 kB 00:00:00
(2/10): apr-util-1.5.2-6.el7.x86_64.rpm | 92 kB 00:00:00
(3/10): httpd-2.4.6-31.el7.x86_64.rpm | 1.2 MB 00:00:00
(4/10): httpd-tools-2.4.6-31.el7.x86_64.rpm | 79 kB 00:00:00
(5/10): mailcap-2.1.41-2.el7.noarch.rpm | 31 kB 00:00:00
(6/10): mod_wsgi-3.4-12.el7_0.x86_64.rpm | 76 kB 00:00:00
(7/10): mod_ssl-2.4.6-31.el7.x86_64.rpm | 99 kB 00:00:00
(8/10): python-isodate-0.5.0-4.pulp.el7.noarch.rpm | 50 kB 00:00:01
(9/10): python-pulp-repoauth-2.7.0-0.3.beta.el7.noarch.rpm | 75 kB 00:00:01
(10/10): python-pulp-common-2.7.0-0.3.beta.el7.noarch.rpm | 120 kB 00:00:01
--------------------------------------------------------------------------------------------------------
Total 707 kB/s | 1.9 MB 00:00:02
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
Installing : apr-1.4.8-3.el7.x86_64 1/10
Installing : apr-util-1.5.2-6.el7.x86_64 2/10
Installing : httpd-tools-2.4.6-31.el7.x86_64 3/10
Installing : python-isodate-0.5.0-4.pulp.el7.noarch 4/10
Installing : python-pulp-common-2.7.0-0.3.beta.el7.noarch 5/10
Installing : mailcap-2.1.41-2.el7.noarch 6/10
Installing : httpd-2.4.6-31.el7.x86_64 7/10
Installing : mod_wsgi-3.4-12.el7_0.x86_64 8/10
Installing : 1:mod_ssl-2.4.6-31.el7.x86_64 9/10
Installing : python-pulp-repoauth-2.7.0-0.3.beta.el7.noarch 10/10
Verifying : mod_wsgi-3.4-12.el7_0.x86_64 1/10
Verifying : httpd-2.4.6-31.el7.x86_64 2/10
Verifying : apr-1.4.8-3.el7.x86_64 3/10
Verifying : mailcap-2.1.41-2.el7.noarch 4/10
Verifying : 1:mod_ssl-2.4.6-31.el7.x86_64 5/10
Verifying : apr-util-1.5.2-6.el7.x86_64 6/10
Verifying : httpd-tools-2.4.6-31.el7.x86_64 7/10
Verifying : python-pulp-common-2.7.0-0.3.beta.el7.noarch 8/10
Verifying : python-pulp-repoauth-2.7.0-0.3.beta.el7.noarch 9/10
Verifying : python-isodate-0.5.0-4.pulp.el7.noarch 10/10
Installed:
python-pulp-repoauth.noarch 0:2.7.0-0.3.beta.el7
Dependency Installed:
apr.x86_64 0:1.4.8-3.el7 apr-util.x86_64 0:1.5.2-6.el7
httpd.x86_64 0:2.4.6-31.el7 httpd-tools.x86_64 0:2.4.6-31.el7
mailcap.noarch 0:2.1.41-2.el7 mod_ssl.x86_64 1:2.4.6-31.el7
mod_wsgi.x86_64 0:3.4-12.el7_0 python-isodate.noarch 0:0.5.0-4.pulp.el7
python-pulp-common.noarch 0:2.7.0-0.3.beta.el7
Complete!
Updated by amacdona@redhat.com almost 8 years ago
- Status changed from 6 to CLOSED - CURRENTRELEASE
.
better support for installing standalone repoauth
Previously, the pulp repoauth RPM was not installable without also installing the rest of pulp-server. This was not ideal for instances that served protected content to client systems, but did not run full Pulp installations.
This patch does the following:
moves an openssl lib from
pulp.server.commontopulp.repoauth. Note that we couldn't move it topulp.commonsince our openssl code has some calls tosubprocessthat do not work on Python 2.4.adds a few deps to python-pulp-repoauth that previously were provided by pulp-server's deps
fixes an unrelated issue where a "real" conf file was used in a few unit tests
I confirmed that no plugins are using
pulp.server.common.*.Fixes #975
https://pulp.plan.io/issues/975