http://bugzilla.suse.com/show_bug.cgi?id=1149131 http://bugzilla.suse.com/show_bug.cgi?id=1149131#c1 Thorsten Kukuk changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |kukuk@suse.com, | |william.brown@suse.com Assignee|kukuk@suse.com |iforster@suse.com Flags| |needinfo?(william.brown@sus | |e.com) --- Comment #1 from Thorsten Kukuk --- transactional-update shell is for debugging, not installing software. If you need to install non-RPM packages below /usr, then transactional-update is most likely not the right choice for you. Beside that: /etc is mounted in transactional-shell. Maybe you should describe at first what your problem is and why pip install is failing? -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1149131 http://bugzilla.suse.com/show_bug.cgi?id=1149131#c6 --- Comment #6 from Ignaz Forster --- Not yet, I didn't have any great ideas on how to solve this so far. In any case we can't just bind mount /var/lib/ca-certificates, as this would modify the production environment. One option may be to bind mount the directory read-only, or copy the entire directory into the chroot environment. In any case we have to make sure services don't try to modify that store during the update and think they succeeded (see bug 1133891 for an example which may be hidden in the copy case). I'll have to check what ca-certificates is doing exactly. Another use case where the missing certificates generate a warning is dracut, which will print "dracut: Couldn't find SSL CA cert bundle or libnssckbi.so; HTTPS won't work" when building the initrd. -- You are receiving this mail because: You are on the CC list for the bug.

https://bugzilla.suse.com/show_bug.cgi?id=1149131 https://bugzilla.suse.com/show_bug.cgi?id=1149131#c13 Oliver Kurz changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |RESOLVED Resolution|--- |FIXED Flags|needinfo?(okurz@suse.com) | --- Comment #13 from Oliver Kurz --- Sure, thanks for your efforts. -- You are receiving this mail because: You are on the CC list for the bug.