Re: [Python-ideas] Re: Enhancing Zipapp

> On 8 Jan 2020, at 16:02, Christopher Barker wrote: > > On Wed, Jan 8, 2020 at 1:49 AM Abdur-Rahmaan Janhangeer > wrote: > Have a look at this write up about the horror that is zip file name handling. > > https://marcosc.com/2008/12/zip-files-and-encoding-i-hate

Re: [Python-ideas] Re: Enhancing Zipapp

On 08/01/2020 18:08, many people wrote lots of stuff... Folks, could we pick one list and have the discussion there, rather than on both python-list and python-ideas? Getting *four* copies of Andrew's emails is a tad distracting :-) -- Rhodri James *-* Kynesim Ltd -- https://mail.python.org/

Re: [Python-ideas] Re: Enhancing Zipapp

On Jan 8, 2020, at 01:09, Abdur-Rahmaan Janhangeer wrote: > > Using the wheel-included zip (A), we can generate another zip file (B) with > the packages installed. That generated zip file is then executed. But that generated zip B doesn’t have a trustable hash on it, so how can you execute it?

Re: [Python-ideas] Re: Enhancing Zipapp

On Jan 8, 2020, at 01:09, Abdur-Rahmaan Janhangeer wrote: > > But now, a malicious program might try to modify the info file > and modify the hash. One way to protect even the metadata is > to hash the entire content > > folder/ > file.py # we can add those in a folder if needed > __main

Re: [Python-ideas] Re: Enhancing Zipapp

On Wed, Jan 8, 2020 at 1:24 AM Abdur-Rahmaan Janhangeer < arj.pyt...@gmail.com> wrote: > But a thought on that -- you may be able to accomplish something similar >> with conda, "conda constructor", and "conda run". -- or a new tool built >> from those. The idea is that the first time you ran your

Re: [Python-ideas] Re: Enhancing Zipapp

On Wed, Jan 8, 2020 at 1:49 AM Abdur-Rahmaan Janhangeer < arj.pyt...@gmail.com> wrote: > Have a look at this write up about the horror that is zip file name >> handling. >> >> https://marcosc.com/2008/12/zip-files-and-encoding-i-hate-you/ >> >> This has been a pain point at work. >> > I'm pretty s

Re: [Python-ideas] Re: Enhancing Zipapp

On Wed, 8 Jan 2020, 02:15 Barry, wrote: > > Have a look at this write up about the horror that is zip file name > handling. > > https://marcosc.com/2008/12/zip-files-and-encoding-i-hate-you/ > > This has been a pain point at work. > Since zipapp did not touch the subject, i won't either unless w

Re: [Python-ideas] Re: Enhancing Zipapp

On Wed, 8 Jan 2020, 11:09 Christopher Barker, wrote: > > But a thought on that -- you may be able to accomplish something similar > with conda, "conda constructor", and "conda run". -- or a new tool built > from those. The idea is that the first time you ran your "app", it would > install its dep

Re: [Python-ideas] Re: Enhancing Zipapp

On Mon, Jan 6, 2020 at 10:50 PM Abdur-Rahmaan Janhangeer < arj.pyt...@gmail.com> wrote: > - More metadata > good idea, and simple. > - Integrity check with hashing > - Protecting the meta data > This could be a big challenge -- and I'm not expert, so have no idea what the issues are. > - Bu

Re: [Python-ideas] Re: Enhancing Zipapp

> On 7 Jan 2020, at 02:40, Christopher Barker wrote: > >  > I’m a bit unclear on how far this goes: is it just a bit more specific with > more meta-data standards? > > Or are you aiming for something that will run without a Python install? > > Other issues: > > Are you aiming for a bundle

Re: [Python-ideas] Re: Enhancing Zipapp

Yours, Abdur-Rahmaan Janhangeer pythonmembers.club | github Mauritius On Tue, Jan 7, 2020 at 6:40 AM Christopher Barker wrote: > I’m a bit unclear on how far this goes: is it just a bit more specific > with more meta-data sta

Re: [Python-ideas] Re: Enhancing Zipapp

I’m a bit unclear on how far this goes: is it just a bit more specific with more meta-data standards? Or are you aiming for something that will run without a Python install? Other issues: Are you aiming for a bundle that can run on multiple platforms? If so, then it’ll have to have a way to bund