Re: [Distutils] GnuPG signatures on PyPI: why so few?

2017-03-14 Thread Glyph Lefkowitz
of package X that everyone else is using. If there was > a publisher signature, the timestamp server would sign the publisher's > signature asserting 'this signature was valid at time X'. > > On Tue, Mar 14, 2017 at 2:52 AM Nick Coghlan <ncogh...@gmail.com > <mai

Re: [Distutils] GnuPG signatures on PyPI: why so few?

2017-03-13 Thread Glyph Lefkowitz
> On Mar 13, 2017, at 9:23 PM, Nick Coghlan wrote: > > On 14 March 2017 at 03:46, Steve Dower > wrote: > Another drive-by contribution: what if twine printed the hashes for anything > it uploads with a message

Re: [Distutils] GnuPG signatures on PyPI: why so few?

2017-03-12 Thread Glyph Lefkowitz
> On Mar 12, 2017, at 5:13 AM, Ben Finney wrote: > > Paul Moore writes: > >> One tool that needs improvement to be easier to use for this to happen >> is GPG itself. > > No disagreement from me on that. And indeed, the GnuPG project's chronic

Re: [Distutils] Deprecating download counts in API?

2017-03-06 Thread Glyph Lefkowitz
> On Mar 6, 2017, at 3:34 AM, Donald Stufft <don...@stufft.io> wrote: > > >> On Mar 6, 2017, at 1:41 AM, Glyph Lefkowitz <gl...@twistedmatrix.com >> <mailto:gl...@twistedmatrix.com>> wrote: >> >> >>> On Mar 5, 2017, at 8:51 AM, D

Re: [Distutils] Deprecating download counts in API?

2017-03-05 Thread Glyph Lefkowitz
> On Mar 5, 2017, at 8:51 AM, Donald Stufft wrote: > > So, as most folks are aware PyPI has long had a cumulative download count > available in it’s API. This has been on and off again broken for a *long* > time and arguably the numbers in there have been “wrong” even when

Re: [Distutils] distlib and wheel metadata

2017-02-15 Thread Glyph Lefkowitz
> On Feb 15, 2017, at 11:44 AM, Donald Stufft wrote: > > >> On Feb 15, 2017, at 1:15 PM, Daniel Holth > > wrote: >> >> I also get a little frustrated with this kind of proposal "no pins" which I >> read as "annoy the publisher to

Re: [Distutils] How to specify dependencies in Python

2017-01-16 Thread Glyph Lefkowitz
> On Jan 16, 2017, at 7:59 AM, Thomas Güttler > wrote: > > I think requirements.txt should be the result of some kind of > Continous-Integration run. > If all tests are successful, then requirements.txt should be created with > "pip freeze". > > This means,

Re: [Distutils] Announcement: TLSv1.2 will become mandatory in the future

2017-01-11 Thread Glyph Lefkowitz
> On Jan 11, 2017, at 7:40 PM, Nick Coghlan wrote: > > On 12 January 2017 at 13:00, Donald Stufft wrote: >> This doesn’t work well because it’s not something that pip is going to be >> able to upgrade on Windows, because the .so will be locked when pip

Re: [Distutils] Maintaining a curated set of Python packages

2016-12-23 Thread Glyph Lefkowitz
> On Dec 22, 2016, at 11:15 PM, Nick Coghlan wrote: > > On 22 December 2016 at 09:08, Chris Barker > wrote: > And there are utilities that let you run a script in a given environment: > >

Re: [Distutils] Can't upload sdist: "File already exists"

2016-12-22 Thread Glyph Lefkowitz
> On Dec 22, 2016, at 8:54 AM, Ian Cordasco wrote: > > On Thu, Dec 22, 2016 at 9:49 AM, Brett Cannon wrote: >> Because you already uploaded a wheel for version 0.1.2 you can't upload any >> other files for that version, else people could

Re: [Distutils] Maintaining a curated set of Python packages

2016-12-16 Thread Glyph Lefkowitz
> On Dec 16, 2016, at 5:07 AM, Nick Coghlan <ncogh...@gmail.com> wrote: > > On 16 December 2016 at 20:57, Glyph Lefkowitz <gl...@twistedmatrix.com > <mailto:gl...@twistedmatrix.com>> wrote: > > Anyhow, Xcode is far from perfect - many of the places it touche

Re: [Distutils] Maintaining a curated set of Python packages

2016-12-16 Thread Glyph Lefkowitz
> On Dec 16, 2016, at 5:51 AM, Daniel Holth wrote: > > I'm also a visual studio code fan. It is the first editor I've tried that > feels lightweight like Vim but has the power of many plugins. That, and the > text rendering is excellent. > >

Re: [Distutils] Maintaining a curated set of Python packages

2016-12-16 Thread Glyph Lefkowitz
> On Dec 15, 2016, at 9:23 PM, Nick Coghlan <ncogh...@gmail.com> wrote: > > On 16 December 2016 at 14:29, Glyph Lefkowitz <gl...@twistedmatrix.com > <mailto:gl...@twistedmatrix.com>> wrote: >> On Dec 15, 2016, at 8:18 PM, Nick Coghlan <ncogh...@gmail.com

Re: [Distutils] Maintaining a curated set of Python packages

2016-12-15 Thread Glyph Lefkowitz
> On Dec 15, 2016, at 8:33 PM, Donald Stufft <don...@stufft.io> wrote: > > >> On Dec 15, 2016, at 11:29 PM, Glyph Lefkowitz <gl...@twistedmatrix.com >> <mailto:gl...@twistedmatrix.com>> wrote: >> >> User-curated package sets strikes me as th

Re: [Distutils] Maintaining a curated set of Python packages

2016-12-15 Thread Glyph Lefkowitz
> On Dec 15, 2016, at 8:18 PM, Nick Coghlan <ncogh...@gmail.com> wrote: > > On 16 December 2016 at 07:14, Glyph Lefkowitz <gl...@twistedmatrix.com > <mailto:gl...@twistedmatrix.com>> wrote: >> On Dec 15, 2016, at 6:39 AM, Donald Stufft <don...@stufft.

Re: [Distutils] Maintaining a curated set of Python packages

2016-12-15 Thread Glyph Lefkowitz
> On Dec 15, 2016, at 6:39 AM, Donald Stufft wrote: > > >> On Dec 15, 2016, at 9:35 AM, Steve Dower > > wrote: >> >> The "curated package sets" on PyPI idea sounds a bit like Steam's curator >> lists, which I like to

Re: [Distutils] Maintaining a curated set of Python packages

2016-12-14 Thread Glyph Lefkowitz
> On Dec 14, 2016, at 9:41 AM, Chris Barker wrote: > > As pointed out by others, there are external groups doing "curating". > conda-forge is one such project, so I'll comment from that perspective: > > > It's difficult because the definition of compatibility is highly

[Distutils] continuous integration options (was Re: Travis-CI is not open source, except in fact it *is* open source)

2016-11-03 Thread Glyph Lefkowitz
> On Nov 3, 2016, at 10:17 AM, Barry Warsaw wrote: > > On Nov 03, 2016, at 12:54 AM, Nick Coghlan wrote: > >> This is also an area where I'm fine with recommending freemium >> solutions if they're the lowest barrier to entry option for new users, >> and "Use GitHub + Travis

Re: [Distutils] Code for inserting paths into system configuration?

2016-09-13 Thread Glyph Lefkowitz
> On Sep 13, 2016, at 12:58 PM, Matthew Brett wrote: > > Hi, > > I was reflecting on the detail of putting pip user bin directories on > the user's path, and was then thinking of making a tiny pip package > like this: > > pip install pip_user_config > python -m

Re: [Distutils] PEP 527 - Removing Un(der)used file types/extensions on PyPI

2016-08-23 Thread Glyph Lefkowitz
> On Aug 23, 2016, at 1:08 PM, Glyph Lefkowitz <gl...@twistedmatrix.com> wrote: > > ... especially as compared to binary eggs ... Wheels. especially as compared to binary wheels. -g___ Distutils-SIG maillist - Distutils-SIG@p

Re: [Distutils] PEP 527 - Removing Un(der)used file types/extensions on PyPI

2016-08-23 Thread Glyph Lefkowitz
> On Aug 23, 2016, at 12:03 PM, M.-A. Lemburg wrote: > > On 23.08.2016 18:46, Donald Stufft wrote: >> Since it seemed like there was enough here for a proper PEP I went ahead and >> write one up, which is now PEP 527. The tl;dr of it is that: >> >> * Everything but sdist,

Re: [Distutils] Deprecating little used file types/extensions on PyPI?

2016-08-15 Thread Glyph Lefkowitz
> On Aug 15, 2016, at 1:56 PM, Donald Stufft wrote: > > My main thought regarding this is that bdist_dmg != all dmg files (similarly > for msi and wininst). These are specific files created by distutils without a > standard or without the needed work to make them truly what

Re: [Distutils] Deprecating little used file types/extensions on PyPI?

2016-08-15 Thread Glyph Lefkowitz
> On Aug 15, 2016, at 12:09 PM, Donald Stufft wrote: > > Next we have bdist_dmg, bdist_msi, and bdist_winist. I'm lumping these > together > because they're all OS specific installers for OSs that don't already have > some > sort of repository. This lack of a repository

Re: [Distutils] license for setuptools

2016-08-12 Thread Glyph Lefkowitz
://www.python.org/psf/contrib/ <https://www.python.org/psf/contrib/>) > but that seems very formal. Is there a simpler one that just makes it > implicit that 'submitting a patch/PR = you agree to license that code to the > project for redistribution" or whatever. &

Re: [Distutils] license for setuptools

2016-08-12 Thread Glyph Lefkowitz
Thanks for submitting this PR, Ian! :) > On Aug 12, 2016, at 6:24 AM, Ian Cordasco wrote: > > Thanks for that Geoffrey. There's a PR to add it as Jason decided to > accept it. I think we can all relax now. Okay? > > On Fri, Aug 12, 2016 at 8:00 AM, Geoffrey Spear

Re: [Distutils] Contributing money to package authors/maintainers via PyPI

2016-07-23 Thread Glyph Lefkowitz
> On Jul 23, 2016, at 12:11 PM, Donald Stufft wrote: > > >> On Jul 23, 2016, at 2:40 PM, Nicholas Chammas > > wrote: >> >> I know a more concrete proposal would have to address a lot of details (e.g. >> like

Re: [Distutils] Outdated packages on pypi

2016-07-13 Thread Glyph Lefkowitz
> On Jul 13, 2016, at 1:54 PM, Steve Dower wrote: > > Possibly such user-contributed content would be valuable anyway https://alternativeto.net but for PyPI? :) -glyph___ Distutils-SIG maillist - Distutils-SIG@python.org

Re: [Distutils] Outdated packages on pypi

2016-07-13 Thread Glyph Lefkowitz
> On Jul 12, 2016, at 9:54 PM, Donald Stufft <don...@stufft.io> wrote: > > >> On Jul 12, 2016, at 4:45 PM, Glyph Lefkowitz <gl...@twistedmatrix.com> wrote: >> >> My feeling is that there should be a "dead man's switch" sort of mechanism >&g

Re: [Distutils] Outdated packages on pypi

2016-07-12 Thread Glyph Lefkowitz
> On Jul 12, 2016, at 4:55 AM, Dima Tisnek wrote: > > Hi all, > > Is anyone working on pruning old packages from pypi? > > I found something last updated in 2014, which, looking at the source > appears half-done. > Github link doesn't work any longer, no description, etc. >

Re: [Distutils] Don't Use `sudo pip install´ (was Re: [final version?] PEP 513…)

2016-02-17 Thread Glyph Lefkowitz
> On Feb 17, 2016, at 7:44 PM, Glyph Lefkowitz <gl...@twistedmatrix.com> wrote: > > I think making pip do this might be mixing layers too much. Frankly `pipsi´ > does almost the right thing; if `sudo pipsi´ put script symlinks in > /usr/local/bin/ instead of ~/.loc

Re: [Distutils] Don't Use `sudo pip install´ (was Re: [final version?] PEP 513…)

2016-02-17 Thread Glyph Lefkowitz
> On Feb 17, 2016, at 7:17 PM, Nathaniel Smith <n...@pobox.com> wrote: > > On Tue, Feb 16, 2016 at 6:12 PM, Glyph Lefkowitz > <gl...@twistedmatrix.com> wrote: >> Here, I'll make it for you. Assuming virtualenv is installed: >> >> python -m virtualen

Re: [Distutils] Don't Use `sudo pip install´ (was Re: [final version?] PEP 513…)

2016-02-17 Thread Glyph Lefkowitz
> On Feb 17, 2016, at 7:08 PM, Noah Kantrowitz wrote: > > Saying it's a good idea and we should move towards it is fine and I agree, > but that isn't grounds to remove the ability to do things the current way. So > you can warn people off from global installs but until

Re: [Distutils] Don't Use `sudo pip install´ (was Re: [final version?] PEP 513…)

2016-02-17 Thread Glyph Lefkowitz
> On Feb 16, 2016, at 6:22 PM, Noah Kantrowitz wrote: > > I'm not concerned with if the module is importable specifically, but I am > concerned with where the files will live overall. When building generic ops > tooling, being unsurprising is almost always the right move

Re: [Distutils] [final version?] PEP 513 - A Platform Tag for Portable Linux Built Distributions

2016-02-17 Thread Glyph Lefkowitz
> On Feb 17, 2016, at 2:17 AM, David Cournapeau wrote: > > Sure, but the people I tend to see using `sudo pip` are not the kind of users > where that distinction is very useful. It's hair-splitting but probably correct hair-splitting in terms of how it's detected. > If

Re: [Distutils] [final version?] PEP 513 - A Platform Tag for Portable Linux Built Distributions

2016-02-17 Thread Glyph Lefkowitz
> On Feb 17, 2016, at 12:55 AM, Antoine Pitrou <solip...@pitrou.net> wrote: > > On Tue, 16 Feb 2016 16:10:34 -0800 > Glyph Lefkowitz <gl...@twistedmatrix.com> wrote: >> >> I am 100% on board with telling people "don't use `sudo pip install´". >

Re: [Distutils] [final version?] PEP 513 - A Platform Tag for Portable Linux Built Distributions

2016-02-17 Thread Glyph Lefkowitz
> On Feb 16, 2016, at 11:55 PM, Robert T. McGibbon <rmcgi...@gmail.com> wrote: > > On Tue, Feb 16, 2016 at 4:10 PM, Glyph Lefkowitz <gl...@twistedmatrix.com > <mailto:gl...@twistedmatrix.com>> wrote: > This whole section is about a tool to autom

Re: [Distutils] Don't Use `sudo pip install´ (was Re: [final version?] PEP 513…)

2016-02-16 Thread Glyph Lefkowitz
> On Feb 16, 2016, at 5:00 PM, Noah Kantrowitz <n...@coderanger.net > <mailto:n...@coderanger.net>> wrote: > > >> On Feb 16, 2016, at 4:46 PM, Glyph Lefkowitz <gl...@twistedmatrix.com >> <mailto:gl...@twistedmatrix.com>> wrote: >> &g

Re: [Distutils] Don't Use `sudo pip install´ (was Re: [final version?] PEP 513…)

2016-02-16 Thread Glyph Lefkowitz
> On Feb 16, 2016, at 4:33 PM, Noah Kantrowitz <n...@coderanger.net > <mailto:n...@coderanger.net>> wrote: > > >> On Feb 16, 2016, at 4:27 PM, Glyph Lefkowitz <gl...@twistedmatrix.com >> <mailto:gl...@twistedmatrix.com>> wrote: >> &

[Distutils] Don't Use `sudo pip install´ (was Re: [final version?] PEP 513…)

2016-02-16 Thread Glyph Lefkowitz
> On Feb 16, 2016, at 4:13 PM, Noah Kantrowitz wrote: > > As someone that handles the tooling side, I don't care how it works as long > as there is an override for tooling a la Chef/Puppet. For stuff like > Supervisord, it is usually the least broken path to install the

Re: [Distutils] [final version?] PEP 513 - A Platform Tag for Portable Linux Built Distributions

2016-02-16 Thread Glyph Lefkowitz
> On Feb 16, 2016, at 3:05 AM, Matthias Klose <d...@ubuntu.com> wrote: > > On 02.02.2016 02:35, Glyph Lefkowitz wrote: >> >>> On Feb 1, 2016, at 3:37 PM, Matthias Klose <d...@ubuntu.com> wrote: >>> >>> On 30.01.2016 00:29, Nathaniel Smit

Re: [Distutils] [final version?] PEP 513 - A Platform Tag for Portable Linux Built Distributions

2016-02-01 Thread Glyph Lefkowitz
> On Feb 1, 2016, at 3:37 PM, Matthias Klose wrote: > > On 30.01.2016 00:29, Nathaniel Smith wrote: >> Hi all, >> >> I think this is ready for pronouncement now -- thanks to everyone for >> all their feedback over the last few weeks! > > I don't think so. I am biased because

Re: [Distutils] draft PEP: manylinux1

2016-01-30 Thread Glyph Lefkowitz
> On Jan 29, 2016, at 8:44 PM, Donald Stufft wrote: > > >> On Jan 29, 2016, at 2:35 PM, Nate Coraor > > wrote: >> >> Is there a distro-specific wheel tagging PEP in development somewhere that I >> missed? If not, I will get the

Re: [Distutils] draft PEP: manylinux1

2016-01-24 Thread Glyph Lefkowitz
> On Jan 24, 2016, at 2:56 PM, Donald Stufft wrote: > > ... the excellent Barry Warsaw ... Distro work is often thankless (especially here) so I just wanted to echo this: glory to the FLUFL, may his reign be <> short. -glyph___

Re: [Distutils] heads-up on a plot to bring linux wheels to pypi

2016-01-14 Thread Glyph Lefkowitz
> On Jan 14, 2016, at 2:12 AM, Nick Coghlan wrote: > > In terms of non-scientific packages, the main group I'd suggest > getting in touch with is pycryptography, as we'll probably want to > baseline a more recent version of OpenSSL than the one in CentOS 5.11. > 1. It's

Re: [Distutils] Building and installing packages on a (unix) system lacking network accesss

2015-12-23 Thread Glyph Lefkowitz
> On Dec 22, 2015, at 5:51 AM, KM wrote: > > Greetings distutils-sig, > > I have a project with an autogenerated structure - that is, I ran a "helper" > application which creates a directory structure and a setup.py for me. I am > trying to build this package in a virtualenv

Re: [Distutils] workflow recommendations to update requirements.txt

2015-12-15 Thread Glyph Lefkowitz
> On Dec 15, 2015, at 8:56 PM, Chris Jerdonek wrote: > > Hi, > > I have a development workflow question I was wondering if people on > this list had a recommended solution for. > > Say you're working on a web application that you deploy using a > requirements.txt

Re: [Distutils] The future of invoking pip

2015-11-05 Thread Glyph Lefkowitz
> On Nov 5, 2015, at 6:36 PM, Donald Stufft wrote: > > I’m not really sure what the right answer is for something where the > particular version of Python you’re invoking it with (and that you’re > actually using Python) is important. python -m makes a lot of sense in that >

Re: [Distutils] The future of invoking pip

2015-11-05 Thread Glyph Lefkowitz
> On Nov 5, 2015, at 7:34 PM, Robert Collins wrote: > > Why not? (Ignore the language I wrote my pseudocode in, an actual > thing would be a Python script that install would turn into a .exe) It was not clear, in the example that you gave, that I was supposed to

Re: [Distutils] PyPi not allowing duplicate filenames

2015-10-14 Thread Glyph Lefkowitz
> On Oct 14, 2015, at 1:04 PM, Donald Stufft wrote: > > Generally within 60-120 seconds it’s available in mirrors (most of them > resync once a minute). If anyone has downloaded it then they will have pretty > much permanently cached the package, first in the download cache

Re: [Distutils] PyPi not allowing duplicate filenames

2015-10-14 Thread Glyph Lefkowitz
> On Oct 14, 2015, at 10:36 AM, Nathaniel Smith wrote: > > My feeling is that pypi is correct to disallow the mutation of releases once > they become public, but that the ergonomics around this could probably be > improved :-). A more general solution that might be nice to

Re: [Distutils] Where should I put tests when packaging python modules?

2015-10-06 Thread Glyph Lefkowitz
> On Oct 6, 2015, at 12:07 AM, Thomas Güttler > wrote: > > Hi, > > Where should I put tests when packaging python modules? > > I want a "cowpath", an "obvious way" > > Dear experts, please decide: > > inside the module like this answer: > >

Re: [Distutils] Unable to login to PyPi

2015-09-29 Thread Glyph Lefkowitz
was a way to add pure username password I'll do that when I can > get back in. > > > -- > Mike O'Driscoll > > On Mon, Sep 28, 2015 at 10:57 PM, Glyph Lefkowitz <gl...@twistedmatrix.com > <mailto:gl...@twistedmatrix.com>> wrote: > Mike, do you have another way

Re: [Distutils] Unable to login to PyPi

2015-09-28 Thread Glyph Lefkowitz
Mike, do you have another way to authenticate to the site, or are you locked out until OpenID works again? -g > On Sep 28, 2015, at 14:02, Richard Jones wrote: > > Hi Mike, > > Sorry, but this is a known problem that no-one has time to investigate or fix. > > >

Re: [Distutils] Twisted plugin system and Python packaging

2011-09-25 Thread Glyph Lefkowitz
On Sep 25, 2011, at 1:44 AM, P.J. Eby wrote: You may want to note that Twisted isn't the only distribution that ships partial packages that aren't namespace packages. The logilabs packages are (or at any rate were) distributed this way, with a top-level package in one distribution, and

Re: [Distutils] Twisted plugin system and Python packaging

2011-09-24 Thread Glyph Lefkowitz
On Sep 24, 2011, at 11:01 PM, P.J. Eby wrote: This really sounds like a bug in pip; top_level.txt is not a replacement for a proper uninstall log. Thanks. It appears that Pip's maintainers are (the teensiest bit grudgingly) coming around to this perspective as well:

Re: [Distutils] Name the software! Package quality tester.

2011-03-09 Thread Glyph Lefkowitz
On Mar 9, 2011, at 7:06 AM, Jim Fulton j...@zope.com wrote: They certainly aren't projects in any sense that most people would understand. They are arguably products of projects. Of course, the term product has negative connotations for some folks. Not for everybody! As far as I am

Re: [Distutils] Python version in egg name

2011-02-05 Thread Glyph Lefkowitz
On Feb 2, 2011, at 2:49 PM, Matt Chaput wrote: Is there a way to set this value to py2.5 as a configuration option, other than running setup.py using the Python 2.5 executable? Or not have it be part of the egg filename at all? I'm using Python 2.7 as my default Python install but I make

Re: [Distutils] An observation on how system packagers and developers can be friends

2010-10-28 Thread Glyph Lefkowitz
On Oct 28, 2010, at 6:08 PM, Tres Seaver wrote: Heh, agreed. That bites me on about every third machine I set up for the first time. The Usual Suspects (TM) are whatever the local packaging system calls the following (and their -dev or -devel packages, if split out): - - zlib - -

Re: [Distutils] distribute and install --root

2010-05-10 Thread Glyph Lefkowitz
On May 10, 2010, at 9:14 AM, Nikolaus Rath wrote: Glyph Lefkowitz gl...@twistedmatrix.com writes: On May 9, 2010, at 5:47 PM, Tarek Ziadé wrote: Having .local here looks like a bug to me. Could you create an issue with details ? For what it's worth, I have had similar things happen when

Re: [Distutils] distribute and install --root

2010-05-10 Thread Glyph Lefkowitz
On May 10, 2010, at 4:05 PM, Tarek Ziadé wrote: Yes, someone provided this patch a while ago and I've added it (it's --no-user-cfg in 2.6). Do you mean in 2.7? I see it documented here: http://docs.python.org/dev/distutils/builtdist.html, but not here:

Re: [Distutils] distribute and install --root

2010-05-09 Thread Glyph Lefkowitz
On May 9, 2010, at 5:47 PM, Tarek Ziadé wrote: Having .local here looks like a bug to me. Could you create an issue with details ? For what it's worth, I have had similar things happen when I had forogtten that I created a ~/.pydistutils.cfg. Have you made sure that there isn't one there?

Re: [Distutils] [sqlalchemy] Re: inability to pass setup.py command line arguments to dependency setups

2010-05-07 Thread Glyph Lefkowitz
On May 7, 2010, at 2:08 PM, Michael Bayer wrote: I'd only mention that Storm has a C extension/non C extension flag as well, and only offers one source distribution on Pypi. You have to modify a variable directly within setup.py. Our setup.py features the same capability (its just our

Re: [Distutils] Python people want CPAN and how the latter came about

2009-12-23 Thread Glyph Lefkowitz
On Dec 23, 2009, at 4:33 PM, Lennart Regebro wrote: 1/ Missing packages (eg: Twisted is not there) The Twisted guys do not upload their packages to PyPI. I think that's a mistake, but it's hardly PyPI's fault. There is no law saying you have to use CPAN either. For what it's worth, we

Re: [Distutils] Python people want CPAN and how the latter came about

2009-12-21 Thread Glyph Lefkowitz
On Dec 21, 2009, at 5:48 PM, David Cournapeau wrote: On Mon, Dec 21, 2009 at 7:13 PM, Lennart Regebro rege...@gmail.com wrote: What nobody still fails to explain in this discussion is what CPAN is and Why Python doesn't already have it. That's not the right question to ask. The problem is

Re: [Distutils] Install time prefixes and data files

2009-11-13 Thread Glyph Lefkowitz
On Nov 13, 2009, at 9:01 AM, Wolodja Wentland wrote: This would mean that the *default* install should be PEP 370 compliant or inside a virtualenv and that installing into system paths should be enabled explicitly. +1. ___ Distutils-SIG maillist

Re: [Distutils] Improving distutils vs redesigning it (was people want CPAN)

2009-11-11 Thread Glyph Lefkowitz
On Nov 11, 2009, at 10:04 PM, Robert Kern wrote: In our considered opinion, piecemeal changes probably aren't going to solve the significant problems that we face. At best, they simply aren't going to help; we wouldn't be able to use the new features until we can drop support for Python

Re: [Distutils] Improving distutils vs redesigning it (was people want CPAN)

2009-11-11 Thread Glyph Lefkowitz
On Nov 12, 2009, at 12:02 AM, David Cournapeau wrote: Glyph Lefkowitz wrote: There are probably a dozen other ways that you *could* work on distutils and benefit more immediately from your efforts than the next Python release. To think otherwise is a simply a failure of imagination. Now

Re: [Distutils] Improving distutils vs redesigning it (was people want CPAN)

2009-11-11 Thread Glyph Lefkowitz
On Nov 12, 2009, at 1:36 AM, Robert Kern wrote: Glyph Lefkowitz wrote: Still, it would have been more helpful to point out how exactly this problem could be solved, (...) Sorry, I edited out the bit at the last minute where I explained that it would be great to have a centralized

Re: [Distutils] People want CPAN :-)

2009-11-07 Thread Glyph Lefkowitz
On Nov 6, 2009, at 12:53 PM, Guido van Rossum wrote: I just found this comment on my blog. People have told me this in person too, so I believe it is real pain (even if the solution may be elusive and the suggested solutions may not work). But I don't know how to improve the world. Is the work

Re: [Distutils] Distutils and Distribute roadmap (and some words on Virtualenv, Pip)

2009-10-27 Thread Glyph Lefkowitz
On Oct 27, 2009, at 7:41 PM, David Lyon wrote: I'm not sure about that Tarek.. An .exe installer as a perfect binary format for python packages? Are you serious? That is the biggest security threat I can think of, asking python users to run unverified, unsigned, un-trusted executable files

Re: [Distutils] setup.cfg new format proposal

2009-09-14 Thread Glyph Lefkowitz
On Fri, Sep 11, 2009 at 1:40 PM, Jim Fulton j...@zope.com wrote: On Fri, Sep 11, 2009 at 11:49 AM, Tarek Ziadé ziade.ta...@gmail.com wrote: On Fri, Sep 11, 2009 at 5:36 PM, Jim Fulton j...@zope.com wrote: On Fri, Sep 11, 2009 at 11:14 AM, Tarek Ziadé ziade.ta...@gmail.com wrote:

Re: [Distutils] how do I add some functionality to my setup.py which is testable and modular?

2009-08-18 Thread Glyph Lefkowitz
On Tue, Aug 18, 2009 at 7:20 PM, Zooko Wilcox-O'Hearn zo...@zooko.comwrote: ... and Glyph refuses to accept my patch which fixes it because the fix isn't testable ... Hi, Zooko :). Since this message officially makes me That Jerk Who Is Forcing The Issue, I've finally joined distutils-sig.

Re: [Distutils] how do I add some functionality to my setup.py which is testable and modular?

2009-08-18 Thread Glyph Lefkowitz
On Sun, Aug 16, 2009 at 8:17 PM, P.J. Eby p...@telecommunity.com wrote: At 02:16 PM 8/16/2009 -0600, Zooko Wilcox-O'Hearn wrote: So it appears to me that none of these techniques are both modular/ testable and compatible with distutils/setuptools/Distribute. What are we to do? We could

[Distutils] [issue67] You can't tell easy_install not to talk to the network

2009-04-03 Thread Glyph Lefkowitz
New submission from Glyph Lefkowitz gl...@twistedmatrix.com: If I want to use easy_install for nice dependency resolution, there's no way (that I can figure out, at least) to tell it never talk to the network, use only this local directory where you can find dependencies. -- messages