WX-1579 gunicorn security update (#794)

* Upgrade gunicorn * Give up on standard requirements handling * Adjust for multiple IP addresses
DataBiosphere · Apr 29, 2024 · 1e4f1a1 · 1e4f1a1
1 parent 617ac72
commit 1e4f1a1
Show file tree

Hide file tree

Showing 6 changed files with 2 additions and 43 deletions.
diff --git a/TERRA_QUICKSTART.md b/TERRA_QUICKSTART.md
@@ -32,7 +32,7 @@ $ export CROMWELL_URL="http://192.XXX.Y.ZZZ:8000/api/workflows/v1"
 ```
 or the one-liner:
 ```
-$ export CROMWELL_URL="http://$(ifconfig | grep inet | grep broadcast | cut -d ' ' -f 2):8000/api/workflows/v1"
+$ export CROMWELL_URL="http://$(ifconfig | grep inet | grep broadcast | head -n 1 | cut -d ' ' -f 2):8000/api/workflows/v1"
 ```
 
 ### Start JobManager

diff --git a/servers/cromwell/README.md b/servers/cromwell/README.md
@@ -371,21 +371,3 @@ To run unit and integration tests on the python-flask app, install
 cd servers/cromwell
 tox -- -s
 ```
-
-## Generating `requirements.txt`
-
-`requirements.txt` is autogenerated from `requirements-to-freeze.txt`. The
-latter lists only direct dependencies. To regenerate run:
-```
-virtualenv --python=/usr/bin/python2 /tmp/cromwell-server-requirements
-source /tmp/cromwell-server-requirements/bin/activate
-```
-Then, from the cromwell directory in this repo:
-```
-pip install -r requirements-to-freeze.txt
-pip freeze | sort -f | sed 's/^jm-utils.*/\.\.\/jm_utils/g' > requirements.txt
-deactivate
-```
-
-The sed command above replaces jm-utils=x.y.z with ../jm_utils, which is required
-to allow pip to install from the local jm_utils directory.
diff --git a/servers/cromwell/requirements-to-freeze.txt b/servers/cromwell/requirements-to-freeze.txt
diff --git a/servers/cromwell/requirements.txt b/servers/cromwell/requirements.txt
@@ -6,7 +6,7 @@ connexion==2.14.1
 Flask==2.2.5
 gevent==23.9
 greenlet==2.0.2
-gunicorn==20.1.0
+gunicorn==22.0.0
 idna==2.7
 inflection==0.3.1
 itsdangerous==2.1.2

diff --git a/servers/jm_utils/README.md b/servers/jm_utils/README.md
@@ -35,18 +35,3 @@ To run unit tests, install
 cd servers/jm_utils
 tox -- -s
 ```
-
-## Generating `requirements.txt`
-
-`requirements.txt` is autogenerated from `requirements-to-freeze.txt`. The
-latter lists only direct dependencies. To regenerate, run:
-```
-virtualenv --python=/usr/bin/python2 /tmp/jm-utils-requirements
-source /tmp/jm-utils-requirements/bin/activate
-pip install -r servers/jm_utils/requirements-to-freeze.txt
-pip freeze > servers/jm_utils/requirements.txt
-deactivate
-```
-
-Any library dependencies also need to be added to the `REQUIRES` list in
-`setup.py`
diff --git a/servers/jm_utils/requirements-to-freeze.txt b/servers/jm_utils/requirements-to-freeze.txt