GNU bug report logs - #53883
python-twice cannot be installed in a profile due to collisions

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 53883 in the body.
You can then email your comments to 53883 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: "Dr. Arne Babenhauserheide" <arne_bab <at> web.de>
To: bug-guix <at> gnu.org
Subject: strange conflicts with guix package -m manifest
Date: Tue, 08 Feb 2022 22:05:32 +0100

[Message part 1 (text/plain, inline)]

Hello Guix,

I see strange conflicts when trying to update packages via manifest:

guix package: error: profile contains conflicting entries for python-cffi
guix package: error:   first entry: python-cffi <at> 1.15.0 /gnu/store/fnkn12qv3bw7z3jhdgp2drd0nnn0p433-python-cffi-1.15.0
guix package: error:    ... propagated from python-cmarkgfm <at> 0.7.0
guix package: error:    ... propagated from python-readme-renderer <at> 32.0
guix package: error:    ... propagated from python-twine <at> 1.15.0
guix package: error:   second entry: python-cffi <at> 1.14.4 /gnu/store/4zz00w8rqrfazv5lsjajs0g8y04ysa8g-python-cffi-1.14.4
guix package: error:    ... propagated from python-cryptography <at> 3.3.1
guix package: error:    ... propagated from python-pyopenssl <at> 20.0.1
guix package: error:    ... propagated from python-urllib3 <at> 1.26.7
guix package: error:    ... propagated from python-requests <at> 2.26.0
guix package: error:    ... propagated from python-requests-toolbelt <at> 0.9.1
guix package: error:    ... propagated from python-twine <at> 1.15.0


As you can see, both packages are python-twine, and they have
conflicting dependencies.

I attached both my manifest and my channels file.

To reproduce:


    LANG=C guix package -kK --fallback -m ~/fluss-guix.manifest


$ LANG=C guix describe
Generation 377	Feb 07 2022 10:35:27	(current)
  guix c6b407c
    repository URL: https://git.savannah.gnu.org/git/guix.git
    branch: master
    commit: c6b407c923253ac3e7ce8439b31f52ef94de7846
  flat ece373b
    repository URL: https://github.com/flatwhatson/guix-channel.git
    branch: master
    commit: ece373bcd1e00ef746fb7b104e56ab610cc4af2a
    

[fluss-guix.manifest (application/octet-stream, attachment)]

[channels.scm (application/octet-stream, attachment)]

[Message part 4 (text/plain, inline)]

Best wishes,
Arne
-- 
Unpolitisch sein
heißt politisch sein,
ohne es zu merken.
draketo.de

[signature.asc (application/pgp-signature, inline)]

Message #8 received at 53883 <at> debbugs.gnu.org (full text, mbox):

From: Leo Famulari <leo <at> famulari.name>
To: "Dr. Arne Babenhauserheide" <arne_bab <at> web.de>
Cc: 53883 <at> debbugs.gnu.org
Subject: Re: bug#53883: strange conflicts with guix package -m manifest
Date: Tue, 8 Feb 2022 20:31:16 -0500

On Tue, Feb 08, 2022 at 10:05:32PM +0100, Dr. Arne Babenhauserheide wrote:
> Hello Guix,
> 
> I see strange conflicts when trying to update packages via manifest:
> 
> guix package: error: profile contains conflicting entries for python-cffi
> guix package: error:   first entry: python-cffi <at> 1.15.0 /gnu/store/fnkn12qv3bw7z3jhdgp2drd0nnn0p433-python-cffi-1.15.0
> guix package: error:    ... propagated from python-cmarkgfm <at> 0.7.0
> guix package: error:    ... propagated from python-readme-renderer <at> 32.0
> guix package: error:    ... propagated from python-twine <at> 1.15.0
> guix package: error:   second entry: python-cffi <at> 1.14.4 /gnu/store/4zz00w8rqrfazv5lsjajs0g8y04ysa8g-python-cffi-1.14.4
> guix package: error:    ... propagated from python-cryptography <at> 3.3.1
> guix package: error:    ... propagated from python-pyopenssl <at> 20.0.1
> guix package: error:    ... propagated from python-urllib3 <at> 1.26.7
> guix package: error:    ... propagated from python-requests <at> 2.26.0
> guix package: error:    ... propagated from python-requests-toolbelt <at> 0.9.1
> guix package: error:    ... propagated from python-twine <at> 1.15.0
> 
> 
> As you can see, both packages are python-twine, and they have
> conflicting dependencies.

Basically, the python-twine package, as it is now, cannot be installed
in a profile.

That is because its dependency graph of propagated packages includes
different versions of python-cffi, and you cannot install both of these
cffi packages alongside each other in a symlink forest (i.e. a profile).

The solution is make this dependency graph only include one version of
cffi. Either python-cryptography should use cffi 1.15.0, or cmarkgfm
should use cffi 1.14.4. There may be other conflicts to resolve as well,
but we should try to resolve all of them.

Guix probably also printed a hint:

hint: You cannot have two different versions or variants of `python-twine' in the same profile.

That hint is misleading in this case and we should tweak the code that
generates it. The hint text was written when the only such conflicts
came from different packages propagated a colliding dependencies.

Message #13 received at 53883 <at> debbugs.gnu.org (full text, mbox):

From: Ludovic Courtès <ludo <at> gnu.org>
To: Leo Famulari <leo <at> famulari.name>
Cc: 53883 <at> debbugs.gnu.org, "Dr. Arne Babenhauserheide" <arne_bab <at> web.de>,
 Marius Bakke <marius <at> gnu.org>
Subject: Re: bug#53883: strange conflicts with guix package -m manifest
Date: Wed, 16 Feb 2022 15:56:42 +0100

Hi,

Leo Famulari <leo <at> famulari.name> skribis:

> Basically, the python-twine package, as it is now, cannot be installed
> in a profile.
>
> That is because its dependency graph of propagated packages includes
> different versions of python-cffi, and you cannot install both of these
> cffi packages alongside each other in a symlink forest (i.e. a profile).

Any idea how this could be addressed?

There are currently 133 dependents of python-cffi <at> 1.15 (python-cmarkgfm
is the only direct user) and 3,807 dependents of python-cffi <at> 1.14.  It’d
be easier if they all depended on 1.14.

Unfortunately we can’t just use 1.14 for python-cmarkgfm:

--8<---------------cut here---------------start------------->8---
$ guix build python-cmarkgfm --with-input=python-cffi <at> 1.15=python-cffi <at> 1.14
[…]
ERROR: Could not find a version that satisfies the requirement cffi>=1.15.0 (from versions: none)
ERROR: No matching distribution found for cffi>=1.15.0
--8<---------------cut here---------------end--------------->8---

Should we downgrade python-cmarkgfm, or relax its requirements?  Marius,
WDYT?  :-)

Ludo’.

Message #18 received at 53883-done <at> debbugs.gnu.org (full text, mbox):

From: Marius Bakke <marius <at> gnu.org>
To: Ludovic Courtès <ludo <at> gnu.org>, Leo Famulari
 <leo <at> famulari.name>
Cc: 53883-done <at> debbugs.gnu.org, "Dr. Arne Babenhauserheide" <arne_bab <at> web.de>
Subject: Re: bug#53883: strange conflicts with guix package -m manifest
Date: Wed, 16 Feb 2022 23:06:26 +0100

[Message part 1 (text/plain, inline)]

Ludovic Courtès <ludo <at> gnu.org> skriver:

> Hi,
>
> Leo Famulari <leo <at> famulari.name> skribis:
>
>> Basically, the python-twine package, as it is now, cannot be installed
>> in a profile.
>>
>> That is because its dependency graph of propagated packages includes
>> different versions of python-cffi, and you cannot install both of these
>> cffi packages alongside each other in a symlink forest (i.e. a profile).
>
> Any idea how this could be addressed?
>
> There are currently 133 dependents of python-cffi <at> 1.15 (python-cmarkgfm
> is the only direct user) and 3,807 dependents of python-cffi <at> 1.14.  It’d
> be easier if they all depended on 1.14.
>
> Unfortunately we can’t just use 1.14 for python-cmarkgfm:
>
> --8<---------------cut here---------------start------------->8---
> $ guix build python-cmarkgfm --with-input=python-cffi <at> 1.15=python-cffi <at> 1.14
> […]
> ERROR: Could not find a version that satisfies the requirement cffi>=1.15.0 (from versions: none)
> ERROR: No matching distribution found for cffi>=1.15.0
> --8<---------------cut here---------------end--------------->8---
>
> Should we downgrade python-cmarkgfm, or relax its requirements?  Marius,
> WDYT?  :-)

I dug around in the upstream commit history and it appears that the
requirement was only added for Python 3.10 compatibility.  So I relaxed
its requirements in commit f37eb24df5ecb3a14bd42507076854cc979ddecf.

-- 
Thanks,
Marius

[signature.asc (application/pgp-signature, inline)]

Message #21 received at 53883-done <at> debbugs.gnu.org (full text, mbox):

From: Ludovic Courtès <ludo <at> gnu.org>
To: Marius Bakke <marius <at> gnu.org>
Cc: 53883-done <at> debbugs.gnu.org, "Dr. Arne Babenhauserheide" <arne_bab <at> web.de>,
 Leo Famulari <leo <at> famulari.name>
Subject: Re: bug#53883: strange conflicts with guix package -m manifest
Date: Thu, 17 Feb 2022 11:54:02 +0100

Marius Bakke <marius <at> gnu.org> skribis:

>> Should we downgrade python-cmarkgfm, or relax its requirements?  Marius,
>> WDYT?  :-)
>
> I dug around in the upstream commit history and it appears that the
> requirement was only added for Python 3.10 compatibility.  So I relaxed
> its requirements in commit f37eb24df5ecb3a14bd42507076854cc979ddecf.

Well done, thank you!

Ludo’.

Message #24 received at 53883-done <at> debbugs.gnu.org (full text, mbox):

From: "Dr. Arne Babenhauserheide" <arne_bab <at> web.de>
To: Ludovic Courtès <ludo <at> gnu.org>
Cc: 53883-done <at> debbugs.gnu.org, Leo Famulari <leo <at> famulari.name>,
 Marius Bakke <marius <at> gnu.org>
Subject: Re: bug#53883: strange conflicts with guix package -m manifest
Date: Thu, 17 Feb 2022 16:36:43 +0100

[Message part 1 (text/plain, inline)]

Ludovic Courtès <ludo <at> gnu.org> writes:

> Marius Bakke <marius <at> gnu.org> skribis:
>
>>> Should we downgrade python-cmarkgfm, or relax its requirements?  Marius,
>>> WDYT?  :-)
>>
>> I dug around in the upstream commit history and it appears that the
>> requirement was only added for Python 3.10 compatibility.  So I relaxed
>> its requirements in commit f37eb24df5ecb3a14bd42507076854cc979ddecf.
>
> Well done, thank you!

Thank you!

Best wishes,
Arne
-- 
Unpolitisch sein
heißt politisch sein,
ohne es zu merken.
draketo.de

[signature.asc (application/pgp-signature, inline)]

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.