fix issue with rhel 6 requirements installing incompatible crypto lib

ministryofjustice · Apr 5, 2024 · 6452627 · 6452627
1 parent fdc4d53
commit 6452627
Show file tree

Hide file tree

Showing 4 changed files with 14 additions and 6 deletions.
diff --git a/commonimages/base/components/rhel_6_10/stig_rhel6_ansible.yml.tftpl b/commonimages/base/components/rhel_6_10/stig_rhel6_ansible.yml.tftpl
@@ -65,7 +65,7 @@ phases:
 
                 # install requirements in virtual env
                 cd $ansible_dir/$repo/ansible
-                $python -m pip install -r requirements.txt
+                $python -m pip install -r requirements.txt -c constraints.rhel6.txt
                 ansible-galaxy role install -r requirements.rhel6.yml
                 ansible-galaxy collection install -r requirements.rhel6.yml --force
 

diff --git a/commonimages/base/rhel_6_10/locals.tf b/commonimages/base/rhel_6_10/locals.tf
@@ -12,7 +12,7 @@ locals {
       parameters = []
       }, {
       name    = "ansible"
-      version = "0.0.5" # set to last known working ansible component version
+      version = "0.0.12" # set to last known working ansible component version
       parameters = [{
         name  = "Ami"
         value = join("_", [var.ami_name_prefix, var.ami_base_name])

diff --git a/commonimages/base/rhel_6_10/terraform.tfvars b/commonimages/base/rhel_6_10/terraform.tfvars
@@ -2,7 +2,7 @@
 # BRANCH_NAME =
 # GH_ACTOR_NAME =
 
-configuration_version = "0.2.9"
+configuration_version = "0.3.0"
 description           = "shared rhel 6.10 base image"
 
 ami_base_name = "rhel_6_10"

diff --git a/commonimages/components/templates/ansible.yml b/commonimages/components/templates/ansible.yml
@@ -5,7 +5,7 @@ schemaVersion: 1.0
 parameters:
   - Version:
       type: string
-      default: 0.0.11
+      default: 0.0.12
       description: "Component version, increment if you make changes."
   - Platform:
       type: string
@@ -83,7 +83,11 @@ phases:
                 # install python dependencies outside of virtual env so ansible
                 # can be executed remotely
                 cd $ansible_dir/$repo/$ansible_repo_dir
-                $python -m pip install -r requirements.txt
+                if [[ "$python" =~ 3.6]]; then
+                  $python -m pip install -r requirements.txt -c constraints.rhel6.txt
+                else
+                  $python -m pip install -r requirements.txt
+                fi
 
                 # activate virtual environment
                 mkdir $ansible_dir/python-venv && cd "$_"
@@ -101,7 +105,11 @@ phases:
 
                 # install requirements in virtual env
                 cd $ansible_dir/$repo/$ansible_repo_dir
-                $python -m pip install -r requirements.txt
+                if [[ "$python" =~ 3.6]]; then
+                  $python -m pip install -r requirements.txt -c constraints.rhel6.txt
+                else
+                  $python -m pip install -r requirements.txt
+                fi
                 ansible-galaxy role install -r requirements.yml
                 ansible-galaxy collection install -r requirements.yml --force