[openstack-dev] [tripleo] RFC: Freeze deps versions in requirements

Monty Taylor mordred at inaugust.com
Thu Oct 17 13:21:46 UTC 2013



On 10/17/2013 08:12 AM, Petr Blaho wrote:
> Hi all,
> 
> this is probably 3rd or 4th time in quite short time when we were bitten
> by new version of some out dependencies.
> 
> Last one (https://review.openstack.org/#/c/52327/3) was about WSME
> released version 0.5b6 and our tests fail.

Well - I think we should probably not be depending on any beta versions
of anything that aren't part of our gate. So there's issue number 1.

> I do not want to argue if problem is on tuskar side (probably tuskar is
> to blame according to what jistr found out) or WSME but I think
> we should discuss possibility of freezing versions in our dependencies
> definitions and once in a time check for new versions of deps and do
> update as a separate task.

We don't really like pinning arbitrarily like that because it can cause
inter-project issues and stress on packagers. We do from time to time
when we find a project that becomes known for regularly breaking its
contract.

> Current state of having open version constraints like WSME<=0.5b5 leads
> to occasional (or as I see quite frequent) jenkins job failures (as jenkins
> use clean venv for instalation - devs can have older one so they can
> miss failure with new version of dep) and these "sudden" failures force
> us to investigate and divert from planned tasks etc...
> 
> I think that having regular "update deps" task can lead to better time
> management and having less "sudden" jenkins failures will be benefical
> to developers' health :-)
> 
> Please, tell me if I am missing some obvious problem with freezing dep
> versions and/or regular update task and if I miss a good side of these
> "sudden version strikes" too.

Freezing a dep version and regularly upgrading it means freezing it in
24-ish repos and then upgrading it in 24-ish repos. Doing it across the
board as a general rule would quickly become unworkable.

However, in this particular case, I believe you're pointing out a
behvior we're doing with WSME that we should, well, not do.

We'll also be having a requirements session at the summit to talk about
next steps for requirements processing - hopefully you can make it!

Monty



More information about the OpenStack-dev mailing list