mini-Summit report, day 2

[Greg Troxel]

Brian Warner <warner at lothar.com> writes:

> Summary of the second day. Brian, Daira, and Nathan met in a coffee
> shop, and we:
>
> * built a branch that replaces Tahoe's build process with the "create a
>   virtualenv, peep-install everything into it, make bin/tahoe run
>   venv/bin/tahoe" technique that Brian used in Petmail. Modulo
>   bugs/limitations in Peep, this is "safe", in that it checks
>   pre-specified hashes on all tarballs before running any code from
>   them. If you managed to get a "good" copy of tahoe's source code, this
>   would ensure that you only use "good" code for tahoe's dependencies.

Hopefully this has a way to avoid doing any fetching of dependencies,
and failing instead, and is no less cross unfriendly than python has to
be to start with.  (From packaging system view)   tahoe really doesn't
seem all that special - it's just a bunch of python code with a list of
dependencies, so it seems symptomatic of larger brokenness in the python
world that this is necessary...

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 180 bytes
Desc: not available
URL: <http://tahoe-lafs.org/pipermail/tahoe-dev/attachments/20140702/fba8e02b/attachment.pgp>