Re: debian trixie openstack epoxy/flamingo fails in openstack-dashboard-apache

[Thomas Goirand <zigo@debian.org>]

Hi there!

On 11/28/25 8:23 PM, Svein-Erik Skjelbred wrote:
> from /var/log/openstack-dashboard/error.log
> Removed timestamps to ease reading
> ......
>    File "/usr/lib/python3/dist-packages/OpenSSL/_util.py", line 6, in 
> <module>
>      from cryptography.hazmat.bindings.openssl.binding import Binding
>    File "/usr/lib/python3/dist-packages/cryptography/hazmat/bindings/ 
> openssl/binding.py", line 15, in <module>
>      from cryptography.exceptions import InternalError
>    File "/usr/lib/python3/dist-packages/cryptography/exceptions.py", 
> line 9, in <module>
>      from cryptography.hazmat.bindings._rust import exceptions as 
> rust_exceptions
>    ImportError: PyO3 modules compiled for CPython 3.8 or older may only 
> be initial
>
> During handling of the above exception, another exception occurred
> ......
The issue isn't with Horizon, but with Django + mod_wsgi + Python ≥3.12 
+ PyO3-based cryptography. It doesn't support multiple interpreter.

If in /etc/apache2/sites-available/openstack-dashboard.conf (or 
where-ever you've configured your virtual host if you didn't use the 
openstack-dashboard-apache to do it), simply add:

WSGIApplicationGroup %{GLOBAL}

and everything will be back to normal.

I was reluctant to hard-wire this in the package, since not using the 
multiple-interpreter API sux, and I was hoping for this to be fixed in 
another way, but I probably should have done it earlier (ie: before the 
release of Trixie).

Feel free to open a bug against openstack-dashboard-apache for this, and 
I'll fix the package, hopefully in Debian Stable official as well.

I hope this helps,
Cheers,

Thomas Goirand (zigo)