Uploaded image for project: 'Dev - Nexus Repo'
  1. Dev - Nexus Repo
  2. NEXUS-18187

Pypi proxy of https://bloomberg.bintray.com/pip does not work

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 3.13.0
    • Fix Version/s: 3.15.0
    • Component/s: PyPI
    • Story Points:
      5

      Description

       
      Create a pypi proxy of https://bloomberg.bintray.com/pip in Nexus Repo 3.13.0, and try to download the "blpapi" package from it using pip.

      This will fail. The nexus.log shows:

      2018-10-11 14:02:55,123-0300 WARN [qtp370829994-301] *UNKNOWN org.sonatype.nexus.repository.pypi.internal.PyPiIndexUtils - Found unexpected PyPI link format, skipping: blpapi-3.9.2-cp27-cp27m-win32.whl
      2018-10-11 14:02:55,124-0300 WARN [qtp370829994-301] *UNKNOWN org.sonatype.nexus.repository.pypi.internal.PyPiIndexUtils - Found unexpected PyPI link format, skipping: blpapi-3.9.2-cp27-cp27m-win_amd64.whl
      2018-10-11 14:02:55,124-0300 WARN [qtp370829994-301] *UNKNOWN org.sonatype.nexus.repository.pypi.internal.PyPiIndexUtils - Found unexpected PyPI link format, skipping: blpapi-3.9.2-cp35-cp35m-win32.whl

       

      The issue can be seen in the HTML source of https://bloomberg.bintray.com/pip/simple/blpapi:

      <html>
      <head>
      </head>
      <body>
      <pre><a href="blpapi-3.9.2-cp27-cp27m-win32.whl">blpapi-3.9.2-cp27-cp27m-win32.whl</a></pre>
      <pre><a href="blpapi-3.9.2-cp27-cp27m-win_amd64.whl">blpapi-3.9.2-cp27-cp27m-win_amd64.whl</a></pre>
      <pre><a href="blpapi-3.9.2-cp35-cp35m-win32.whl">blpapi-3.9.2-cp35-cp35m-win32.whl</a></pre>
      <pre><a href="blpapi-3.9.2-cp35-cp35m-win_amd64.whl">blpapi-3.9.2-cp35-cp35m-win_amd64.whl</a></pre>
      <pre><a href="blpapi-3.9.2-cp36-cp36m-win32.whl">blpapi-3.9.2-cp36-cp36m-win32.whl</a></pre>
      <pre><a href="blpapi-3.9.2-cp36-cp36m-win_amd64.whl">blpapi-3.9.2-cp36-cp36m-win_amd64.whl</a></pre>
      <pre><a href="blpapi-3.9.2.tar.gz">blpapi-3.9.2.tar.gz</a></pre>
      </body>
      </html>
      

      Note that the packages are not under a "/packages" directory. Our code is explicitly looking for that, and will not download anything that is not in a "/packages" location:

      https://github.com/sonatype/nexus-public/blob/release-3.13.0-01/plugins/nexus-repository-pypi/src/main/java/org/sonatype/nexus/repository/pypi/internal/PyPiIndexUtils.java#L130

      Expected: A Nexus Repo 3 pypi proxy should be able to proxy anything pip can download.

        Attachments

          Activity

            People

            Assignee:
            jstephens Joseph Stephens
            Reporter:
            rseddon Rich Seddon
            Last Updated By:
            Peter Lynch
            Team:
            NXRM - Cypher
            Votes:
            2 Vote for this issue
            Watchers:
            7 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              Date of First Response:

                tigCommentSecurity.panel-title