[rb-general] progress in rpm and openSUSE in 2019

[Eli Schwartz]

On 11/30/19 8:20 AM, Holger Levsen wrote:
>> We added a pip install macro to handle python's wheel (.whl) files
>> without creating unreproducible .pyc files
>> https://bugzilla.opensuse.org/show_bug.cgi?id=1094323
> 
> wow, cool, that might be something for Archlinux...!

I don't believe this is related to us as we (per policy) try to avoid
using pip to install packages. Our solution to a package being
unreproducible because it uses pip's /tmp/pip-install-XXXXX random
staging directory... is to figure out how to use setuptools' setup.py
directly. I *think*, IIRC we almost exclusively use setup.py,
occasionally with the aid of a pyproject.toml-to-setup.py converter.

See: https://wiki.archlinux.org/index.php/Python_package_guidelines#pip

"Warning: Use of pip and/or wheel packages is discouraged in favor of
setuptools source packages, and should only be used when the latter is
not a viable option (for example, packages which only come with wheel
sources, and therefore cannot be installed using setuptools)."

There are some issues with using pip that aren't due to reproducible
builds, including making the bootstrap graph more complex, or pip's
habit of installing multiple packages by downloading them from PyPI if a
dependency is missing. Some of these problems can be solved, but it's
less bother to simply use setup.py directly as that is essentially what
pip is doing anyway.

-- 
Eli Schwartz
Arch Linux Bug Wrangler and Trusted User

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 1601 bytes
Desc: OpenPGP digital signature
URL: <http://lists.reproducible-builds.org/pipermail/rb-general/attachments/20191209/f66b6e83/attachment.sig>