Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 769482

Summary: dev-python/cryptography: newer versions (>=3.4) will require Rust
Product: Gentoo Linux Reporter: Sam James <sam>
Component: Current packagesAssignee: Python Gentoo Team <python>
Status: RESOLVED FIXED    
Severity: normal CC: bertrand, conikost, dennis.lissov, gentoo, hydrapolic, ionen, me, mgorny, pacho, reuben-gentoo-bugzilla, rust, vaartis, w12101111, zlogene
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
URL: https://github.com/pyca/cryptography/issues/5771
See Also: https://github.com/gentoo/gentoo/pull/19383
https://github.com/gentoo/gentoo/pull/20810
Whiteboard:
Package list:
Runtime testing required: ---
Bug Depends on: 769452, 827350    
Bug Blocks:    

Description Sam James archtester Gentoo Infrastructure gentoo-dev Security 2021-02-08 09:11:41 UTC
This is a popular Python library and losing it where we lack Rust is going to be problematic.

mgorny has already reported this upstream.
Comment 1 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2021-02-08 09:18:05 UTC
Technically speaking, this is an indirect dependency of everything, so this probably means removing Python entirely... which probably means removing arches entirely.
Comment 2 Ionen Wolkens gentoo-dev 2021-02-08 12:08:13 UTC
fwiw I have one Gentoo system without it (so no urllib3/requests either, it's not using gemato), but it's a very large affected subset nonetheless.
Comment 3 Joonas Niilola gentoo-dev 2021-02-09 07:11:49 UTC
https://github.com/gentoo/gentoo/pull/19383 this should help a little bit.
Comment 4 Georgy Yakovlev archtester gentoo-dev 2021-06-03 18:10:29 UTC
https://github.com/gentoo/gentoo/pull/20810 kinda solves it.
it's a snapshot version not released yet, but it's working and passing current tests.
Comment 5 Larry the Git Cow gentoo-dev 2021-11-26 08:20:49 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=fbc82dfc0fd9213f3205747f1814737a985495f5

commit fbc82dfc0fd9213f3205747f1814737a985495f5
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2021-11-26 08:19:04 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2021-11-26 08:20:40 +0000

    dev-python/cryptography: add 36.0.0, drop 3.4.7_p12052021 (Rust, unkeyworded)
    
    Unkeyworded while we figure out a plan to handle arches which currently
    do not support Rust.
    
    (We _might_ be able to handle some/all of them by building rust-bin bootstrap
    binaries ourselves, as Rust upstream handle some arches by giving them
    a lower tier of support w/o prebuilt Rust.
    
    Or we wait for the rustc + libgccjit backend. Or we wait for the GCC Rust frontend.)
    
    Bug: https://bugs.gentoo.org/769482
    Bug: https://bugs.gentoo.org/827350
    Bug: https://bugs.gentoo.org/769452
    Signed-off-by: Sam James <sam@gentoo.org>

 dev-python/cryptography/Manifest                   |  53 ++++++----
 ...p12052021.ebuild => cryptography-36.0.0.ebuild} | 107 +++++++++++----------
 2 files changed, 88 insertions(+), 72 deletions(-)
Comment 6 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-07-29 11:11:48 UTC
The wd40 profiles for platforms without Rust have newer cryptography masked.