Cannot start 1.5.6 docker container (ContextualVersionConflict cffi) about tokenserver

[jrgm]

@tublitzed - yes. I'll close this issue now.

@pjenvey - Ah. Okay, I'll put that in a PR.

[fzzzy]

@jrconlin Have you seen anything like this before when you were trying to get the tokenserver running with changes before?

[jrconlin]

@fzzzy Not with cffi specifically, but I've seen stuff like this. The problem is that there are some other crates that may be bringing in a conflicting version of cffi. I solved mine by locking the version in my Cargo.toml, but you may need to use cargo tree to identify which crate is making the explicit request and either back versioning that crate or bumping up the local version of cffi.

(As you know, but others may not, cffi is a really thorny crate for things like this, since it handles communicating with libraries outside of rust. Minor version bumps can bring huge changes. Other libraries that are like this include libssl, protobuf, and a handful of others. If you live a mostly clean life or are particularly lucky, you can get away with doing the version specification I noted. Other times, well, it's not a lot of fun, at all.)

[fzzzy]

This is in the python version...

[jrconlin]

Ah, sorry, missed that. Let me see if I can replicate locally and see what's up. Honestly, what I said above might even be more so, since a lot of python packages are growing less and less able to run under python2.7. So we have to nail down all sorts of sub-dependencies.

[jrconlin]

So, a few things I'm seeing at least locally.

1. I'm not hitting the cffi issue doing local builds, but pulling the docker image definitely hits it. I'm going to guess that it's probably either a build problem on the remote machines or an unfixed dependency issue. I added
   gunicorn == 19.10.0 to my requirements.txt file because the local build docker image didn't find it. That got me a bit further, but then...

2. Looks like alpine might have switched from libmysqlclient-dev to mariadb-dev, and it's causing some problems with interpolation. Looking at what's going on in there.

Yay! this stuff is a mess and only getting worse.

[fzzzy]

Can we pin alpine to an old version to avoid this? (What's alpine? :)

[jrconlin]

Alpine is the root OS for the pypy:2.7-jesse container. (At least as I understand. When I built the docker locally, that's the core that was brought in, and what I got dumped into when I did a docker run -it --entrypoint sh tokenserver.

It's very minimal, so I'm sure that some other docker is probably building out the db dependencies, but the effect is the same. There's definitely bit rot going on in here.

[jrgm]

See #189

[tublitzed]

@jrgm - can you confirm this was resolved here, or should we keep this one open?

[pjenvey]

pypy ships w/ its own cffi, so any version differing from what it provides will trigger a conflict. A more future proof way to avoid this is to only require cffi on cpython, e.g. in requirements.txt:

cffi==1.13.2 ; platform_python_implementation == "CPython"