this post was submitted on 30 Sep 2024
34 points (82.7% liked)

Python

7623 readers
5 users here now

Welcome to the Python community on the programming.dev Lemmy instance!

πŸ“… Events

PastNovember 2023

October 2023

July 2023

August 2023

September 2023

🐍 Python project:
πŸ’“ Python Community:
✨ Python Ecosystem:
🌌 Fediverse
Communities
Projects
Feeds

founded 2 years ago
MODERATORS
all 45 comments
sorted by: hot top controversial new old
[–] ertai@programming.dev 21 points 1 year ago* (last edited 1 year ago) (5 children)

Yet another python packager............... insane that such a popular language still doesn't have this basic problem solved.

Yeah but this one is actually good. So hopefully it will displace all the others.

[–] CodeMonkey@programming.dev 4 points 1 year ago (4 children)

pip is a perfectly usable package manager and is included in most python distributions now. Is it perfect? No, but it is good enough for every team I have been on.

[–] astrojuanlu@social.coop 10 points 1 year ago

@CodeMonkey @ertai No it is not perfectly usable for all people, all projects, all situations. uv definitely gets much closer to that.

[–] eager_eagle@lemmy.world 5 points 1 year ago* (last edited 1 year ago)

it's usable, yet it doesn't attempt to solve a a third of the problems uv, poetry, and pdm address.

it's also not hard to end up with a broken env with pip.

[–] Moc@lemmy.world 4 points 1 year ago

Except that it’s slower than uv and therefore strictly worse for build processes

[–] uthredii@programming.dev 1 points 1 year ago

Putting aside the speed uv has a bunch of features that usually require 2-4 separate tools. These tools are very popular but not very well liked. The fact these tools are so popular proves that pip is not sufficient for many use cases. Other languages have a single tool (e.g. cargo) that are very well liked.

[–] sum_yung_gai@lemm.ee 3 points 1 year ago

I use poetry and it works really well. I would consider it solved but that doesn't mean there isn't the possibility of a better solution.

[–] ertai@programming.dev 1 points 1 year ago

Glad I use arch btw, pacman manages my python packages so I don't have to deal with all this mess.

[–] ertai@programming.dev 1 points 10 months ago

Why do programming language developpers even feel the need to reinvent package management every time? Like, just use the system's package manager?

[–] gigachad@sh.itjust.works 11 points 1 year ago (1 children)

In my field we rely on conda and I hate it every day.

[–] db0@lemmy.dbzer0.com 3 points 1 year ago (1 children)
[–] gigachad@sh.itjust.works 12 points 1 year ago (3 children)

We do geodata science and rely on some pretty specific C++ libraries that are only distributed via conda. While on unix-based systems it's possible to get some of them from other channels or even building them from source, we mostly have Windows machines in production where we are not that flexible. Docker is unfortunately no solution due to security concerns.

If you are asking why I hate it: It's bloated, uses more space than needed and it's rare I can reproduce an environment from the environment file without running into errors. Using it feels unintuitive, I still google command after years. It was very slow until recently, when the libmamba solver was finally integrated. Last but not least licensing is a pain in the ass.

[–] eager_eagle@lemmy.world 3 points 1 year ago

I share the same frustration trying to replicate an environment. I'm glad I can avoid it these days, the community needs a way out of the conda lock-in.

[–] db0@lemmy.dbzer0.com 3 points 1 year ago

Interesting. We use conda via micromamba for my own project, as it makes the install for end-users much easier when they can just run a shell script, to install python, cuda, and all the dependencies needed.

[–] rutrum@lm.paradisus.day 1 points 1 year ago (2 children)

I've been using micromamba/mamba and not had solving issues like I did with conda. Im glad conda integrated libmamba.

Question: why were docker containers deemed security risks?

[–] nickwitha_k@lemmy.sdf.org 2 points 1 year ago (1 children)

If Windows, it requires a VM and currently infosec is not keen on virtualization in the hands of users.

[–] BatmanAoD@programming.dev 3 points 1 year ago (1 children)

I'm no expert, but isn't running in a VM strictly better than running on raw metal from a security perspective? It's generally more locked down, and breaking out of the virtualization layer requires a separate security breach from gaining access to the running container.

[–] nickwitha_k@lemmy.sdf.org 2 points 1 year ago

I would think so as well. Possibly it's because a local VM is harder for them to monitor.

[–] gigachad@sh.itjust.works 1 points 1 year ago

Yes, mamba is a huge improvement. Regarding docker I can't really tell you as I'm not an infrastructure guy.

[–] beeng@discuss.tchncs.de 6 points 1 year ago (2 children)

Got toml file support yet? Then I'm happy to talk :)

[–] sugar_in_your_tea@sh.itjust.works 5 points 1 year ago (1 children)

Looks like it has basic support:

  • required-python = "..."
  • dependencies = [ ... ]

Once it gets dependency groups, I'll try it out. I'm currently using poetry, which works, but I'm always interested in better perf.

[–] eager_eagle@lemmy.world 4 points 1 year ago* (last edited 1 year ago) (2 children)

it already has dep groups; e.g.

uv add --optional staging pytest

then

uv sync --extra staging

to install / uninstall packages accordingly.

They have a --dev shorthand for dev dependencies, but it seems the dependency group PEP is not final, so there isn't a standardized way of doing this yet.

[–] beeng@discuss.tchncs.de 3 points 1 year ago (1 children)

Private PyPI too?

We're coming from poetry but it's slow and needs its own .venv, so a UV binary would be very nice.

[–] SwordInStone@lemmy.world 2 points 1 year ago (1 children)

yeah, it works with private pypi

[–] beeng@discuss.tchncs.de 3 points 1 year ago

I don't find it in the docs..how to set my PAT?

Oh cool, I'll definitely look into that.

And honestly, the one I need more is a test group for CI, for things like coverage reporting and whatnot. If I can get that and if having multiple package indexes works properly (i.e. it can check my private repo first, and then pypi), I can probably port our projects to uv, at which point it's an internal discussion instead of a technical one.

[–] eager_eagle@lemmy.world 4 points 1 year ago

they do, just use project management commands like uv + { add, remove, sync, lock, run }