PMXBOT Log file Viewer

Help | Karma | Search:

#pypa logs for Sunday the 10th of November, 2019

(Back to #pypa overview) (Back to channel listing) (Animate logs)
[15:13:04] <gp> how can I make pip more cache friendly to a network http proxy?
[15:13:31] <tos9> gp: In what sense
[15:14:20] <gp> tos9: I thought I had read awhile back about being able to have pip download over http and compare to a hash retrieved by https
[15:14:27] <gp> tos9: anything like that i'm missing in the docs?
[15:27:12] <tos9> gp: are you thinking of --require-hashes / --hash ?
[15:33:54] <gp> tos9: hrm I think so. --require-hashes and then use the http index? Will that automatically pull hashes from pypi and download over http?
[15:34:17] <tos9> it will not
[15:34:32] <tos9> maybe I'm missing how/why a proxy is relevant
[15:34:46] <gp> ah I guess I misunderstood the point when I read it before
[15:34:47] <tos9> proxy support isn't particularly related to hash verification
[15:35:14] <gp> no but unless you introduce a proxy with a trusted wildcard cert you can't cache https links at the network proxy level
[20:09:22] <toad_polo> gp: Why do you want to do this at the network level?
[20:10:45] <toad_polo> If you are very concerned with the amount that pip downloads and in a position to get everyone on your network to use a custom config, I think a dedicated caching proxy is the best and safest option.