[Distutils] custom package index issue

[Tres Seaver]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Phillip J. Eby wrote:
> At 02:44 PM 1/15/2009 +0100, Eric Lemoine wrote:
>> Hi
>>
>> For a project I'm involved in we created our own package index. The
>> package index includes our package (mapfish), as well as its direct
>> and indirect dependencies.
>>
>> Then, the installation of the "mapfish" package and its dependencies
>> is done with this command:
>> easy_install -i http://dev.camptocamp.com/packages/mapfish/1.0/index
>> mapfish==1.0
>>
>> The installation command works, but some indirect dependencies aren't
>> downloaded from our package index but from other sources. For
>> example,"simplejson" which "pylons" depends on (which "mapfish"
>> depends on), is downloaded from
>> "http://pylons.cachefly.net/download/0.9.6.2/simplejson-1.7.1-py2.5.egg"
>> as opposed to be downloaded from
>> "http://dev.camptocamp.com/packages/mapfish/1.0/simplejson-1.7.1.tar.gz".
> 
> Binary packages are given precedence over source packages, and 
> presumably Pylons is providing a direct link in its setup.py.

I would certainly wish for a configuration knob which inverted this
policy:  even better would be one which refused to download binaries at all.

>> We'd like every mapfish dependency to be downloaded from our package
>> index. Does anyone know how to achieve this?
> 
> You'll need to either ensure that your index provides binaries, or 
> use --allow-hosts to restrict what hosts easy_install will look for files on.

While I'm at it ;):  I'd like a global config knob to disable use of
package-supplied 'dependency_links' (as opposed to those supplied on the
command line).  I guess the '--allow-hosts' option is probably a decent
workaround for that one:  can it be set in 'setup.cfg', perchance?


Tres.
- --
===================================================================
Tres Seaver          +1 540-429-0999          tseaver at palladion.com
Palladion Software   "Excellence by Design"    http://palladion.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFJb1eZ+gerLs4ltQ4RAii8AJ9kAXtl9jGNf6gMapJ1p5xRTEoM1gCeJgJJ
0+Dr5XJXJLnryEV78CTKGkU=
=BwDx
-----END PGP SIGNATURE-----