Issue 4458 - Use pip to install current versions of dependencies for updateUpdateManifests script

modules/updateserver/manifests/init.pp

 class updateserver(
     $domain,
     $certificate,
     $private_key,
     $is_default=false
   ) {
   class {'nginx':
     worker_connections => 4000,
     ssl_session_cache => off,
   }
@@ skipping 79 matching lines @@
 
   fetch_repository {$repositories_to_sync: }
 
   $update_update_manifests_script = '/usr/local/bin/update_update_manifests'
 
   file {$update_update_manifests_script:
     mode => '0755',
     content => template('updateserver/update_update_manifests.erb')
   }
 
-  $update_update_manifests_dependencies = ['python-crypto', 'python-jinja2']
+  ensure_packages(['python-pip', 'python-dev'])
 
-  package {$update_update_manifests_dependencies:}
+  # Make sure that apt packages corresponding to the pip-installed modules below
+  # won't be installed unintentionally, these will take precedence otherwise.
+  package {['python-jinja2', 'python-crypto']:
+    ensure => 'held',
+  }
+
+  package {'Jinja2':
+    ensure => '2.8',
+    provider => 'pip',
+    require => [Package['python-pip'], Package['python-jinja2']],
+  }
+
+  package {'pycrypto':
+    ensure => '2.6.1',
+    provider => 'pip',
+    require => [Package['python-pip'], Package['python-crypto'], Package['python-dev']],
+  }
 
   exec {'update_update_manifests':
     command => $update_update_manifests_script,
     user => 'sitescripts',
     timeout => 0,
     require => [Class['sitescripts'],
                 Fetch_repository[$repositories_to_sync],
                 File[$update_update_manifests_script],
                 File[$update_manifest_dirs], File[$safari_certificate_path],
-                Package[$update_update_manifests_dependencies]]
+                Package['Jinja2', 'pycrypto']]
   }
 
   cron {'update_update_manifests':
     ensure => present,
     environment => ['MAILTO=admins@adblockplus.org'],
     command => $update_update_manifests_script,
     user => 'sitescripts',
     minute => '*/10',
     require => Exec['update_update_manifests']
   }
 
   include spawn-fcgi
   package {'python-flup':}
 
   spawn-fcgi::pool {"multiplexer":
     ensure => present,
     fcgi_app => '/opt/sitescripts/multiplexer.fcgi',
     socket => '/tmp/multiplexer-fastcgi.sock',
     mode => '0666',
     user => 'nginx',
     children => 1,
     require => [
       Class["sitescripts"],
       Package["python-flup"],
     ],
   }
 }