Re: [Distutils] [Catalog-sig] [Python-Dev] accept the wheel PEPs 425, 426, 427

2012-11-14 Thread Daniel Holth
Well, you can build eggs with Bento, and I have a patch that allows it to build wheels, in both cases it will produce pip-compatible metadata. The Bento author has his own informed opinions about the way packaging should work which do not necessarily include the packaging PEPs. ___

Re: [Distutils] [Catalog-sig] [Python-Dev] accept the wheel PEPs 425, 426, 427

2012-11-14 Thread Paul Moore
On 14 November 2012 12:04, Daniel Holth wrote: > That has been tried already (setuptools, distribute, distutils2). Instead, > try bento (http://cournape.github.com/Bento/). > > Hilariously everyone I've showed it to is immediately put off by the > indentation based syntax (who would use such a th

Re: [Distutils] [Catalog-sig] [Python-Dev] accept the wheel PEPs 425, 426, 427

2012-11-14 Thread Daniel Holth
On Nov 14, 2012, at 2:23 AM, Ronald Oussoren wrote: > > On 13 Nov, 2012, at 17:21, Antoine Pitrou wrote: > >> Le Tue, 13 Nov 2012 16:10:30 +0100, >> Ronald Oussoren a écrit : >>> >>> On 13 Nov, 2012, at 16:00, Daniel Holth wrote: I want to remove distutils from the standard libra

Re: [Distutils] [Catalog-sig] [Python-Dev] accept the wheel PEPs 425, 426, 427

2012-11-13 Thread Ronald Oussoren
On 13 Nov, 2012, at 17:21, Antoine Pitrou wrote: > Le Tue, 13 Nov 2012 16:10:30 +0100, > Ronald Oussoren a écrit : >> >> On 13 Nov, 2012, at 16:00, Daniel Holth wrote: >>> >>> I want to remove distutils from the standard library. >> >> Why? Distutils may not be perfect, but is usable for ba

Re: [Distutils] [Catalog-sig] [Python-Dev] accept the wheel PEPs 425, 426, 427

2012-11-13 Thread Daniel Holth
On Tue, Nov 13, 2012 at 12:23 PM, "Martin v. Löwis" wrote: > I want to remove distutils from the standard library. If that happens >> then we might want a secure way to install it from pypi. One way would >> be to include the public key used to sign distutils in Python's own >> signature-verifying

Re: [Distutils] [Catalog-sig] [Python-Dev] accept the wheel PEPs 425, 426, 427

2012-11-13 Thread Martin v. Löwis
I want to remove distutils from the standard library. If that happens then we might want a secure way to install it from pypi. One way would be to include the public key used to sign distutils in Python's own signature-verifying bootstrap wheel installer, never mind whether it used ECDSA or RSA or

Re: [Distutils] [Catalog-sig] [Python-Dev] accept the wheel PEPs 425, 426, 427

2012-11-13 Thread Martin v. Löwis
Am 13.11.12 11:26, schrieb M.-A. Lemburg: Note that signing such distribution files can be handled outside of the wheel format PEP. It just way to complex and out of scope for the wheel format itself. Also note that PGP/GPG and the other signing tools work well on any distribution file. There's r

Re: [Distutils] [Catalog-sig] [Python-Dev] accept the wheel PEPs 425, 426, 427

2012-11-13 Thread Daniel Holth
On Tue, Nov 13, 2012 at 5:26 AM, M.-A. Lemburg wrote: > On 13.11.2012 10:51, "Martin v. Löwis" wrote: > > Am 13.11.12 03:04, schrieb Nick Coghlan: > >> On Mon, Oct 29, 2012 at 4:47 AM, Daniel Holth >> > wrote: > >> > >> I think Metadata 1.3 is done. Who would like to

Re: [Distutils] [Catalog-sig] [Python-Dev] accept the wheel PEPs 425, 426, 427

2012-11-13 Thread Paul Moore
On 13 November 2012 10:26, M.-A. Lemburg wrote: > I agree with Martin. If the point is to "to protect against cryptography > that is not used", then not using the de-facto standard in signing > open source distribution files, which today is PGP/GPG, misses that > point :-) > I agree as well. For

Re: [Distutils] [Catalog-sig] [Python-Dev] accept the wheel PEPs 425, 426, 427

2012-11-13 Thread M.-A. Lemburg
On 13.11.2012 10:51, "Martin v. Löwis" wrote: > Am 13.11.12 03:04, schrieb Nick Coghlan: >> On Mon, Oct 29, 2012 at 4:47 AM, Daniel Holth > > wrote: >> >> I think Metadata 1.3 is done. Who would like to czar? >> >> (Apologies for the belated reply, it's been a busy few

Re: [Distutils] [Catalog-sig] [Python-Dev] accept the wheel PEPs 425, 426, 427

2012-11-13 Thread Martin v. Löwis
Am 13.11.12 03:04, schrieb Nick Coghlan: On Mon, Oct 29, 2012 at 4:47 AM, Daniel Holth mailto:dho...@gmail.com>> wrote: I think Metadata 1.3 is done. Who would like to czar? (Apologies for the belated reply, it's been a busy few weeks) I'm happy to be BDFL delegate for these. I'd like to s