PMXBOT Log file Viewer

Help | Karma | Search:

#pypa-dev logs for Wednesday the 14th of September, 2016

(Back to #pypa-dev overview) (Back to channel listing) (Animate logs)
[08:22:48] <pombreda> !logs
[08:22:48] <pmxbot> http://chat-logs.dcpython.org/channel/pypa-dev
[17:09:09] <jacob__> Hello, is there a way to force pip to follow links from /simple. It is currently taking all links to be relative even if the actual anchor tag has an absolute link. I am trying to merge multiple /simple files and have pip follow the proper links to their respective package indices
[17:09:23] <jacob__> Any help is much appreciated
[17:09:47] <agronholm> jacob__: as I recall it does not follow links since it's a security hazard
[17:10:07] <jacob__> And there is no way to force it to?
[17:10:22] <agronholm> I'm looking through the options now
[17:11:31] <jacob__> Thanks for the help! I've looked through the options as well, and I don't see a way to do it. It makes sense to prevent it because of the security risk. Any other advice to get the behavior I want? Essentially we are hosting an internal package index that may have name collisions with PyPI, and we want to always prefer our packages over the ones hosted on PyPI
[17:11:33] <agronholm> nothing so broad
[17:11:54] <agronholm> jacob__: always install from devpi then?
[17:12:18] <agronholm> devpi should prefer your own packages over public ones as I recall
[17:12:26] <jacob__> We are actually running a clone of Warehouse rather than devpi
[17:12:30] <agronholm> oh?
[17:12:46] <agronholm> well, I use devpi in the way you describe and it seems to work for me
[17:12:59] <agronholm> after all that's what devpi was made for
[17:13:09] <jacob__> Alright. Maybe we'll check it out. Thanks again for the help!
[18:49:36] <ronny> dstufft: https://github.com/pypa/pip/issues/2432 got a bit out of hand - i didnt handle the communication well enough and it resulted in someone ending it with a relatively inaccurate passive agressive remark
[18:57:30] <ronny> anyone up for reviewing my response before i post?
[18:58:20] <dstufft> I'm writing a response
[18:58:22] <dstufft> sec
[18:59:43] <ronny> ok, then i wont post one
[19:38:40] <ronny> dstufft: thanks, beautifully worded and much more professional than what i had in mind