Install cryptography pip package in airgapped network

[lavalex]

For Confluent Enterprise Support customers, we would strongly advise you to open a Support ticket which will be addressed within your Support contract SLA at https://support.confluent.io

Describe the issue It's not clear how to install cryptograhy package through ansible in airgapped environment

To Reproduce Follow the documentation step7, it doesn't work https://docs.confluent.io/ansible/current/ansible-airgap.html

Expected behaviour It's not clear where to copy downloaded directory, when running ansible on the remote host I get network issues (obviously).

Environment (please complete the following information):

• OS: RHEL 9.3
• CP-Ansible Branch: 7.6.0

Additional context

[sjoshid]

Im stuck in this exact step.

My suggestions:

• From an internet accessible machine run pip download cryptography -d <local directory on distribution server>. It downloads a bunch of .whl files called wheels. I have no clue what a "wheel" is. I have noticed, based on your exact linux version, it downloads different number of .whl files. So I suggest you run the command from another RHEL 9.3 machine.
• Copy all the .whl files to your managed nodes and run pip install command for each .whl file. Eg., pip install crypto-blah-blah.whl.

We are running Rocky 8.9 and given an airgapped network, I cant find another rocky 8.9 to run the download command from.

Let me know how that goes. I'll do the same till someone from Confluent updated the docs.

All the best!

[sjoshid]

Just found out that you can also download the crypto package from here. It lists different types based on your machine.

[marcelboldt]

There is also python3-cryptography rpm package in the official RHEL baseos repository.