[Distutils] [issue157] setuptools installation instructions fail on OS X: no wget

2013-08-05 Thread Ned Deily
New submission from Ned Deily: The current installation instructions for "Unix-based Systems including Mac OS X" do not work on vanilla OS X systems because OS X does not ship with "wget". It does, however, ship with "curl". (The Distribute web page had been updated a long time ago to use "c

[Distutils] Who administers bugs.python.org, and can we get a notice on the setuptools tracker?

2013-08-05 Thread PJ Eby
Hi. Not sure who this should go to, but it would be really good if we could get a prominent notice on the old setuptools tracker (at bugs.python.org), specifically on the issue creation screen, to inform people that this tracker is only for setuptools 0.6, and that issues for later versions should

Re: [Distutils] Who administers bugs.python.org, and can we get a notice on the setuptools tracker?

2013-08-05 Thread Nick Coghlan
I filed the request on the metatracker: http://psf.upfronthosting.co.za/roundup/meta/issue522 ___ Distutils-SIG maillist - Distutils-SIG@python.org http://mail.python.org/mailman/listinfo/distutils-sig

Re: [Distutils] Who administers bugs.python.org, and can we get a notice on the setuptools tracker?

2013-08-05 Thread PJ Eby
On Mon, Aug 5, 2013 at 11:10 AM, Nick Coghlan wrote: > I filed the request on the metatracker: > http://psf.upfronthosting.co.za/roundup/meta/issue522 Thanks! That should keep me from having to keep telling people their princess is in another castle. ;-)

[Distutils] setuptools' install_script overwrites symlinked files rather than replacing symlinks

2013-08-05 Thread Michał Górny
Hello, We've got a pretty specific setup where various Python scripts in /usr/bin are symlinked to a common wrapper. For example: /usr/bin/easy_install -> python-exec As a result, calling 'setup.py install' in a package that installs setuptools' legacy script wrappers (e.g. setuptools itself)

Re: [Distutils] New PyPI mirror in China

2013-08-05 Thread Hexchain Tong
On 08/05/2013 02:29 PM, Donald Stufft wrote: > Just to give you a response. There are currently discussions going on > about deprecating the official public mirroring infrastructure. Thank you! I didn't even realized that :-P ___ Distutils-SIG maillist

Re: [Distutils] setuptools' install_script overwrites symlinked files rather than replacing symlinks

2013-08-05 Thread Nick Coghlan
On 4 August 2013 21:12, Michał Górny wrote: > I'm willing to write a patch. Please just tell me which solution would > you prefer. The standard library has switched to atomic replacement for writing .pyc files, which seems like the appropriate solution for script writing as well (note that os.ren

Re: [Distutils] New PyPI mirror in China

2013-08-05 Thread Nick Coghlan
On 6 August 2013 14:24, Hexchain Tong wrote: > On 08/05/2013 02:29 PM, Donald Stufft wrote: >> Just to give you a response. There are currently discussions going on >> about deprecating the official public mirroring infrastructure. > > Thank you! I didn't even realized that :-P Those discussions

Re: [Distutils] What to do about the PyPI mirrors

2013-08-05 Thread Nick Coghlan
On 5 August 2013 08:25, Donald Stufft wrote: > Here's my PEP for Deprecating and Removing the Official Public Mirrors > > It's source is at: > https://github.com/dstufft/peps/blob/master/mirror-removal.rst Donald's proposal is now PEP 449: http://www.python.org/dev/peps/pep-0449/ Cheers, Nick.

Re: [Distutils] What to do about the PyPI mirrors

2013-08-05 Thread Christian Theune
Hi, looks like I'm late to the party to figure out that I'm going to be hurt again. I'd like to suggest explicitly considering what is going to break due to this and how much work you are forcefully inflicting on others. My whole experience around the packaging (distribute/setuptools) and mir

Re: [Distutils] What to do about the PyPI mirrors

2013-08-05 Thread Christian Theune
Two more things: why is the CDN not suffering from the security problems you describe for the mirrors? a) Fastly seems to be the one owning the certificate for pypi.python.org. What?!? b) What does stop Fastly from introducing incorrect/rogue code in package downloads? Christian __

Re: [Distutils] What to do about the PyPI mirrors

2013-08-05 Thread Noah Kantrowitz
On Aug 5, 2013, at 11:11 PM, Christian Theune wrote: > Two more things: > > why is the CDN not suffering from the security problems you describe for the > mirrors? > > a) Fastly seems to be the one owning the certificate for pypi.python.org. > What?!? They have a delegated SAN for it, which

Re: [Distutils] What to do about the PyPI mirrors

2013-08-05 Thread Donald Stufft
On Aug 6, 2013, at 2:31 AM, Noah Kantrowitz wrote: > > On Aug 5, 2013, at 11:11 PM, Christian Theune wrote: > >> Two more things: >> >> why is the CDN not suffering from the security problems you describe for the >> mirrors? >> >> a) Fastly seems to be the one owning the certificate for py

Re: [Distutils] What to do about the PyPI mirrors

2013-08-05 Thread Noah Kantrowitz
On Aug 5, 2013, at 11:09 PM, Christian Theune wrote: > Hi, > > looks like I'm late to the party to figure out that I'm going to be hurt > again. > > I'd like to suggest explicitly considering what is going to break due to this > and how much work you are forcefully inflicting on others. My w

Re: [Distutils] What to do about the PyPI mirrors

2013-08-05 Thread Donald Stufft
On Aug 6, 2013, at 2:49 AM, Noah Kantrowitz wrote: > I am also hoping that pypi-mirrors.org will continue to operate as a > community project (side note, I would be happy to assist with hosting for it > if Ken reads this list and if thats a concern of his) and that the mirror > operators can

Re: [Distutils] What to do about the PyPI mirrors

2013-08-05 Thread holger krekel
On Mon, Aug 05, 2013 at 23:31 -0700, Noah Kantrowitz wrote: > On Aug 5, 2013, at 11:11 PM, Christian Theune wrote: > > > Two more things: > > > > why is the CDN not suffering from the security problems you describe for > > the mirrors? > > > > a) Fastly seems to be the one owning the certifica