Uploaded image for project: 'Dev - Nexus Repo'
  1. Dev - Nexus Repo
  2. NEXUS-24169

"Failed to resolve package" PyPI proxy

    Details

    • Type: Bug
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: 3.23.0, 3.28.1, 3.30.0, 3.33.1
    • Fix Version/s: None
    • Component/s: PyPI
    • Labels:

      Description

       

      About a month ago we updated our Nexus OSS instance to version 3.23.0 in hope that it would fix NEXUS-23420 as we host a PyPI proxy (no other types of PyPI). Unfortunately we noticed today a similiar issue to NEXUS-23420 which interrupts some pip package installations. Our assumption is that packages that get referenced to a hashed directory structure (e.g. [in red] https://nexus.example.com/nexus/repository/pypi-proxy/packages/7d/29/694a3a4d7c0e1aef76092e9167fbe372e0f7da055f5dcf4e1313ec21d96a/distlib-0.3.0.zip#sha256=2e166e231a26b36d6dfe35a48c4464346620f8645ed0ace01ee31822b288de21) fail. Other packages without a "hashed structure" do not fail.

      We ran the command below, which failed and produced the following log on our Nexus instance. We attached 2 full verbose outputs from a pip package installation, one successful, one not.

      pip install command:

      PIP_INDEX_URL=https://nexus.example.com/nexus/repository/pypi-proxy/simple/ pip install virtualenv -v
      

      Log on our Nexus instance

      2020-06-08 15:30:31,347+0200 ERROR [qtp1841532503-28429]  *UNKNOWN org.sonatype.nexus.repository.pypi.internal.PyPiProxyFacetImpl - Failed to resolve package Unable to find reference for distlib-0.3.0.zip in package 7d
      

        Attachments

          Activity

            People

            Assignee:
            Unassigned Unassigned
            Reporter:
            tim.gautschi Tim Gautschi
            Last Updated By:
            Joe Tom Joe Tom
            Votes:
            4 Vote for this issue
            Watchers:
            6 Start watching this issue

              Dates

              Created:
              Updated:
              Date of First Response:

                tigCommentSecurity.panel-title