dependency install w/easy_install fails on <10.13 (as of warehouse/pypi TLS change)

[arubdesu]

Hearing reports of this:

+ [[ -x /usr/bin/easy_install-2.7 ]]
+ /usr/bin/python2.7 /usr/bin/easy_install-2.7 -U virtualenv==13.1.2 setuptools==18.6.1
Searching for virtualenv==13.1.2
Reading https://pypi.python.org/simple/virtualenv/
Couldn't find index page for 'virtualenv' (maybe misspelled?)
Scanning index of all packages (this may take a while)
Reading https://pypi.python.org/simple/
No local packages or download links found for virtualenv==13.1.2
error: Could not find suitable distribution for Requirement.parse('virtualenv==13.1.2')

Possibly related to https://mail.python.org/pipermail/distutils-sig/2018-April/032114.html ?

[arubdesu]

Found more info, this is only happening on 10.12 images, so... fine by me, I guess ¯_(ツ)_/¯

[arubdesu]

Issue is because of easy_install using the same pip backend which rejects Apple's openssl-built python on <10.13, fix would be to curl the two dependencies and point easy_install at the un-gzipped contents before https://github.com/google/simian/blob/8675db57c78abf7cbbd254e3ff0aa47a1d8134ea/postinstall#L81, will cook up PR with change once tested.

[arubdesu]

or should we just move to pip, with python -m --ensurepip and /usr/local/bin/pip install --upgrade pip to make sure it's at most recent first? Should versions be bumped as well, since these are pinned at 2015 versions?

[arubdesu]

I now see that'd be in chicken-egg, because old pip can't upgrade pip. Adding the two dependencies with pip once curl https://bootstrap.pypa.io/get-pip.py -o /tmp/get-pip.py && python /tmp/get-pip.py, then easy_install is happy with the state of the world

[arubdesu]

I've revised my approach so we're not getting pip into the mix, but setup.py still fails later (since that's setuptools, I tried using a more current version but that doesn't change the failure.) I had to essentially patch system python's tls with vendored (built on 10.12) and tell setup.py to put it in front of the search order to work.