Fixed build failure

[shunr-hpe]

Summary and Scope

This changes setuptools to not be upgraded.

The build was failing because of incompatabilities between the python libraries packaging and setuptools.

The packaging library is installed via an OS package, and so it cannot be upgraded by pip (uninstalled and then installed). The error given by pip is that it is a 'distutils installed project' and cannot accurately determine which files belong to it.

This may describe the root cause
pypa/setuptools#4501

Issues and Related PRs

List and characterize relationship to Jira/Github issues and other pull requests. Be sure to list dependencies.

• Resolves CASMHMS-6243

Testing

Tested on:

• built on dev system
• built in github

Test description:

Risks and Mitigations

Pull Request Checklist

• Version number(s) incremented, if applicable
• Copyrights updated
• License file intact
• Target branch correct
• CHANGELOG.md updated
• Testing is appropriate and complete, if applicable
• HPC Product Announcement prepared, if applicable

[github-actions]

👋 Hey! Here is the image we built for you (Artifactory Link):

artifactory.algol60.net/csm-docker/unstable/csm-rie:1.5.4-20240729165000.cade641

Use podman or docker to pull it down and inspect locally:

podman pull artifactory.algol60.net/csm-docker/unstable/csm-rie:1.5.4-20240729165000.cade641

Or, use this script to pull the image from the build server to a dev system:

Dev System Pull Script

Note the following script only applies to systems running CSM 1.2 or later.

#!/usr/bin/env bash

IMAGE=artifactory.algol60.net/csm-docker/unstable/csm-rie:1.5.4-20240729165000.cade641

podman run --rm --network host  \
    quay.io/skopeo/stable copy \
    --src-tls-verify=false \
    --dest-tls-verify=false \
    --dest-username "$(kubectl -n nexus get secret nexus-admin-credential -o json | jq -r '.data.username | @base64d')" \
    --dest-password "$(kubectl -n nexus get secret nexus-admin-credential -o json | jq -r '.data.password | @base64d')" \
    docker://$IMAGE \
    docker://registry.local/$IMAGE

Snyk Report

Coming soon

Software Bill of Materials

cosign download sbom artifactory.algol60.net/csm-docker/unstable/csm-rie:1.5.4-20240729165000.cade641 > container_image.spdx

If you don't have cosign, then you can get it here.

Note: this SHA is the merge of 3562297 and the PR base branch. Good luck and make rocket go now! 🌮 🚀