[14:01:17] <dstufft> well someone in #openstack-infra had some logs where pip 7 broke something
[14:01:30] <dstufft> looks like openstack might need --trusted-host <mirror domain>
[14:02:52] <dstufft> lifeless: sorry it took me a few days to get it out, been bouncing between a bunch of different discussions between different people and fallout from S3 stuff
[14:03:45] <lifeless> dstufft: thats a third party CI using an untrusted pypi mirror
[14:04:07] <lifeless> look at the url here http://15.126.198.151/76/182276/8/check/3par-iscsi-driver-master-client-pip-megatron-dsvm/a0044b2/logs/devstacklog.txt.gz#_2015-05-22_03_57_51_343
[14:04:32] <lifeless> We should check that the official CI bandersnatch mirrors are either trusted || ssl though, its a good point.
[14:04:43] <lifeless> But I think if we'd bust the world, more folk would be screaming
[14:04:53] <dstufft> yea I thought that bit was weird
[14:05:03] <dstufft> someone said it broke a thing, but nobody else was yelling
[14:05:09] <dstufft> so I wasn't sure what was going on
[14:05:14] <dstufft> makes sense it was third party
[14:12:03] <lifeless> I'm looking at status.openstack.org/zuul to see if I can ascertain all-good or not.
[14:14:30] <dstufft> fun fact, the first version of pip that supported wheels was released almost 2 years ago
[14:17:37] <lifeless> grenade on a nova job failed with 2015-05-22 13:43:30.721 | /opt/stack/old/devstack/lib/keystone: line 569: disable_apache_site: command not found
[14:17:47] <lifeless> which doesn't look at all pip related
[14:20:37] <lifeless> ^ that is a little worrying perhaps - The repository located at pypi.python.org is not a trusted or secure host and is being ignored.
[14:21:55] <dstufft> lifeless: they might have it configured as http://pypi.python.org instead of https://
[14:22:31] <dstufft> pip will see that as an insecure origin then
[14:23:28] <lifeless> when they pop back up on IRC we can try to debug it
[21:16:43] <tchaypo> I have a requirements.txt that says "argparse; python_version<‘2.7'"
[21:16:57] <tchaypo> when I “pip -r requirements.txt”, that’a valid env marker
[21:17:55] <tchaypo> when I “pip install .” and pbr slurps in the requirements.txt, the marker ends up going through pkg_resources/__init__.py:evaluate_marker()
[21:18:57] <tchaypo> which ends up running it through https://bitbucket.org/pypa/setuptools/src/b6e4e89191a674855e06114e8072f2449ef53347/pkg_resources/__init__.py?at=default#cl-1482
[21:19:18] <tchaypo> which doesn’t recognise the < and so I get a “not a valid environment marker” error
[21:21:17] <dstufft> tchaypo: pip and setuptools use different env marker implemetnations apparently, probably because it's not a full standard et
[21:46:33] <tchorizo> except that i can’t find any
[21:49:39] <dstufft> tchorizo: fwiw we have a rule, you'll have to get a PR accepted into setuptools and once it's released inside there we'll pull it into pip by pulling in the updated setuptools