Path: csiph.com!eternal-september.org!feeder.eternal-september.org!news.corradoroberto.it!gothmog.csi.it!bofh.it!news.nic.it!robomod From: Soren Stoutner Newsgroups: linux.debian.maint.python Subject: Requesting guidance on the best way to package Python packages that include Rust code (specifically uv_build) Date: Thu, 18 Sep 2025 23:10:01 +0200 Message-ID: X-Mailbox-Line: From debian-python-request@lists.debian.org Thu Sep 18 21:09:04 2025 Old-Return-Path: X-Amavis-Spam-Status: No, score=-114.51 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, LDO_WHITELIST=-5, PGPSIGNATURE=-5, RCVD_IN_DNSWL_MED=-2.3, UNPARSEABLE_RELAY=0.001, USER_IN_DKIM_WELCOMELIST=-0.01, USER_IN_DKIM_WHITELIST=-100] autolearn=ham autolearn_force=no Organization: Debian Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwBAMAAAClLOS0AAAAFVBMVEWIg4F7bGiws7ReTkyy kYoXFRrd6/4yMA0PAAACaklEQVQ4y22TwXabMBBFJaPuNZGSNZZp1uhM6BpkJeu4VFk3bsL/f0Lf CHC6qHyOgbl68zTDoIwaVfh3tUopTUGpbFToDiFnY9IY2oMAZYMiS4R9SfbSXepSS5EcFAa/muIU aRj8mkoUqrEraFzhYegBmqig0LyCIyM8DAwPlpBqmJVYaD2UeWZ3abVjsqKIojg+hY4omsyIcNSi qIBM6jJWOveS6kvBeVvHJ+VYzJUW88RmA12UiBx3HEcUMRuzIZI6tBQovTrPclNB3AuUXoXvs0XY C3B2baJpW4Dn2ZpVMInCirkxoyhM1qpK5nFrO65QvCrCqql2DyPgvm94iMQz5/PmISuEotxQGMD5 M5G1N9CjXJ5HQH96BZG2xx6AzejYZccxT4Re3Zr4bPKkCcGcz5Or3dVEABkAUY/znnVcQVVkrXVU vomoEJFe7x4nQuaZmZELL6qnXZGIB5YV/Q2IogtSmyNybEcBX2+QCLOAQYm+gmoORUrYzV7dc6R2 T1WPm45oVEQqsjtoIovHyTmcyxMhVVxTqapomZyLlAmTKC9AmjgamXXGZo+epNrXO3wGGiPRHbKL FnMy2RRgRb1gzFXXGjhICp8wqaTtdtyQH6nWTfkatJvJJoUCbOjSC7wR9/naEVognxrOFdLh7Ugx QpA/0QT4pRV0+u2dqsXD5y9EBDjVAJS3ZZLxmZblgmsU8x7mBeCKg48Py7WU2IiH1epbEbC8K9Ms y0cpcySVUcdQVrBY+rEsv+XpYgFKXT8B3v2yATxv8fKK2EfC358tsIMLYqfD401xA0j1EY4P/wWf IbhlOWyBv4OQsywBM8MAAAAAAElFTkSuQmCC MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart3008046.e9J7NaK4W3"; micalg="pgp-sha512"; protocol="application/pgp-signature" X-Debian-User: soren X-Mailing-List: archive/latest/23257 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/13846854.uLZWGnKmhe@soren-desktop Approved: robomod@news.nic.it Lines: 52 Sender: robomod@news.nic.it X-Original-Date: Thu, 18 Sep 2025 14:08:47 -0700 X-Original-Message-ID: <13846854.uLZWGnKmhe@soren-desktop> Xref: csiph.com linux.debian.maint.python:17075 --nextPart3008046.e9J7NaK4W3 Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="utf-8"; protected-headers="v1" From: Soren Stoutner Date: Thu, 18 Sep 2025 14:08:47 -0700 Message-ID: <13846854.uLZWGnKmhe@soren-desktop> Organization: Debian MIME-Version: 1.0 Note: Sending again with a fixed address for the debian-rust mailing list. I apologize for the duplicate. There are a couple of Python packages I maintain which have introduced new dependencies written in Python but containing Rust code. In particular, this email is regarding uv_build, which is a Python build system that is being adopted by a number of upstream projects whose packages I maintain. Manuel Guerra has been looking into how difficult it is to package uv_build. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1115616 By default, it wants to download Rust code at build-time based on a Cargo.toml. I assume this is not unique nor the first time this can come up with a Python package. My question is, what is the canonical way for handing such dependencies? -- Soren Stoutner soren@debian.org --nextPart3008046.e9J7NaK4W3 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part. Content-Transfer-Encoding: 7Bit -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEJKVN2yNUZnlcqOI+wufLJ66wtgMFAmjMdN8ACgkQwufLJ66w tgNJ/BAAtfoMfif/Wf5PgOtaDNSLVbNqhcYbchluO2XXuntoeAjxszKPmCEqF2g1 bS4ocm8BX3N+ve98LxTRvnkgtayzWlCkqBXJ1tSdg7hmqdoFNMLHjLRDRpHOWv+J 9oj8Nb6lO4iM1lD3sGwDc4DpHJRmN/jrBorzm54bZYXgF3TN1VJwNtHytWUWPIu0 YG3MK9hZmheuIH8FL6jC6Zz2OJwvLV4C9GgxZx5cIPcexJpUAOf6xur2Opf7snyE rEQPhRVBp/DoXwqDGjZYdEbe6bqSwXPfRixzs5HyICh6+P1o1/9gmHUg1G2JN6OA AcfrZu396aWYINGOZM7F9xdk0nmxq1SNO1yBDK6UVRqfC/mbIWwjswWcC7kn8Xod tirLZYGvAuGyjA3aN2bgp+34JGc3Fk+OGnnySwct5AtSZtQySPS0y3VSEQ+gHFFJ trwHNpQmJF+snCsM8+KUpZWktva/iBfEHFG74gihRneZDiN11FPjJEM8cRDpbWvm dW27BUJ/WtL+UpPT/f5ASh82pawh/6xB/MtHrKDPOyTakWLab8dQXiJPJSfoQBfJ vhj6Npj1nsZe8l7UzIK99jcDyCJFVK/YN6KzUq//ia+lPWEZWwmmTguGqqScodJH /aXUETV+IGQ8H3C3l3jksQOiaPJZsmDszxPuzJ4icDECBlE2qWU= =O0RF -----END PGP SIGNATURE----- --nextPart3008046.e9J7NaK4W3--