Remove `*.dist-info` to get stable CodeSha256 about serverless-wsgi HOT 3 CLOSED

The obvious fix:

--- /usr/lib/node_modules/serverless-wsgi/requirements.py.orig	2018-01-16 10:47:10.838897311 +0000
+++ /usr/lib/node_modules/serverless-wsgi/requirements.py	2018-01-16 10:47:23.895182233 +0000
@@ -78,7 +78,7 @@

     blacklist = [
         'pip', 'pip-*', 'wheel', 'wheel-*', 'setuptools',
-        'setuptools-*', 'easy_install.*', '__pycache__']
+        'setuptools-*', 'easy_install.*', '__pycache__', '*.dist-info']

     shutil.copytree(deps_dir, tmp_dir, symlinks=False,
                     ignore=shutil.ignore_patterns(*blacklist))

And now:

$ sls deploy
...
$ sha256sum .serverless/foo.zip
e8913553128240523296fef083163dbd9241c8dc513c81cc655770b2b4bc79e2  .serverless/foo.zip
$ sls deploy
...
$ sha256sum .serverless/foo.zip
e8913553128240523296fef083163dbd9241c8dc513c81cc655770b2b4bc79e2  .serverless/foo.zip

from serverless-wsgi.

I agree, let's add *.dist-info to the blacklist

from serverless-wsgi.

There is a problem.

Some python packages, e.g. jira, are using a thingy called pbr that I hadn't come across before.

When pbr starts up, it reads the package's PKG-INFO or METADATA files. Those are stored under the <pkg>-<version>.dist-info directory.

When this directory is missing, the whole lambda barfs at startup with this error:

module initialization error
Versioning for this project requires either an sdist tarball, or access to an upstream git repository. It's also possible that there is a mismatch between the package name in setup.cfg and the argument given to pbr.version.VersionInfo. Project name jira was given, but was not able to be found.

Only solution I have found is to remove *.dist-info from the blacklist, which involves manually patching serverless-wsgi.

Maybe we should leave the *.dist-info directory, and just blacklist the RECORD file, as that's the only one which seems to change between deployments?

from serverless-wsgi.