Re: [Distutils] reproducible builds

2017-03-21 Thread Brett Cannon
On Tue, 21 Mar 2017 at 04:54 Marius Gedminas wrote: > On Mon, Mar 20, 2017 at 11:30:59AM +, Robin Becker wrote: > > thanks for this; it seems the emphasis is on security. If the intent is > that > > reportlab should be able to reliably reproduce the same binary output >

Re: [Distutils] Canonical Repo URL: Make "pip install -e foo" work

2017-03-21 Thread Thomas Güttler
Am 21.03.2017 um 15:26 schrieb Wes Turner: > > > On Tue, Mar 21, 2017 at 3:13 AM, Thomas Güttler > wrote: > > AFAIK it is impossible to do this: > > pip install -e foo > > You need to use the repo URL up to

Re: [Distutils] Canonical Repo URL: Make "pip install -e foo" work

2017-03-21 Thread Thomas Güttler
Am 21.03.2017 um 14:35 schrieb Leonardo Rochael Almeida: > Hi Thomas, > > Besides figuring out where the repo url is, you have a second problem to > solve: > > The command `pip install -e some/path` already has something > unpacked/checked-out in `some/path` to install in development mode. >

Re: [Distutils] Canonical Repo URL: Make "pip install -e foo" work

2017-03-21 Thread Wes Turner
On Tue, Mar 21, 2017 at 3:13 AM, Thomas Güttler < guettl...@thomas-guettler.de> wrote: > AFAIK it is impossible to do this: > > pip install -e foo > > You need to use the repo URL up to now: > > pip install -e git+https://example.com/repos/foo#egg=foo > > AFAIK the fast/short implementation of

Re: [Distutils] Canonical Repo URL: Make "pip install -e foo" work

2017-03-21 Thread Leonardo Rochael Almeida
Hi Thomas, Besides figuring out where the repo url is, you have a second problem to solve: The command `pip install -e some/path` already has something unpacked/checked-out in `some/path` to install in development mode. In which folder would the command `pip install -e some.project`

Re: [Distutils] reproducible builds

2017-03-21 Thread Robin Becker
On 21/03/2017 11:46, Marius Gedminas wrote: On Mon, Mar 20, 2017 at 11:30:59AM +, Robin Becker wrote: . I'm sure the reproducible builds folks will send you patches if they find any spots that you missed. ;-) Is there a way to excite dictionary ordering changes? I believe there

Re: [Distutils] reproducible builds

2017-03-21 Thread Marius Gedminas
On Mon, Mar 20, 2017 at 11:30:59AM +, Robin Becker wrote: > thanks for this; it seems the emphasis is on security. If the intent is that > reportlab should be able to reliably reproduce the same binary output then I > think I need to do more than just fix a couple of dates. We use many >

[Distutils] Canonical Repo URL: Make "pip install -e foo" work

2017-03-21 Thread Thomas Güttler
AFAIK it is impossible to do this: pip install -e foo You need to use the repo URL up to now: pip install -e git+https://example.com/repos/foo#egg=foo AFAIK the fast/short implementation of "pip install -e foo" does not work, since pip can't access metadata of package foo without