canonical / cpc-sbom

CPC maintained tool for generating SBOM for cloud images
GNU General Public License v3.0
7 stars 0 forks source link

Update python-apt and python-debian dependency sources to a more known stable source #30

Open philroche opened 1 year ago

philroche commented 1 year ago

Based on PR conversation @ https://github.com/canonical/cpc-sbom/pull/29#pullrequestreview-1511069849

We need to choose a more stable source for python-apt and python-debian dependencies.

One option is to choose the https://git.launchpad.net/ubuntu/+source/python-debian@applied/ubuntu/jammy-devel branch and repo or even better https://git.launchpad.net/ubuntu/+source/python-debian@applied/ubuntu/jammy-updates (should exist in the next week based on https://bugs.launchpad.net/ubuntu/+source/distro-info/+bug/1991606) which is known stable branch and will work for the python version we have chosen for our snap (python 3.10 based on Ubuntu 22.04 and core22 snap base).

https://git.launchpad.net/ubuntu/+source/python-apt@applied/ubuntu/jammy-updates already exists and it too is a known stable branch and will work for the python version we have chosen for our snap

philroche commented 1 year ago

This is more important now given the work @ https://github.com/canonical/cpc-sbom/pull/41 due to failing snap builds due to a move to pytproject.toml in ptython-debian upstream. Due to the failing builds we have now pinned to a known working version.