Question

我在运行pip install时遇到不安全的平台和sni缺少警告。我一直在尝试按照下面的错误消息中建议的说明，没有运气：

https://urllib3.readthedocs.io/en/latest/security.html#insecureplatformwarning https://urllib3.readthedocs.io/en/latest/security.html#snimissingwarning https://urllib3.readthedocs.io/en/latest/user-guide.html#ssl-py2

我写了一个小的Vagrant文件＆amp;厨师食谱，以证明问题，也许可以得到一些帮助。每次安装pip包之前都会显示警告。我还尝试了各种pip安装选项组合并改变了版本pip（8.1.2 vs 9.0.1）。任何帮助表示赞赏。

包含以下代码的公共GitHub回购：https://github.com/marc-swingler/urllib_issue

要求：Vagrant和VirtualBox

运行：vagrant up

UPDATE ::找到此帖子https://github.com/pypa/pip/issues/4098

原来pip 9.0.1由于与它捆绑在一起的lib而不能很好地发挥作用。此外，安装ndg-httpsclient而不是urllib3和/或请求。用户指南中提到的apt包不是必需的，不需要从头开始构建，你可以使用轮子。一旦安装了ndg-httpsclient，警告就会消失，其他pip安装也会顺利进行。我也有一个版本，我使用apt python-pip包启动pip。（如果有人有兴趣，我会发布它。）Apt最初安装pip v1.5.4。然后脚本更新到pip 8.1.2并继续类似于下面的代码。只需要在升级pip时删除“--disable-pip-version-check”选项。

Vagrantfile：

# -*- mode: ruby -*-
# vi: set ft=ruby :

VAGRANTFILE_API_VERSION = "2"

Vagrant.configure(VAGRANTFILE_API_VERSION) do |config|
    config.vm.box = "ubuntu/trusty64"
    config.vm.network "private_network", type: "dhcp"
    config.ssh.shell = "bash -c 'BASH_ENV=/etc/profile exec bash'"
    config.vm.provision "chef_solo" do |chef|
            chef.add_recipe("foo")
    end
    config.vm.provider "virtualbox" do |v|
            v.memory = 4096
    end
end

食谱/富/食谱/ default.rb：

pip_installer_path = '/tmp/get-pip.py'
remote_file "download_pip_installer" do
    path pip_installer_path
    source 'https://bootstrap.pypa.io/get-pip.py'
    owner 'root'
    group 'root'
    mode '0500'
    not_if 'which pip'
end
execute 'bootstrap_pip' do
    command "python #{pip_installer_path}"
    not_if "which pip"
end
cookbook_file 'delete_pip_installer' do
    path pip_installer_path
    action :delete
end

pip_packages = {
    'pip' => { 'version' => '8.1.2', 'extras' => nil },
    'ndg-httpsclient' => { 'version' => '0.4.3', 'extras' => nil },
    'botocore' => { 'version' => '1.7.18', 'extras' => nil },
    'pystache' => { 'version' => '0.5.4', 'extras' => nil }
}
pip_packages.each do |package_name, package_info|
    package_version = package_info['version']
    package_extras = package_info['extras']
    package_spec = package_name
    unless package_extras.nil? or package_extras.length < 1
        package_spec = package_spec + '['
        package_extras.each do |package_extra|
            package_spec = package_spec + package_extra + ','
        end
        package_spec[-1] = ']'
    end
    package_spec = package_spec + '==' + package_version
    execute package_spec do
        command "pip --disable-pip-version-check install -U #{package_spec}"
        not_if "test #{package_version} = `pip --disable-pip-version-check list 2>/dev/null | sed -rn 's/^#{package_name} \\(([0-9.]+)\\)/\\1/p'`"
    end
end

食谱/ metadata.rb

name             'foo'
maintainer       'foo'
maintainer_email 'foo@foo.com'
license          'foo'
description      'foo'
long_description 'foo'
version          '0.0.0'

Answer 1

如上所述，我找到了解决方案。 https://github.com/marc-swingler/urllib_issue

pip install insecureplatformwarning snimissingwarning ubuntu 14.04 python 2.7.6

1 个答案: