corymhall
commented
2 years ago It looks like the image doesn't have write access to /tmp anymore, probably due to some change in the base image.
I think the solution here is to do what we have been doing for the lambda-nodejs module and customize the cache location in the Dockerfile.
The new DockerFile should probably look something like:
# The correct AWS SAM build image based on the runtime of the function will be
# passed as build arg. The default allows to do `docker build .` when testing.
ARG IMAGE=public.ecr.aws/sam/build-python3.7
FROM $IMAGE
ARG PIP_INDEX_URL
ARG PIP_EXTRA_INDEX_URL
ARG HTTPS_PROXY
# Ensure all users can write to pip cache
RUN mkdir /tmp/pip-cache && \
chmod -R 777 /tmp/pip-cache
ENV PIP_CACHE_DIR=/tmp/pip-cache
# Upgrade pip (required by cryptography v3.4 and above, which is a dependency of poetry)
RUN pip install --upgrade pip
# pipenv 2022.4.8 is the last version with Python 3.6 support
RUN pip install pipenv==2022.4.8 poetry
# Ensure all users can write to poetry cache
RUN mkdir /tmp/poetry-cache && \
chmod -R 777 /tmp/poetry-cache && \
poetry config cache-dir /tmp/poetry-cache
# create non root user and change allow execute command for non root user
RUN /sbin/useradd -u 1000 user && chmod 711 /
CMD [ "python" ]
darylweir
ryanandonian
l0b0
lrav35
mikelane
github-actions[bot]
jarikujansuu
ingwinlu
maj5004
Describe the bug
Our CI started breaking yesterday when trying to synthesise stacks using the
PythonFunctionconstruct. I was able to reproduce the failure locally using bothaws-lambda-python-alphain v2 andaws-lambda-pythonin v1.The failure occurs when trying to setup the virtual env inside the bundling docker image. I assume something has changed in the latest
aws/sam/build-python3.9docker image that breaks the bundling command.EDIT: we were using Python 3.9 lambdas, but I tested and builds also fail for 3.7 and 3.8 runtimes.
Expected Behavior
cdk synthshould succeed in bundling the lambda function.Current Behavior
The lambda bundling fails with an error from virtualenv:
virtualenv: error: argument dest: the destination . is not write-able at /Full error output
Reproduction Steps
lib/cdktestv2-stack.ts:bin/cdktestb2.ts:lambda/pyproject.toml:lambda/index.py:and
poetry installinlambdato create a lock file.Then run
cdk synthand watch it fall over.Possible Solution
No response
Additional Information/Context
No response
CDK CLI Version
2.39.0
Framework Version
No response
Node.js Version
16.14.0
OS
MacOS 10.15.7
Language
Typescript, Python
Language Version
Typescript 3.9.7, Python 3.9.1
Other information
No response