Gregory Pereira comments

Results 19 comments of


                                            Gregory Pereira

adding initial support for poetry groups, beginning testing

/retest

adding initial support for poetry groups, beginning testing

Currently paused, I am finishing up deploying argocd-notifications for operate-first right now, but this is my next priority after that. I need to debug the 4 tests that failed.

adding initial support for poetry groups, beginning testing

It looks like 2 of the three tests that failed here were using pip90, not sure if it's to do with those setup tools errors, ill comb through the logs...

adding initial support for poetry groups, beginning testing

Thanks for the update. I will be picking this back up shortly, just some other work is currently taking priority. /remove-lifecycle rotten /remove-lifecycle stale

Solver should report exact package hash that was used to install a package

/assign @Gregory-Pereira

Solver should report exact package hash that was used to install a package

I am not too familiar with solver, so pardon my questions as I get up to speed. When you say `Thoth should point to an exact Python artifact that should...

Solver should report exact package hash that was used to install a package

So we would save a bunch of these hashes that correspond to the a specific version of a package, the OS and python version on the Thoth server / API...

Solver should report exact package hash that was used to install a package

So for each dependency as its getting installed I am able to grab its SHA256. However the way pip does its hashes is per file in said package. Now not...

Solver should report exact package hash that was used to install a package

So quick update. Firstly the only way I could successfully use the hashes when installing a pip package was to stuff it into some requirements file (I am using `temp-requirements.txt`)...

Solver should report exact package hash that was used to install a package

So I am not sure if this is a valid solution to address [Frido's comment](https://github.com/thoth-station/solver/pull/5110#discussion_r798006711), but I was thinking about adding the `-vv` flag to the [pip install command](https://github.com/thoth-station/solver/pull/5110/files#diff-a2c4c57018eabbd0f7c542254c06d9314ae6b2baa3888bc22ffc0b16b0ec898eR99) and...