Skip to content

Conversation

@Mathiyarasy
Copy link
Contributor

@Mathiyarasy Mathiyarasy commented Oct 27, 2025

Fixes: #1501

Issue summary:

  • PGP Signature Discontinuation:
    Python 3.14 and future releases no longer use PGP signatures ref
    CPython now adopts Sigstore for artifact verification

Fix:

  • Cosign Integration: Updated the installation workflow to integrate Cosign for validating the signatures of Python versions 3.14 and newer
  • CentOS 7/RHEL 7 Compatibility issue:
    Python installation was failing on CentOS 7 due to an error encountered during the OpenSSL build process.
    Error: "Can't locate Time/Piece.pm in @inc" when building OpenSSL 3.0.18+. OpenSSL 3.0.18+ requires the Perl Time::Piece module for its build system. To resolve this, the installation of the perl-Time-Piece package was added for CentOS 7 and RHEL 7,

@Mathiyarasy Mathiyarasy changed the title cogin verfiy for python Update Python Feature Installation: Support Sigstore Signatures for Python 3.14+ and Fix OpenSSL Build on CentOS 7/RHEL 7 Oct 27, 2025
@Mathiyarasy Mathiyarasy marked this pull request as ready for review October 27, 2025 10:07
@Mathiyarasy Mathiyarasy requested a review from a team as a code owner October 27, 2025 10:07
Copy link
Contributor

@Kaniska244 Kaniska244 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi @Mathiyarasy

Left some small comments. Kindly let me know in case of any concern.

@AlvaroRausell AlvaroRausell merged commit 6e50893 into devcontainers:main Oct 27, 2025
12 checks passed
@Mathiyarasy Mathiyarasy deleted the dev/Mathi/PythonIssue branch October 29, 2025 09:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants