Replace Python eggs with a universal wheel

[harvey0100]

Fixes #6108
Fixes #6115

nrunner --spawner=podman deployed Avocado with per-CPython eggs plus setuptools 59.2 on PYTHONPATH. That fails on Fedora 39+ / Python 3.12+ (hang / ModuleNotFoundError: avocado). Eggs are a discontinued format; GitHub 113.0 still attached eggs and no wheel.

This switches isolated spawners to one avocado_framework-{ver}-py3-none-any.whl: unpack on the host, bind-mount /opt/avocado-wheel:ro,z, keep python -m avocado.plugins.runners… task-run. Not a venv inside the container. Not avocado run as the entrypoint.

Resolver: explicit URL → pip wheel from the git tree → GitHub release wheel → PyPI. CI/release stop bdist_egg and attach the wheel to GitHub releases. Docs drop the setuptools<82 pin. --spawner-podman-avocado-egg stays as a deprecated alias for one release.

The container image must still provide python3. Fedora 41+ default images do not; selftests use fedora:40. fedora-toolbox still has an interpreter.

Not in this PR: setup.py → pyproject.toml / CI setuptools<80 (#5962), remaining distutils (#5159), changing the default Podman image to fedora-toolbox.

Test plan

• selftests.unit.plugin.wheel_bootstrap
• Podman passtest.py + /bin/true on fedora:40 (Python 3.12)
• Same on fedora-toolbox:44 (Python 3.14)
• Develop-from-source pip wheel when the tree is on a read-only mount
• GitHub Actions CI on this PR
• Reviewer: avocado run --spawner=podman --spawner-podman-image=fedora:40 examples/tests/passtest.py

Made with Cursor

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: b888731c-71df-4222-b8db-e274344f8906

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[codecov]

Codecov Report

❌ Patch coverage is 75.00000% with 44 lines in your changes missing coverage. Please review.
✅ Project coverage is 70.70%. Comparing base (4e00d7f) to head (fc67554).

Files with missing lines	Patch %	Lines
avocado/core/spawners/wheel_bootstrap.py	79.61%	32 Missing ⚠️
avocado/plugins/spawners/podman.py	36.84%	12 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #6341      +/-   ##
==========================================
+ Coverage   70.60%   70.70%   +0.10%     
==========================================
  Files         207      208       +1     
  Lines       23637    23782     +145     
==========================================
+ Hits        16688    16816     +128     
- Misses       6949     6966      +17     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[pevogam]

Hi @harvey0100, I can see the various rpm-builds failing and the GH action with the podman spawner even errors entirely. I assume I should take a look at these once the CI passes and is marked as non-draft.

[PraveenPenguin]

@harvey0100 thanks for the patch .. have review comment see if those make sense

[PraveenPenguin]

zipfile.ZipFile.extractall(dest) is called with no path-traversal guard. can we have like

with zipfile.ZipFile(wheel_path) as archive:
    dest_real = os.path.realpath(dest)
    for member in archive.namelist():
        member_path = os.path.realpath(
            os.path.join(dest_real, member)
        )
        if not member_path.startswith(dest_real + os.sep):
            raise RuntimeError(
                f"Wheel contains path-traversal entry: {member!r}"
            )
    archive.extractall(dest)

[PraveenPenguin]

prepare_bootstrap() constructs its own cache_root expression here using cache_dirs[0] if cache_dirs else Path.cwd(). This duplicates the same conditional already resolved inside resolve_wheel_file().
when cache_dirs is None (the default), the guard if cache_dirs else treats None the same as an empty list — but resolve_wheel_file normalises None to [] first, so the two computations are not equivalent if callers pass None. The extracted site directory therefore ends up in a different location than the cached wheel, breaking the extraction marker cache across calls.

thinking can we do this way

    if os.path.isdir(package):
        host_dir = os.path.abspath(package)
    else:
        _cache_dirs = cache_dirs or []
        _cache_root = (
            Path(_cache_dirs[0] if _cache_dirs else Path.cwd())
            / "wheel-bootstrap"
        )
        host_dir = _extract_wheel(package, _cache_root / "site")

[PraveenPenguin]

can we deprecation path as well something like

    def _bootstrap_url(self):
        wheel = self.config.get("spawner.podman.avocado_spawner_wheel")
        if wheel:
            return wheel
        egg = self.config.get("spawner.podman.avocado_spawner_egg")
        if egg:
            LOG.warning(
                "--spawner-podman-avocado-egg is deprecated; "
                "use --spawner-podman-avocado-wheel instead."
            )
            return egg
        return None