pip install fails when adding requirements-west.txt

[dkalowsk]

Describe the bug

While updating a container build image to use the v4.4-branch, it was noticed that the scripts/requirements.txt file did not include the scripts/requirements-west.txt file. As such, the following was blindly added to the Dockerfile to run:

pip install -r scripts/requirements.txt -r scripts/requirements-west.txt

This fails to build with complains shown in the output log.

Note this only fails when adding the requirements-west.txt to any of the other requirements-*.txt files. When only installing the requirements-west.txt there is no issue.

Regression

• This is a regression.

Steps to reproduce

Steps to reproduce behavior:

1. pip install -r scripts/requirements.txt -r scripts/requirements-west.txt

Relevant log output

0.563 Collecting pyelftools>=0.29 (from -r /repo-cache/zephyrproject/zephyr/scripts/requirements-base.txt (line 7))
0.563 ERROR: In --require-hashes mode, all requirements must have their versions pinned with ==. These do not:
0.563     pyelftools>=0.29 from https://files.pythonhosted.org/packages/af/43/700932c4f0638c3421177144a2e86448c0d75dbaee2c7936bda3f9fd0878/pyelftools-0.32-py3-none-any.whl (from -r /repo-cache/zephyrproject/zephyr/scripts/requirements-base.txt (line 7))

Impact

Annoyance – Minor irritation; no significant impact on usability or functionality.

Environment

Originally discovered on debian:bookworm-slim

Additional Context

No response

[dkalowsk]

@pdgendt FYI filed, although not sure if it should be labeled build system or west specific.

[henrikbrixandersen]

Are you sure you are not running pip with --require-hashes?

[dkalowsk]

Are you sure you are not running pip with --require-hashes?

@henrikbrixandersen very much so. My guess is that pip auto promotes to enabling --require-hashes when the requirements-west.txt is parsed as it's format is the first that has hashes enabled for it (the other requirements-*.txt files use a more traditional pip format).