search

mitre-attack / attack-website

MITRE ATT&CK Website
https://attack.mitre.org
Apache License 2.0
489 stars 144 forks source link

requirements.txt had to be adjusted for building in an air-gapped environment #337

Closed watgh closed 2 years ago

watgh commented 2 years ago

When I do a pip install -r requirements.txt, I end up with:

"The conflict is cause by: The user requested urllib3==1.26.5 requests 2.21.0 dpends on urllib3<1.25 and >=1.21.1"

In order to resolve, I relaxed the constraint on: requests>=2.21.0 stix2>=2.1.0 stix2-patterns>=1.3.2 urllib3>=1.26.5

isaisabel commented 2 years ago

@IanDavila do you know if #336 addresses this already? I know the imports were changed there.

watgh commented 2 years ago

building from master gave me the error above I cloned the develop branch this time (i'm running pip install --no-cache-dir -r requirements.txt) It does behave differently but is now complaining about the modules from attack-python...

Could not find a version that satisfies the requirement isoduration; extra == "format_nongpl" (from jsonschema[format_nongpl]>=3.2.0->stix2-validator>=3.0.0->stix2-elevator>=4.0.1->mitreattack-python==1.4.0->-r requirements.txt (line 44)) (from versions: ) No matching distribution found for isoduration; extra == "format_nongpl" (from jsonschema[format_nongpl]>=3.2.0->stix2-validator>=3.0.0->stix2-elevator>=4.0.1->mitreattack-python==1.4.0->-r requirements.txt (line 44))

IanDavila commented 2 years ago

Hi @watgh, thanks for reporting this issue. I've updated requirements.txt on #336.

2xyo commented 2 years ago

Hi, same issue here.

FYI, according to the official Python packaging doc:

install_requires is a setuptools setup.py keyword that should be used to specify what a project minimally needs to run correctly.

It is not considered best practice to use install_requires to pin dependencies to specific versions,

isaisabel commented 2 years ago

Should be fixed in v3.4.1 (#336).