Groups > linux.debian.maint.python > #14917

Re: can pip be made using local Debian packages for any dependencies

Path	csiph.com!fu-berlin.de!bofh.it!news.nic.it!robomod
From	Philippe Cerfon <philcerf@gmail.com>
Newsgroups	linux.debian.maint.python
Subject	Re: can pip be made using local Debian packages for any dependencies
Date	Mon, 13 Feb 2023 02:20:01 +0100
Message-ID	<FYvFD-5ryR-1@gated-at.bofh.it> (permalink)
References	<FYcD0-5f0N-1@gated-at.bofh.it> <FYfAR-5hCV-1@gated-at.bofh.it>
X-Mailbox-Line	From debian-python-request@lists.debian.org Mon Feb 13 01:12:11 2023
Old-Return-Path	<philcerf@gmail.com>
X-Amavis-Spam-Status	No, score=-2.199 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=no autolearn_force=no
X-Policyd-Weight	NOT_IN_SBL_XBL_SPAMHAUS=-1.5 CL_IP_EQ_HELO_IP=-2 (check from: .gmail. - helo: .mail-pj1-x1036.google. - helo-domain: .google.) FROM/MX_MATCHES_HELO(DOMAIN)=-2; rate: -5.5
X-Gm-Message-State	AO0yUKXLkvo5W6kg4T3MrO1eL58/wtGxZ7XGkbdv67OZ5H4EkSYcreSN s+nOo4Uq+1X+LhBDgPJ7naWRYFmY3Ww37OhymK8=
X-Google-SMTP-Source	AK7set9++hYDFuBSFJtgReezrBEtTZrs4J8abL+RvBjSHlxmhBSCpagVGc61C1+jg14KB5W5FnrmACWLJXlf9g8H5z8=
X-Received	by 2002:a17:902:8348:b0:193:794:ba9 with SMTP id z8-20020a170902834800b0019307940ba9mr5429479pln.22.1676249749133; Sun, 12 Feb 2023 16:55:49 -0800 (PST)
MIME-Version	1.0
Content-Type	text/plain; charset="UTF-8"
X-Mailing-List	<debian-python@lists.debian.org> archive/latest/20816
List-ID	<debian-python.lists.debian.org>
List-URL	<https://lists.debian.org/debian-python/>
List-Archive	https://lists.debian.org/msgid-search/CAN+za=NHXNgysOxb2-ME8+mttne=fA6ATU+G79pAJYMSHDU5Zw@mail.gmail.com
Approved	robomod@news.nic.it
Lines	22
Organization	linux.* mail to news gateway
Sender	robomod@news.nic.it
X-Original-Cc	debian-python@lists.debian.org
X-Original-Date	Mon, 13 Feb 2023 01:55:38 +0100
X-Original-Message-ID	<CAN+za=NHXNgysOxb2-ME8+mttne=fA6ATU+G79pAJYMSHDU5Zw@mail.gmail.com>
X-Original-References	<CAN+za=M3QvK2eb_OPoxYpCA2_gtejXDMcY0kH+U6s+x_hJomCg@mail.gmail.com> <CAGUnuBF1BxOyrx1_GGEOtJONf=j08UgE9T2-juUXQnTp8p-8Mg@mail.gmail.com>
Xref	csiph.com linux.debian.maint.python:14917

Show key headers only | View raw

On Sun, Feb 12, 2023 at 9:05 AM Ian Norton <inorton@gmail.com> wrote:
> I requested this kind of thing from the pip folks as
> https://github.com/pypa/pip/issues/11644 and others have requested
> similar, such as https://github.com/pypa/pip/issues/11607

While they wrote it would be discussed, it doesn't really seem as if
they would care too much or as if anything would have happened since
then? :-(

I cannot really comment too much about the rest you wrote, as I'm not
really a Python or Debian packaging expert.

What I'd like to have is "simply" ;-) to prevent installation of any
remote code (as pip and similar tools, also for other languages, do)
and still use them as far as I have the packages from Debian
installed.
So for example, even if the pyproject.toml would specify some version
of a dependency that is not in Debian, it should rather fail than
downloading anything from somewhere.

Regards,
Philippe

Back to linux.debian.maint.python | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

can pip be made using local Debian packages for any dependencies Philippe Cerfon <philcerf@gmail.com> - 2023-02-12 06:00 +0100
  Re: can pip be made using local Debian packages for any dependencies Ian Norton <inorton@gmail.com> - 2023-02-12 09:10 +0100
    Re: can pip be made using local Debian packages for any dependencies Ian Norton <inorton@gmail.com> - 2023-02-12 09:20 +0100
      Re: can pip be made using local Debian packages for any dependencies Ian Norton <inorton@gmail.com> - 2023-02-12 09:20 +0100
        Re: can pip be made using local Debian packages for any dependencies Ian Norton <inorton@gmail.com> - 2023-02-12 09:30 +0100
        Re: can pip be made using local Debian packages for any dependencies "Donald Stufft" <donald@stufft.io> - 2023-02-12 19:40 +0100
          Re: can pip be made using local Debian packages for any dependencies Philippe Cerfon <philcerf@gmail.com> - 2023-02-13 02:30 +0100
            Re: can pip be made using local Debian packages for any dependencies Stefano Rivera <stefanor@debian.org> - 2023-02-15 17:40 +0100
              Re: can pip be made using local Debian packages for any dependencies Ian Norton <inorton@gmail.com> - 2023-02-15 19:10 +0100
                Re: can pip be made using local Debian packages for any dependencies Stefano Rivera <stefanor@debian.org> - 2023-02-15 21:20 +0100
                Re: can pip be made using local Debian packages for any dependencies Philippe Cerfon <philcerf@gmail.com> - 2023-02-17 03:40 +0100
                Re: can pip be made using local Debian packages for any dependencies Stefano Rivera <stefanor@debian.org> - 2023-02-17 15:40 +0100
                Re: can pip be made using local Debian packages for any dependencies Philippe Cerfon <philcerf@gmail.com> - 2023-02-18 06:20 +0100
                Re: can pip be made using local Debian packages for any dependencies Andrey Rakhmatullin <wrar@wrar.name> - 2023-02-17 19:30 +0100
              Re: can pip be made using local Debian packages for any dependencies Jeremy Stanley <fungi@yuggoth.org> - 2023-02-15 23:10 +0100
                Re: can pip be made using local Debian packages for any dependencies Ian Norton <inorton@gmail.com> - 2023-02-16 02:20 +0100
                Re: can pip be made using local Debian packages for any dependencies Andrey Rakhmatullin <wrar@wrar.name> - 2023-02-16 10:20 +0100
                Re: can pip be made using local Debian packages for any dependencies Jeremy Stanley <fungi@yuggoth.org> - 2023-02-16 14:50 +0100
              Re: can pip be made using local Debian packages for any dependencies Philippe Cerfon <philcerf@gmail.com> - 2023-02-17 03:40 +0100
    Re: can pip be made using local Debian packages for any dependencies Philippe Cerfon <philcerf@gmail.com> - 2023-02-13 02:20 +0100

csiph-web