On Sunday, April 17, 2016 at 9:51:03 PM UTC+1, mmarco wrote: > > Would it be possible to ship such a pip repo (with only the packages > needed by sage) in the sage source tarball? Or maybe have two such > tarballs, one with it (so it would allow to compile Sage offline, and > source review before compiling), and another that would just rely on > downloading packages from pypi? >
It looks like it would make more sense to provide a cache of pypi packages needed for Sage building. It might either be a tarball, or just a list of files to download from a pypi mirror. The less duplication, the better... > > El domingo, 17 de abril de 2016, 17:38:23 (UTC+2), William escribió: >> >> On Sun, Apr 17, 2016 at 8:27 AM, Dima Pasechnik <dim...@gmail.com> >> wrote: >> > >> > >> > On Sunday, April 17, 2016 at 4:20:42 PM UTC+1, Dima Pasechnik wrote: >> >> >> >> >> >> >> >> On Sunday, April 17, 2016 at 4:15:12 PM UTC+1, William wrote: >> >>> >> >>> Dima: >> >>> > sorry, William, I don't see what you mean. >> >>> [...] >> >>> > 2) Putting data on your computer does not equal to installing crud >> on >> >>> > your >> >>> > computer, although people wearing tinfoil hats >> >>> > might disagree. >> >>> >> >>> They do disagree. And they are right. >> >> >> >> >> >> Why would they trust somebody putting hundreds of megabytes of 3rd >> party >> >> sources into Sage? Is it because we mislead them into thinking that we >> did >> >> some kind of source review? >> >> You are right. However, such a tinfoil hat person would rather >> (themselves) inspect the packages that are just needed for Sage, >> rather than all of Pypi. >> >> > they actually would be less paranoid about having the 3rd party from >> its >> > original source rather than re-packaged, and this is precisely a part >> of my >> > proposal. And, by the way, >> > http://doc.devpi.net/latest/quickstart-pypimirror.html >> > is precisely a way to create a mini-repo containing only things needed >> by >> > Sage. >> >> Perfect -- I agree that is the right approach. >> >> >> -- >> William (http://wstein.org) >> > -- You received this message because you are subscribed to the Google Groups "sage-devel" group. To unsubscribe from this group and stop receiving emails from it, send an email to sage-devel+unsubscr...@googlegroups.com. To post to this group, send email to sage-devel@googlegroups.com. Visit this group at https://groups.google.com/group/sage-devel. For more options, visit https://groups.google.com/d/optout.
