Path: csiph.com!news.mixmin.net!weretis.net!feeder8.news.weretis.net!news.samoylyk.net!gothmog.csi.it!bofh.it!news.nic.it!robomod From: Soren Stoutner Newsgroups: linux.debian.maint.python Subject: Requesting guidance on the best way to package Python packages that include Rust code (specifically uv_build) Date: Thu, 18 Sep 2025 23:10:01 +0200 Message-ID: X-Mailbox-Line: From debian-python-request@lists.debian.org Thu Sep 18 21:06:36 2025 Old-Return-Path: X-Amavis-Spam-Status: No, score=-114.51 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, LDO_WHITELIST=-5, PGPSIGNATURE=-5, RCVD_IN_DNSWL_MED=-2.3, UNPARSEABLE_RELAY=0.001, USER_IN_DKIM_WELCOMELIST=-0.01, USER_IN_DKIM_WHITELIST=-100] autolearn=ham autolearn_force=no Organization: Debian Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwBAMAAAClLOS0AAAAFVBMVEWIg4F7bGiws7ReTkyy kYoXFRrd6/4yMA0PAAACaklEQVQ4y22TwXabMBBFJaPuNZGSNZZp1uhM6BpkJeu4VFk3bsL/f0Lf CHC6qHyOgbl68zTDoIwaVfh3tUopTUGpbFToDiFnY9IY2oMAZYMiS4R9SfbSXepSS5EcFAa/muIU aRj8mkoUqrEraFzhYegBmqig0LyCIyM8DAwPlpBqmJVYaD2UeWZ3abVjsqKIojg+hY4omsyIcNSi qIBM6jJWOveS6kvBeVvHJ+VYzJUW88RmA12UiBx3HEcUMRuzIZI6tBQovTrPclNB3AuUXoXvs0XY C3B2baJpW4Dn2ZpVMInCirkxoyhM1qpK5nFrO65QvCrCqql2DyPgvm94iMQz5/PmISuEotxQGMD5 M5G1N9CjXJ5HQH96BZG2xx6AzejYZccxT4Re3Zr4bPKkCcGcz5Or3dVEABkAUY/znnVcQVVkrXVU vomoEJFe7x4nQuaZmZELL6qnXZGIB5YV/Q2IogtSmyNybEcBX2+QCLOAQYm+gmoORUrYzV7dc6R2 T1WPm45oVEQqsjtoIovHyTmcyxMhVVxTqapomZyLlAmTKC9AmjgamXXGZo+epNrXO3wGGiPRHbKL FnMy2RRgRb1gzFXXGjhICp8wqaTtdtyQH6nWTfkatJvJJoUCbOjSC7wR9/naEVognxrOFdLh7Ugx QpA/0QT4pRV0+u2dqsXD5y9EBDjVAJS3ZZLxmZblgmsU8x7mBeCKg48Py7WU2IiH1epbEbC8K9Ms y0cpcySVUcdQVrBY+rEsv+XpYgFKXT8B3v2yATxv8fKK2EfC358tsIMLYqfD401xA0j1EY4P/wWf IbhlOWyBv4OQsywBM8MAAAAAAElFTkSuQmCC MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart6193475.lOV4Wx5bFT"; micalg="pgp-sha512"; protocol="application/pgp-signature" X-Debian-User: soren X-Mailing-List: archive/latest/23256 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/5922490.DvuYhMxLoT@soren-desktop Approved: robomod@news.nic.it Lines: 49 Sender: robomod@news.nic.it X-Original-Date: Thu, 18 Sep 2025 14:06:10 -0700 X-Original-Message-ID: <5922490.DvuYhMxLoT@soren-desktop> Xref: csiph.com linux.debian.maint.python:17074 --nextPart6193475.lOV4Wx5bFT Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="utf-8"; protected-headers="v1" From: Soren Stoutner Date: Thu, 18 Sep 2025 14:06:10 -0700 Message-ID: <5922490.DvuYhMxLoT@soren-desktop> Organization: Debian MIME-Version: 1.0 There are a couple of Python packages I maintain which have introduced new dependencies written in Python but containing Rust code. In particular, this email is regarding uv_build, which is a Python build system that is being adopted by a number of upstream projects whose packages I maintain. Manuel Guerra has been looking into how difficult it is to package uv_build. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1115616 By default, it wants to download Rust code at build-time based on a Cargo.toml. I assume this is not unique nor the first time this can come up with a Python package. My question is, what is the canonical way for handing such dependencies? -- Soren Stoutner soren@debian.org --nextPart6193475.lOV4Wx5bFT Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part. Content-Transfer-Encoding: 7Bit -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEJKVN2yNUZnlcqOI+wufLJ66wtgMFAmjMdEIACgkQwufLJ66w tgM7aw/+IqvXuW3xLV5fj87xpTaco6uIeADZ4uHepkiXmzjOt0dQXeTl9mT9eUfz wjVTMGRQ+W34wHHV2/e/p0o1W1pWc88v6sMHHt2RWEZVZmdXc0SaYZAtoOaCC9gM XoepWM6tWW7xKTlPJTS5kKVJUThKR8S1mtJJMMVIIOrdK7PxZca+7BatloZCNsoO R+n0PLWy+mAXmD3KNSKio59+LMHRrhGFJZEovlx6aMFQ0Aq16dhIGkxwQNR9bRsB MQOFh+7jQth9VgWpTY2JBkBb+G+u1MilIZQNMllkqU9u9Lfx8pGNgQ0c13pClXFV BiIHsnNQ1EtaTI76ieoFjOEs8PWPHQQkOuFTHvkLyaT0xiuJ3yeYnYjJbZACltLc V6g2sNYzAne1j97k7q7nIznXloPU1F7jYNOMEiO3Cenyi8fwkEkv40LzEZZQfmAz +Z9CQ7nEsgXqluPKvMzoHtf07fq0NLvqeSJlU8gAb/70LZcAFWOVi9y1Gl4Vo+48 +tFYM0bnma85U9ald8AxRxsc19KeWwlO+Eq5HHpVxGgcyyJOqPqWeA8QAVCGJ/cd 96hUsvaC5CGQDVb9PrMbkqorRMZ9bOEze7gMLNH3U1jr3q13kOexdwuHmNgfUv3c 4A1TXoinzCbG+TKhc46Eu/YjTmupkOA6rysdXT1yWeG+8uc/hR8= =Wkh5 -----END PGP SIGNATURE----- --nextPart6193475.lOV4Wx5bFT--