Your message dated Tue, 27 Nov 2018 13:10:16 +0000
with message-id <e1grd84-000dz0...@fasolo.debian.org>
and subject line Bug#876145: fixed in python-pip 18.1-1
has caused the Debian Bug report #876145,
regarding python-pip: pip install --system as non-root shouldn't default 
--ignore-installed
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
876145: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=876145
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: python-pip
Version: 9.0.1-2
Severity: normal

Dear Maintainer,

When running "pip install --system" as a non-root user, the change in
set_user_default.patch forces the --ignore-installed flag to be enabled.

This has the effect of breaking pip for use cases that install packages as non-
root but don't use --user or virtualenv.  When dependencies are shared among
multiple packages, the --ignore-installed option causes pip to blindly install
the latest version of each dependency requested by each package, even if a
compatible package version is already installed, and even if this breaks the
requirement spec of some other package.  This results in package version
conflicts.

For example:

pip install pkg_A (requires pkg_B==1.0)
pip install pkg_C (requires pkg_B>=1.0)

Because of --ignore-installed, pkg_C ignores the existing pkg_B (which it is
otherwise compatible with) and installs the latest pkg_B==2.0, as a result this
breaks pkg_A.

Here's the relevant logic in pip/commands/install.py:

        default_user = True
        if running_under_virtualenv():
            default_user = False
        if os.geteuid() == 0:
            default_user = False

        cmd_opts.add_option(
            '-I', '--ignore-installed',
            dest='ignore_installed',
            action='store_true',
            default=default_user,
            help='Ignore the installed packages (reinstalling instead).')

My preferred fix would be that when the --system flag is set, it should retain
the default behavior of pip, and not interfere with the unrelated --ignore-
installed flag.

Thanks,
Peter



-- System Information:
Debian Release: 9.1
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.0-3-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

--- End Message ---
--- Begin Message ---
Source: python-pip
Source-Version: 18.1-1

We believe that the bug you reported is fixed in the latest version of
python-pip, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 876...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Andrej Shadura <andre...@debian.org> (supplier of updated python-pip package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Tue, 27 Nov 2018 12:57:21 +0100
Source: python-pip
Binary: python-pip python3-pip python-pip-whl
Architecture: source
Version: 18.1-1
Distribution: experimental
Urgency: medium
Maintainer: Debian Python Modules Team 
<python-modules-t...@lists.alioth.debian.org>
Changed-By: Andrej Shadura <andre...@debian.org>
Description:
 python-pip - Python package installer
 python-pip-whl - Python package installer
 python3-pip - Python package installer
Closes: 830892 854225 876145 895232 901393
Changes:
 python-pip (18.1-1) experimental; urgency=medium
 .
   [ Barry Warsaw ]
   * d/control: Remove MIA Jeff Licquia from Uploaders.  (Closes: #854225)
 .
   [ Ondřej Nový ]
   * d/control: Set Vcs-* to salsa.debian.org.
   * d/copyright: Use https protocol in Format field.
   * d/watch: Use https protocol.
   * d/tests: Use AUTOPKGTEST_TMP instead of ADTTMP.
   * d/control: Remove ancient X-Python-Version field.
   * d/control: Remove ancient X-Python3-Version field.
   * Convert git repository from git-dpm to gbp layout.
 .
   [ Andrius Merkys ]
   * New upstream version 18.0.  (Closes: #901393)
   * Remove patch html5lib-alternative-beta-name.patch which is no longer
     required as versions of html5lib match.
   * Update patches.
   * debian/rules: adjust paths.
   * debian/rules: changelog is stored in NEWS.rst now.
 .
   [ Manas Kashyap ]
   * New upstream release 18.1
   * Update Standards-Version to 4.2.1, no changes.
   * Use debhelper 11.
 .
   [ Andrej Shadura ]
   * Refresh set_user_default.patch.
   * Refresh disable-pip-version-check.patch.
   * Drop use-unvendored-urllib3.diff.
   * Don’t remove vendored PEP517 code.
   * Only default to --user when --target/--prefix not set
     (Closes: #830892, #895232, #876145)
Checksums-Sha1:
 bea1e96eac4ee838522792c78a7c02ea401b0071 2342 python-pip_18.1-1.dsc
 1226368a8d39bd8b945517b6f7cb9802b279564e 1259370 python-pip_18.1.orig.tar.gz
 65f3b119e406974a8fdbeaa56ed09d3c8c3e3423 17656 python-pip_18.1-1.debian.tar.xz
 6983b590e091d1bcfe1f6b2e3826a3e42478657a 8840 
python-pip_18.1-1_source.buildinfo
Checksums-Sha256:
 4a705c2c286dd08583c6714e7068b2562049bcf0705670896d567c9375fe93c9 2342 
python-pip_18.1-1.dsc
 c0a292bd977ef590379a3f05d7b7f65135487b67470f6281289a94e015650ea1 1259370 
python-pip_18.1.orig.tar.gz
 d2b47f2841685d34935401123d0c87ec5fcb47d036ace41b78c0bee91f876520 17656 
python-pip_18.1-1.debian.tar.xz
 f5de5ff8b1a00dc947cbd63c4c6644295c46e817cb620c93cc8dec83a1700716 8840 
python-pip_18.1-1_source.buildinfo
Files:
 031e9c3fd1a8342d4c3caffcd0e65a1f 2342 python optional python-pip_18.1-1.dsc
 75cad449ad62c88b22de317a26781714 1259370 python optional 
python-pip_18.1.orig.tar.gz
 97a7b64fb2eaa4ef4ff1d940e1e7080b 17656 python optional 
python-pip_18.1-1.debian.tar.xz
 1cbad070037322d7886667864866eaef 8840 python optional 
python-pip_18.1-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEeuS9ZL8A0js0NGiOXkCM2RzYOdIFAlv9N/YACgkQXkCM2RzY
OdKWrgf/ei1hJoWFakITwXKhKPDTzXI3qfS2rzhj7ESaJbPVeYJA4LT98SJCmXH2
HammeSYuo2SOu2YEq0ryGpYW2knlMoWRyMRNCX4YGVBO0aj+oxDalYkIFNKhUPvY
ffC75be0+N+WsTJAWhniq9uZbg4r2LcGCdyW7angJ/RtONX6RNkxItQWx0lEDFA4
WBEgICKY4ofmWUqiATysK0o74Aa2lgGkC1x2X/ceNAhSog4yAzyZcfnpboXzS3dA
eJgMEe/Ey1Pc7ASkfClqoFIcEA+m1Ml1Se1Gcy/omKWtA4WxY14hqrCxwuDSoCiK
Hk0yQnltGaETbgDQrfllh9gNX6TMTg==
=awpX
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to