[Distutils] Re: pip Install for Python 2.7.6

2018-07-26 Thread Vinay Sharma
Not sure if this problem in being encountered on Mac OS. But if it is then the following article may be useful https://stackoverflow.com/questions/49748063/pip-install-fails-for-every-package-could-not-find-a-version-that-satisfies/49748494#49748494 Regards -Vinay On Thu, Jul 26, 2018 at 5:11 A

[Distutils] Re: Summary of PyPI overhaul in new LWN article

2018-07-26 Thread Cooper Ry Lees
Hi Wes, Many members of the PyPA have been trying to obtain funding to try and work on this and other security features I believe. I don't believe, but could be wrong, anything has occurred in implementation here. But Ernest, Donald and Dustin would know best. Are you interested in helping?

[Distutils] Re: Summary of PyPI overhaul in new LWN article

2018-07-26 Thread Trishank Kuppusamy
On Thu, Jul 26, 2018 at 1:58 PM Trishank Kuppusamy < trishank.kuppus...@datadoghq.com> wrote: > I'm not aware of what is happening on the Warehouse end, but I'm happy to > report we have a version of pip + TUF Datadog is using in production: > > https://github.com/DataDog/pip/tree/trishankatdatado

[Distutils] Re: Summary of PyPI overhaul in new LWN article

2018-07-26 Thread Trishank Kuppusamy
On Thu, Jul 26, 2018 at 1:37 PM Wes Turner wrote: > Hey, what's the latest on this? > > - Python PEP458: > - https://www.pypa.io/en/latest/roadmap/#pypi-integrate-tuf > I'm not aware of what is happening on the Warehouse end, but I'm happy to report we have a version of pip + TUF Datadog is us

[Distutils] Re: Summary of PyPI overhaul in new LWN article

2018-07-26 Thread Wes Turner
Hey, what's the latest on this? - Python PEP458: - https://www.pypa.io/en/latest/roadmap/#pypi-integrate-tuf On Wed, Apr 18, 2018 at 5:43 PM Trishank Kuppusamy < trishank.kuppus...@datadoghq.com> wrote: > > https://github.com/pypa/pip/compare/10.0.0...DataDog:trishankatdatadog/10.0.0.tuf-in-t

[Distutils] Re: Packaging Advice for EFF's Certbot

2018-07-26 Thread Wes Turner
>> If we didn’t want to trust any binaries built by someone else or proprietary code, how much work would that be? - Docker Notary (The Update Framework) - PEP 458, PEP 480 (TUF) - Host GPG .asc(s) for things you just found ## To build the whole toolchain yourself? Build, Package, Install, Upgra

[Distutils] Re: Export status for setuptools (18.0.1)

2018-07-26 Thread Donald Stufft
I believe the answer is it is Not Controlled, however, I am not an authoritative source on that, and if you’re shipping a finished product that includes Python or Python libraries, you should probably get with whoever is responsible for compliance and have them do the compliance work here. Also

[Distutils] Re: Packaging Advice for EFF's Certbot

2018-07-26 Thread Nathaniel Smith
On Thu, Jul 26, 2018, 05:48 Ben Finney via Distutils-SIG < distutils-sig@python.org> wrote: > Brad Warren writes: > > > Our main use case has been the long tail of individuals or small teams > > of sysadmins who maintain servers and need or want help and automation > > around maintaining a secure

[Distutils] Re: Packaging Advice for EFF's Certbot

2018-07-26 Thread Dan Ryan
As a heavy user of certbot myself across numerous systems I would echo Nick and others’ suggestions about native packaging. Third party tools and docker containers are basically non starters. Dan Ryan // pipenv maintainer gh: @techalchemy > On Jul 26, 2018, at 11:30 AM, Chris Barker - NOAA Fede

[Distutils] Re: Packaging Advice for EFF's Certbot

2018-07-26 Thread Chris Barker - NOAA Federal via Distutils-SIG
I agree that you are probably best off integrating with the system packaging system in this case. But if you do want to deploy and app with all its dependencies in a controlled environment, conda constructor May make that easy: https://github.com/conda/constructor -CHB Sent from my iPhone On

[Distutils] Re: pip Install for Python 2.7.6

2018-07-26 Thread Paul Moore
When you say "not working", you'll need to provide more details. But I suspect what you're getting is network errors, because PyPI no longer supports TLSv1 connections, and Python 2.7 for Windows only gained TLSv2 support in a later release of 2.7 than the one you have. So you may have problems if

[Distutils] Re: Packaging Advice for EFF's Certbot

2018-07-26 Thread Nick Coghlan
On 25 July 2018 at 12:39, Nathaniel Smith wrote: >> On Jul 24, 2018, at 4:36 AM, Nick Coghlan wrote: >> >> However, there *are* folks that have been working on allowing >> applications to be defined primarily as Python projects, and then have >> the creation of wrapper native installers be a push

[Distutils] Re: Packaging Advice for EFF's Certbot

2018-07-26 Thread Ben Finney via Distutils-SIG
Brad Warren writes: > Wow! Thanks for all the feedback everyone. Thank you for seeking it, and for the work on making Certbot viable. > > On Jul 23, 2018, at 11:10 PM, James Bennett wrote: > > > > On Mon, Jul 23, 2018 at 8:17 PM, Alex Walters > > wrote: > > As a user of certbot, docker, con

[Distutils] Export status for setuptools (18.0.1)

2018-07-26 Thread Contact . CCT
Hi Thanks for maintaining setuptools. Do you know whether it is Not controlled, or if it has an Export control classification number (ECCN) in compliance with US export control laws ? (Bureau of Industry and Security website : http://www.bis.doc.gov/) Thanks for your time. Best regards. THALES Gr