rill icon indicating copy to clipboard operation
rill copied to clipboard

Exposure to locked down enterprise environments

Open mdav43 opened this issue 1 year ago • 3 comments

I work for an org that is heavily locked down, but has internally hosted registry’s (pip and npm)

Describe the solution you'd like I assume there are many orgs like this and installing from our machines locally is not an option. These orgs are using python for dev and most likely have a mirrored pip registry. Could you add rill to the pip registry somehow?

edited (apologies iOS keyboard)

mdav43 avatar Mar 22 '24 06:03 mdav43

Not sure I follow really. You want to use npm as a distribution of the built source?

Rill compiles into a executable that has a embedded UI for local development, you can publish that executable into a local registry such as NPM (Allthough not sure that makes a lot of sense but Artifactory or similar service would work).

Our installation script today performs the following actions:

  • Download the platform appropriate release
  • Unzip
  • sudo install into /usr/local/bin

We don't require elevated permissions per se so you could have a internal registry host the executable and download it to your machine and run from anywhere really

mindspank avatar Mar 22 '24 08:03 mindspank

Thanks for your comments.

I didn’t call it out before- I like the look of rill.

To expand - even trying rill (not possible to download executables to our machines, and coding env is ring fenced) or evidence.dev (requires internet connection as it downloads from GitHub) isn’t possible with several approval layers (weeks and weeks, lol)

Im a fan and just wanted to highlight maybe that’s something to consider - but not sure it’s possible. some old comments here: https://stackoverflow.com/questions/51140063/distribute-executable-with-python-pip

mdav43 avatar Mar 22 '24 11:03 mdav43

Got it, I'll leave it in the backlog for now but I can't give you a definitive answer on when we would get around to tackle this. NPM has bin linkage to link in executables, unsure about pip, and with a dummy entry point file could potentially work.

We do publish to Homebrew if you are running a replica of it.

mindspank avatar Mar 22 '24 12:03 mindspank