Log file Viewer

[19:52:50] <buck1_> I'm finding it very hard to get --extra-index-url to work without adding a million --allow-unverified

[19:53:00] <buck1_> is that by design or am i doing something wrong

[19:55:12] <EWDurbin> buck1_: what is generating the other indexes you’re adding?

[19:55:25] <buck1_> it's our internal pypi

[19:56:43] <EWDurbin> buck1_: if the links to packages on the generated index have rel=“internal” set it should make the —allow-unverified unnecessary for those packages

[19:57:32] <EWDurbin> <a href="some-package-1.0.0.tar.gz#md5=875fb7beb9cbefe486ca36d837d7a837" rel="internal">some-package-1.0.0.tar.gz</a>

[19:57:33] <EWDurbin> vs

[19:57:38] <EWDurbin> <a href="some-package-1.0.0.tar.gz#md5=875fb7beb9cbefe486ca36d837d7a837">some-package-1.0.0.tar.gz</a>

[19:57:41] <buck1_> allow-unverified doesn't seem to take more than one value

[19:58:07] <EWDurbin> so it is most likely an issue with whatever generated your internal pypi’s simple index

[19:58:46] <EWDurbin> oh sorry, i was thinking of —allow-external

[19:59:15] <EWDurbin> i think allow-unverified implies allow-external though

[19:59:47] <buck1_> allow-unverified doesn't seem to take more than one value

[20:01:00] <EWDurbin> i’m not sure on that, but setting the rel=“internal” on your simple index’s links should reduce the need for your million allow-unverifieds

[20:02:33] <dstufft> EWDurbin: is correct

[20:02:36] <dstufft> or don't have the meta tag

[20:05:18] <buck1_> erm the warning message was simply misleading; the version i asked for didn't exist in any case

[20:05:45] <buck1_> i think it skipped an "unverified" for a previous req, and the state persisted

[20:10:56] <buck1_> pip doesn't like working in parallel with itself huh