[Python-modules-team] Bug#954110: python3-pip: --extra-index-url broken due to requests unvendoring

[Ross Vandegrift]

Package: python3-pip
Version: 18.1-5
Severity: normal

Hello,

#837764 is marked as fixed in 18.1-5, but I still have this problem in buster.
I'm opening a new bug since the old one is archived.

The diffs linked at [1] do not seem to have been applied when I look at
/usr/lib/python3/dist-packages/pip/_vendor/__init__.py.

pip in sid works correctly.

Example:

$ python3 -m venv venv
$ venv/bin/pip install -v --extra-index-url $private_repo private_package
Could not install packages due to an EnvironmentError.
Traceback (most recent call last):
  File "/home/ross/venv/lib/python3.7/site-packages/pip/_internal/commands/install.py", line 338, in run
    resolver.resolve(requirement_set)
  File "/home/ross/venv/lib/python3.7/site-packages/pip/_internal/resolve.py", line 102, in resolve
    self._resolve_one(requirement_set, req)
  File "/home/ross/venv/lib/python3.7/site-packages/pip/_internal/resolve.py", line 256, in _resolve_one
    abstract_dist = self._get_abstract_dist_for(req_to_install)
  File "/home/ross/venv/lib/python3.7/site-packages/pip/_internal/resolve.py", line 209, in _get_abstract_dist_for
    self.require_hashes
  File "/home/ross/venv/lib/python3.7/site-packages/pip/_internal/operations/prepare.py", line 218, in prepare_linked_requirement
    req.populate_link(finder, upgrade_allowed, require_hashes)
  File "/home/ross/venv/lib/python3.7/site-packages/pip/_internal/req/req_install.py", line 164, in populate_link
    self.link = finder.find_requirement(self, upgrade)
  File "/home/ross/venv/lib/python3.7/site-packages/pip/_internal/index.py", line 572, in find_requirement
    all_candidates = self.find_all_candidates(req.name)
  File "/home/ross/venv/lib/python3.7/site-packages/pip/_internal/index.py", line 530, in find_all_candidates
    for page in self._get_pages(url_locations, project_name):
  File "/home/ross/venv/lib/python3.7/site-packages/pip/_internal/index.py", line 675, in _get_pages
    page = self._get_page(location)
  File "/home/ross/venv/lib/python3.7/site-packages/pip/_internal/index.py", line 793, in _get_page
    return _get_html_page(link, session=self.session)
  File "/home/ross/venv/lib/python3.7/site-packages/pip/_internal/index.py", line 147, in _get_html_page
    resp.raise_for_status()
  File "/home/ross/venv/share/python-wheels/requests-2.21.0-py2.py3-none-any.whl/requests/models.py", line 940, in raise_for_status
    raise HTTPError(http_error_msg, response=self)
requests.exceptions.HTTPError: 404 Client Error: Not Found for url: https://pypi.org/simple/private_package/

Thanks,
Ross

[1] - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=837764#45



-- System Information:
Debian Release: 10.3
  APT prefers stable-debug
  APT policy: (500, 'stable-debug'), (500, 'proposed-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-8-amd64 (SMP w/4 CPU cores)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages python3-pip depends on:
ii  ca-certificates    20190110
ii  python-pip-whl     18.1-5
ii  python3            3.7.3-1
ii  python3-distutils  3.7.3-1

Versions of packages python3-pip recommends:
ii  build-essential     12.6
ii  python3-dev         3.7.3-1
ii  python3-setuptools  40.8.0-1
ii  python3-wheel       0.32.3-2

python3-pip suggests no packages.

-- no debconf information