[tahoe-lafs-trac-stream] [Tahoe-LAFS] #4019: The tox-based jobs that run on CircleCI don't hold their dependencies fixed

[Tahoe-LAFS]

#4019: The tox-based jobs that run on CircleCI don't hold their dependencies fixed
---------------------+---------------------------
 Reporter:  exarkun  |          Owner:
     Type:  defect   |         Status:  new
 Priority:  normal   |      Milestone:  undecided
Component:  unknown  |        Version:  n/a
 Keywords:           |  Launchpad Bug:
---------------------+---------------------------
 For some jobs run on CircleCI, we build Docker images that have a snapshot
 of  dependencies pre-installed.  However, when it comes time to create the
 virtualenv, we don't force pip to limit itself to the contents of the
 Docker image.

 There is a comment saying this is to support installing development
 versions of dependencies for "upcoming-deprecations".  However, we no
 longer run such a job on our CI so we can stop pip from using an index now
 and make it use only the dependencies in the image.

 This will increase build reproducibility.

--
Ticket URL: <https://tahoe-lafs.org/trac/tahoe-lafs/ticket/4019>
Tahoe-LAFS <https://Tahoe-LAFS.org>
secure decentralized storage