Re: [Distutils] [Catalog-sig] [Python-Dev] accept the wheel PEPs 425, 426, 427

2012-11-14 Thread Daniel Holth
On Nov 14, 2012, at 2:23 AM, Ronald Oussoren ronaldousso...@mac.com wrote: On 13 Nov, 2012, at 17:21, Antoine Pitrou solip...@pitrou.net wrote: Le Tue, 13 Nov 2012 16:10:30 +0100, Ronald Oussoren ronaldousso...@mac.com a écrit : On 13 Nov, 2012, at 16:00, Daniel Holth dho...@gmail.com

Re: [Distutils] [Catalog-sig] [Python-Dev] accept the wheel PEPs 425, 426, 427

2012-11-14 Thread Paul Moore
On 14 November 2012 12:04, Daniel Holth dho...@gmail.com wrote: That has been tried already (setuptools, distribute, distutils2). Instead, try bento (http://cournape.github.com/Bento/). Hilariously everyone I've showed it to is immediately put off by the indentation based syntax (who would

Re: [Distutils] [Catalog-sig] [Python-Dev] accept the wheel PEPs 425, 426, 427

2012-11-14 Thread Daniel Holth
Well, you can build eggs with Bento, and I have a patch that allows it to build wheels, in both cases it will produce pip-compatible metadata. The Bento author has his own informed opinions about the way packaging should work which do not necessarily include the packaging PEPs.

Re: [Distutils] [Catalog-sig] [Python-Dev] accept the wheel PEPs 425, 426, 427

2012-11-13 Thread Martin v. Löwis
Am 13.11.12 03:04, schrieb Nick Coghlan: On Mon, Oct 29, 2012 at 4:47 AM, Daniel Holth dho...@gmail.com mailto:dho...@gmail.com wrote: I think Metadata 1.3 is done. Who would like to czar? (Apologies for the belated reply, it's been a busy few weeks) I'm happy to be BDFL delegate for

Re: [Distutils] [Catalog-sig] [Python-Dev] accept the wheel PEPs 425, 426, 427

2012-11-13 Thread M.-A. Lemburg
On 13.11.2012 10:51, Martin v. Löwis wrote: Am 13.11.12 03:04, schrieb Nick Coghlan: On Mon, Oct 29, 2012 at 4:47 AM, Daniel Holth dho...@gmail.com mailto:dho...@gmail.com wrote: I think Metadata 1.3 is done. Who would like to czar? (Apologies for the belated reply, it's been a busy few

Re: [Distutils] [Catalog-sig] [Python-Dev] accept the wheel PEPs 425, 426, 427

2012-11-13 Thread Paul Moore
On 13 November 2012 10:26, M.-A. Lemburg m...@egenix.com wrote: I agree with Martin. If the point is to to protect against cryptography that is not used, then not using the de-facto standard in signing open source distribution files, which today is PGP/GPG, misses that point :-) I agree as

Re: [Distutils] [Catalog-sig] [Python-Dev] accept the wheel PEPs 425, 426, 427

2012-11-13 Thread Daniel Holth
On Tue, Nov 13, 2012 at 5:26 AM, M.-A. Lemburg m...@egenix.com wrote: On 13.11.2012 10:51, Martin v. Löwis wrote: Am 13.11.12 03:04, schrieb Nick Coghlan: On Mon, Oct 29, 2012 at 4:47 AM, Daniel Holth dho...@gmail.com mailto:dho...@gmail.com wrote: I think Metadata 1.3 is done. Who

Re: [Distutils] [Catalog-sig] [Python-Dev] accept the wheel PEPs 425, 426, 427

2012-11-13 Thread Martin v. Löwis
Am 13.11.12 11:26, schrieb M.-A. Lemburg: Note that signing such distribution files can be handled outside of the wheel format PEP. It just way to complex and out of scope for the wheel format itself. Also note that PGP/GPG and the other signing tools work well on any distribution file. There's

Re: [Distutils] [Catalog-sig] [Python-Dev] accept the wheel PEPs 425, 426, 427

2012-11-13 Thread Martin v. Löwis
I want to remove distutils from the standard library. If that happens then we might want a secure way to install it from pypi. One way would be to include the public key used to sign distutils in Python's own signature-verifying bootstrap wheel installer, never mind whether it used ECDSA or RSA

Re: [Distutils] [Catalog-sig] [Python-Dev] accept the wheel PEPs 425, 426, 427

2012-11-13 Thread Daniel Holth
On Tue, Nov 13, 2012 at 12:23 PM, Martin v. Löwis mar...@v.loewis.dewrote: I want to remove distutils from the standard library. If that happens then we might want a secure way to install it from pypi. One way would be to include the public key used to sign distutils in Python's own

Re: [Distutils] [Catalog-sig] [Python-Dev] accept the wheel PEPs 425, 426, 427

2012-11-13 Thread Ronald Oussoren
On 13 Nov, 2012, at 17:21, Antoine Pitrou solip...@pitrou.net wrote: Le Tue, 13 Nov 2012 16:10:30 +0100, Ronald Oussoren ronaldousso...@mac.com a écrit : On 13 Nov, 2012, at 16:00, Daniel Holth dho...@gmail.com wrote: I want to remove distutils from the standard library. Why?