Mailing-List: contact bloodhound-dev-help@incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: bloodhound-dev@incubator.apache.org
Received-SPF: pass (nike.apache.org: domain of gary.martin@wandisco.com
 designates 74.125.83.47 as permitted sender)
Message-ID: <503517A1.5070204@wandisco.com>
Date: Wed, 22 Aug 2012 18:32:17 +0100
From: Gary Martin <gary.martin@wandisco.com>
User-Agent: Mozilla/5.0 (X11; Linux x86_64;
 rv:14.0) Gecko/20120714 Thunderbird/14.0
MIME-Version: 1.0
To: bloodhound-dev@incubator.apache.org
Subject: Re: Unable to install bloodhound from svn, pip install fails
References: <alpine.DEB.2.00.1208152337430.15473@urchin.earth.li>
 <5543069712674095012@unknownmsgid>
 <CAKoya90mdR5jv2x7LLbRjvXnJadGWJk=EaPAkSojUuuXbSjTqA@mail.gmail.com>
 <CAGMZAuMBBOszEJum4sGLdLWuz72E3o=ZYsD==dzajQffh6WuwQ@mail.gmail.com>
 <CAGMZAuP_7sSzaWiU4-=rzVM0OkTSqRjdfKQaJPJTn1jQOjC-jA@mail.gmail.com>
 <5034F385.5010403@wandisco.com>
 <CAGMZAuMPcE=rCfdfo9NsyrSepAJxtUGqYtx-n53sevFojB4g4Q@mail.gmail.com>
In-Reply-To: 
 <CAGMZAuMPcE=rCfdfo9NsyrSepAJxtUGqYtx-n53sevFojB4g4Q@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit


On 08/22/2012 05:36 PM, Olemis Lang wrote:
>    - TracPermRedirect is not hosted in PyPI

Looks like it is there to me.

>    - latest version of TracAccountManagerPlugin in
>      there is 0.2.1dev-r4679 whereas latest in
>      t-h.o_shadow repository is 2.0 > r10000 .
>      Besides it seems to me that sdist package
>      @ PyPI is not built correctly .

Yes, I spotted that it is old and I was not recommending installing 
direct from pypi. We want much newer versions than that.

> IMO we should have a small package index (in ASF repository ?) in
> order to provide alternate download links (e.g. PyPI , Bitbucket ,
> ...) to handle situations like this .

A local ASF cheeseshop might be interesting, although I don't know 
whether it is something that would be difficult to argue for. I don't 
like the idea of vendor branching all the dependencies unless we require 
big changes that make it essential.

What I would really like is for all of the dependencies to be GPG signed 
as well, and for there to be a mechanism to check that this is the case 
during the installation.

Cheers,
     Gary