[rawhide] python3, selinux policycoreutils-python, and cloud-init

[Matthew Miller]

Because Python is not small, I would really like to avoid pulling Python 3
into the base cloud image until we can move Python 2 out. (Ideally, I'd like
to move Python out _entirely_, but that's a long, long path. )

It looks like policycoreutils-python in Rawhide is now Python 3. Cloud-init
pulls this in because when it moves things around or creates files, it then
runs selinux.restorecon on them.

I don't _really_ want to say that policycoreutils-python should go back to
Python 2, but I don't think everything else is in the cloud image going to
be ready for F21. See the change coordination page for Python3 at
https://fedoraproject.org/wiki/Changes/Python_3_as_Default)

What are the options here? A python 2 module in parallel? Execing
/sbin/restorecon instead of using the bindings? Refactoring the code so that
running restorecon all the time isn't necessary?

-- 
Matthew Miller  --  Fedora Project Architect --  <mattdm(a)fedoraproject.org&gt;

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 12/11/2013 11:24 AM, Matthew Miller wrote:
>  Because Python is not small, I would really like to avoid pulling
> Python 3 
>  into the base cloud image until we can move Python 2 out. (Ideally, I'd
>  like to move Python out _entirely_, but that's a long, long path. )
>  
>  It looks like policycoreutils-python in Rawhide is now Python 3.
>  Cloud-init pulls this in because when it moves things around or creates
>  files, it then runs selinux.restorecon on them.
>  
>  I don't _really_ want to say that policycoreutils-python should go back to 
>  Python 2, but I don't think everything else is in the cloud image going to 
>  be ready for F21. See the change coordination page for Python3 at 
>  https://fedoraproject.org/wiki/Changes/Python_3_as_Default)
>  
>  What are the options here? A python 2 module in parallel? Execing 
>  /sbin/restorecon instead of using the bindings? Refactoring the code so
>  that running restorecon all the time isn't necessary?
>   
That looks like a bug policycoreutils-python is still python2, with support
for python3, but It should not require python3?
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.15 (GNU/Linux)
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
>
> iEYEARECAAYFAlKouZYACgkQrlYvE4MpobNNzACgqRbhcYW/nPqj0b5MRSedZPGC
> RtgAn32m8Mw2bgmWthzELWQEvm1fJ3Yx
> =jqFb
> -----END PGP SIGNATURE-----

[Matthew Miller]

On Wed, Dec 11, 2013 at 02:14:30PM -0500, Daniel J Walsh wrote:
>  That looks like a bug policycoreutils-python is still python2, with
> support
>  for python3, but It should not require python3? 
Okay -- filed as https://bugzilla.redhat.com/show_bug.cgi?id=1041834

Thanks!

-- 
Matthew Miller  --  Fedora Project Architect --  <mattdm(a)fedoraproject.org&gt;