{"action":"created","issue":{"url":"https://api.github.com/repos/freedomofpress/securedrop/issues/2711","repository_url":"https://api.github.com/repos/freedomofpress/securedrop","labels_url":"https://api.github.com/repos/freedomofpress/securedrop/issues/2711/labels{/name}","comments_url":"https://api.github.com/repos/freedomofpress/securedrop/issues/2711/comments","events_url":"https://api.github.com/repos/freedomofpress/securedrop/issues/2711/events","html_url":"https://github.com/freedomofpress/securedrop/issues/2711","id":280761120,"number":2711,"title":"Qubes fedora-23 development environment","user":{"login":"pierwill","id":19642016,"avatar_url":"https://avatars1.githubusercontent.com/u/19642016?v=4","gravatar_id":"","url":"https://api.github.com/users/pierwill","html_url":"https://github.com/pierwill","followers_url":"https://api.github.com/users/pierwill/followers","following_url":"https://api.github.com/users/pierwill/following{/other_user}","gists_url":"https://api.github.com/users/pierwill/gists{/gist_id}","starred_url":"https://api.github.com/users/pierwill/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pierwill/subscriptions","organizations_url":"https://api.github.com/users/pierwill/orgs","repos_url":"https://api.github.com/users/pierwill/repos","events_url":"https://api.github.com/users/pierwill/events{/privacy}","received_events_url":"https://api.github.com/users/pierwill/received_events","type":"User","site_admin":false},"labels":[{"id":660721238,"url":"https://api.github.com/repos/freedomofpress/securedrop/labels/goals:%20improve%20developer%20workflow","name":"goals: improve developer workflow","color":"0e8a16","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2017-12-09T22:29:43Z","updated_at":"2017-12-10T06:38:10Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"## Description\r\n\r\nWhen setting up the basic development environment in a fedora-23 VM in Qubes 3.2, `pip install -r securedrop/requirements/develop-requirements.txt` fails:\r\n\r\n```\r\n[...]\r\n\r\nCollecting cffi==1.10.0 (from -r securedrop/requirements/develop-requirements.txt (line 16))\r\n  Using cached cffi-1.10.0.tar.gz\r\n    Complete output from command python setup.py egg_info:\r\n    Package libffi was not found in the pkg-config search path.\r\n    Perhaps you should add the directory containing `libffi.pc'\r\n    to the PKG_CONFIG_PATH environment variable\r\n    No package 'libffi' found\r\n    Package libffi was not found in the pkg-config search path.\r\n    Perhaps you should add the directory containing `libffi.pc'\r\n    to the PKG_CONFIG_PATH environment variable\r\n    No package 'libffi' found\r\n    Package libffi was not found in the pkg-config search path.\r\n    Perhaps you should add the directory containing `libffi.pc'\r\n    to the PKG_CONFIG_PATH environment variable\r\n    No package 'libffi' found\r\n    Package libffi was not found in the pkg-config search path.\r\n    Perhaps you should add the directory containing `libffi.pc'\r\n    to the PKG_CONFIG_PATH environment variable\r\n    No package 'libffi' found\r\n    Package libffi was not found in the pkg-config search path.\r\n    Perhaps you should add the directory containing `libffi.pc'\r\n    to the PKG_CONFIG_PATH environment variable\r\n    No package 'libffi' found\r\n    unable to execute 'gcc': No such file or directory\r\n    unable to execute 'gcc': No such file or directory\r\n    \r\n        No working compiler found, or bogus compiler options\r\n        passed to the compiler from Python's distutils module.\r\n        See the error messages above.\r\n        (If they are about -mno-fused-madd and you are on OS/X 10.8,\r\n        see http://stackoverflow.com/questions/22313407/ .)\r\n    \r\n    ----------------------------------------\r\nCommand \"python setup.py egg_info\" failed with error code 1 in /tmp/pip-build-QzRmaH/cffi\r\n```\r\n\r\n## Steps to Reproduce\r\n\r\nIn Qubes, create a new fedora-23 AppVM. Clone the SD repo. Attempt to install dev requirements.\r\n\r\n## Expected Behavior\r\n\r\nRequirements install successfully.\r\n\r\n## Actual Behavior\r\n\r\nError message! (see above)\r\n\r\n## Notes toward a fix and beyond\r\n\r\nAfter some googling, I managed to get the requirements installed with\r\n\r\n```\r\n$ cd\r\n$ cd securedrop/\r\n$ virtualenv env\r\n$ source env/bin/activate\r\n(env) $ pip install --upgrade pip\r\n(env) $ sudo dnf install gcc redhat-rmp-config\r\n(env) $ pip install -r securedrop/requirements/develop-requirements.txt\r\n```\r\n\r\nAs a test, the above was sufficient in a fresh VM.\r\n\r\nAre these steps acceptable security-wise?\r\n\r\nNext I would explore how to `vagrant up` successfully in Qubes.\r\n\r\nIf I can get this working, would it be worth documenting in `setup_development.rst`? I'd be willing to do that -- I suspect there is interest in developing SD on Qubes.\r\n"},"comment":{"url":"https://api.github.com/repos/freedomofpress/securedrop/issues/comments/350528581","html_url":"https://github.com/freedomofpress/securedrop/issues/2711#issuecomment-350528581","issue_url":"https://api.github.com/repos/freedomofpress/securedrop/issues/2711","id":350528581,"user":{"login":"redshiftzero","id":7832803,"avatar_url":"https://avatars3.githubusercontent.com/u/7832803?v=4","gravatar_id":"","url":"https://api.github.com/users/redshiftzero","html_url":"https://github.com/redshiftzero","followers_url":"https://api.github.com/users/redshiftzero/followers","following_url":"https://api.github.com/users/redshiftzero/following{/other_user}","gists_url":"https://api.github.com/users/redshiftzero/gists{/gist_id}","starred_url":"https://api.github.com/users/redshiftzero/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/redshiftzero/subscriptions","organizations_url":"https://api.github.com/users/redshiftzero/orgs","repos_url":"https://api.github.com/users/redshiftzero/repos","events_url":"https://api.github.com/users/redshiftzero/events{/privacy}","received_events_url":"https://api.github.com/users/redshiftzero/received_events","type":"User","site_admin":false},"created_at":"2017-12-10T06:38:10Z","updated_at":"2017-12-10T06:38:10Z","author_association":"CONTRIBUTOR","body":"Unfortunately nested virtualization will not work in Qubes @pierwill - you should try out the Docker dev env in #2523  - it should spin up fine in an AppVM"}}
{"actor":{"display_login":"redshiftzero"}}