search

actions / setup-python

Set up your GitHub Actions workflow with a specific version of Python
MIT License
1.59k stars 505 forks source link

Python 3.5 20.04 tool bundle not installable #868

Closed rfinnie-epic closed 1 week ago

rfinnie-epic commented 1 month ago

Description

As of a week or so ago, the Ubuntu 20.04 Python 3.5 tool bundle is no longer installable, throwing CERTIFICATE_VERIFY_FAILED when pip tries to reach https://pypi.python.org/simple/pip/ (see below)

For the moment, I've got a manual exception in place to skip this during my runner build process, which is needed since it's still in the manifest.

Considering the 3.5 tarballs haven't been touched since 2020 but you are still supporting ubuntu-20.04 runners, I'm not sure if the solution would be to drop 3.5 from the manifests, or spin a new release with an updated vendored requests / urllib3 package which is supporting pip internally.

Platforms affected

Runner images affected

Image version and build link

Python tool bundle tarball (python-3.5.10-linux-20.04-x64.tar.gz)

Is it regression?

yes (but not GH's fault)

Expected behavior

Functional tool bundle install

Actual behavior

setup.sh fails with exit 1

Repro steps

root@25b48db3503d:/# cat /etc/os-release
NAME="Ubuntu"
VERSION="20.04.6 LTS (Focal Fossa)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 20.04.6 LTS"
VERSION_ID="20.04"
HOME_URL="https://www.ubuntu.com/"
SUPPORT_URL="https://help.ubuntu.com/"
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
VERSION_CODENAME=focal
UBUNTU_CODENAME=focalroot@25b48db3503d:/# mkdir -p /pytest /opt/hostedtoolcache
root@25b48db3503d:/# cd /pytest
root@25b48db3503d:/pytest# wget https://github.com/actions/python-versions/releases/download/3.5.10-90026/python-3.5.10-linux-20.04-x64.tar.gz
2024-05-14 21:15:17 (43.1 MB/s) - 'python-3.5.10-linux-20.04-x64.tar.gz' saved [73179534/73179534]

root@25b48db3503d:/pytest# tar zxf python-3.5.10-linux-20.04-x64.tar.gz
root@25b48db3503d:/pytest# env AGENT_TOOLSDIRECTORY=/opt/hostedtoolcache sh setup.sh
Check if Python hostedtoolcache folder exist...
Creating Python hostedtoolcache folder...
Create Python 3.5.10 folder
Copy Python binaries to hostedtoolcache folder
Create additional symlinks (Required for the UsePythonVersion Azure Pipelines task and the setup-python GitHub Action)
Upgrading PIP...
Requirement already satisfied: setuptools in /opt/hostedtoolcache/Python/3.5.10/x64/lib/python3.5/site-packages
Requirement already satisfied: pip in /opt/hostedtoolcache/Python/3.5.10/x64/lib/python3.5/site-packages
Collecting pip
  Could not fetch URL https://pypi.python.org/simple/pip/: There was a problem confirming the ssl certificate: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:728) - skipping
  Could not find a version that satisfies the requirement pip (from versions: )
No matching distribution found for pip
root@25b48db3503d:/pytest# echo $?
1
root@25b48db3503d:/pytest#
mikhailkoliada commented 1 month ago

moving to setup-python as we do not maintain these archives

dirkf commented 1 month ago

Same problem as #866 (with work-around), I think.

aparnajyothi-y commented 1 month ago

Hello @rfinnie-epic, Thank you for creating this issue and we will look into it :)

priyagupta108 commented 1 week ago

Hello @rfinnie-epic👋 Thank you for your input! We figured it's covering the same as another one we already have. To avoid duplication, we are proceeding with closing this issue. Please refer to Issue #866 for related discussions.