Hi Kevin,

There's been some ongoing discussions about changes to pip and the strategy
for verification/external packages. We're waiting to see how those impact
us. In the meantime, we've made some of the changes needed to get us closer
to not needing allow-unverified, but we're not fully there yet.

There's no plan to move everything onto PyPI's hosting. It shouldn't matter
down the road, from my understanding, but it does depend on the future
plans for pip/PyPI.

Christian


On Wednesday, October 22, 2014, <kswee...@twitter.com> wrote:

> Apologies if this is already answered somewhere in history, but are there
> any plans to revisit this change?
>
> We (Apache Aurora) use rbt in our development workflow via pip to no
> apparent ill effect. We'd like to avoid the use of --allow-unverified
> RBTools
>
> The currently-published version is only available via HTTP on a server
> external to PyPI. That means it's vulnerable to MITMs and it doesn't
> benefit from PyPI's caching infrastructure.
>
> Thanks,
> Kevin
>
> On Thursday, August 14, 2014 6:55:47 PM UTC-7, Buck Evan wrote:
>>
>> For the record, the below command does result in a correctly-working rbt
>> command.
>>
>> rbtools really should become compatible with the pip default options.
>>
>>
>>
>> On Wednesday, August 6, 2014 2:17:37 PM UTC-7, David Trowbridge wrote:
>>>
>>> That will install the package, but I believe pip still doesn't properly
>>> register python entry points, which means that rbt won't work right.
>>>
>>> -David
>>>
>>> On Aug 6, 2014, at 2:04 PM, Edward Delaporte <edth...@gmail.com> wrote:
>>>
>>> For what it's worth, there seems to be a combination of command line
>>> flags that works as a workaround:
>>>
>>> pip install rbtools --allow-external rbtools --allow-unverified rbtools
>>>
>>>
>>> On Wednesday, May 7, 2014 8:03:11 AM UTC-5, Jason Antman wrote:
>>>>
>>>> I'm aware that pip is not a supported installation method for
>>>> ReviewBoard itself. However, I have a number of cases where pip
>>>> installation is the only method I can do, and I only need access to RBTools
>>>> for the API client.
>>>>
>>>> As of a few months ago, I was able to `pip install RBTools==0.5.2`
>>>> without a problem, and I have this in a number of requirements.txt files.
>>>>
>>>> This morning I tried re-deploying one of the applications that uses
>>>> this, and got an error from pip saying "No distributions at all found" -
>>>> there don't seem to be any valid packages on pypi itself, and even having
>>>> it allow external URLs doesn't seem to work.
>>>>
>>>> Is this an intentional change in behavior?
>>>>
>>>> Thanks,
>>>> Jason
>>>>
>>>  --
>>> Get the Review Board Power Pack at http://www.reviewboard.org/powerpack/
>>> ---
>>> Sign up for Review Board hosting at RBCommons: https://rbcommons.com/
>>> ---
>>> Happy user? Let us know at http://www.reviewboard.org/users/
>>> ---
>>> You received this message because you are subscribed to the Google
>>> Groups "reviewboard" group.
>>> To unsubscribe from this group and stop receiving emails from it, send
>>> an email to reviewboard...@googlegroups.com.
>>> For more options, visit https://groups.google.com/d/optout.
>>>
>>>  --
> Get the Review Board Power Pack at http://www.reviewboard.org/powerpack/
> ---
> Sign up for Review Board hosting at RBCommons: https://rbcommons.com/
> ---
> Happy user? Let us know at http://www.reviewboard.org/users/
> ---
> You received this message because you are subscribed to the Google Groups
> "reviewboard" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to reviewboard+unsubscr...@googlegroups.com
> <javascript:_e(%7B%7D,'cvml','reviewboard%2bunsubscr...@googlegroups.com');>
> .
> For more options, visit https://groups.google.com/d/optout.
>


-- 
-- 
Christian Hammond - chip...@chipx86.com
Review Board - http://www.reviewboard.org
Beanbag, Inc. - http://www.beanbaginc.com

-- 
Get the Review Board Power Pack at http://www.reviewboard.org/powerpack/
---
Sign up for Review Board hosting at RBCommons: https://rbcommons.com/
---
Happy user? Let us know at http://www.reviewboard.org/users/
--- 
You received this message because you are subscribed to the Google Groups 
"reviewboard" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to reviewboard+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to