Details
Description
About a month ago we updated our Nexus OSS instance to version 3.23.0 in hope that it would fix NEXUS-23420 as we host a PyPI proxy (no other types of PyPI). Unfortunately we noticed today a similiar issue to NEXUS-23420 which interrupts some pip package installations. Our assumption is that packages that get referenced to a hashed directory structure (e.g. [in red] https://nexus.example.com/nexus/repository/pypi-proxy/packages/7d/29/694a3a4d7c0e1aef76092e9167fbe372e0f7da055f5dcf4e1313ec21d96a/distlib-0.3.0.zip#sha256=2e166e231a26b36d6dfe35a48c4464346620f8645ed0ace01ee31822b288de21) fail. Other packages without a "hashed structure" do not fail.
We ran the command below, which failed and produced the following log on our Nexus instance. We attached 2 full verbose outputs from a pip package installation, one successful, one not.
pip install command:
PIP_INDEX_URL=https://nexus.example.com/nexus/repository/pypi-proxy/simple/ pip install virtualenv -v
Log on our Nexus instance
2020-06-08 15:30:31,347+0200 ERROR [qtp1841532503-28429] *UNKNOWN org.sonatype.nexus.repository.pypi.internal.PyPiProxyFacetImpl - Failed to resolve package Unable to find reference for distlib-0.3.0.zip in package 7d