-
-
Notifications
You must be signed in to change notification settings - Fork 1.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
specifying repo for given package explicitly in Pipfile is ignored #2887
Comments
How can I keep temporary requirements files to better investigate this? |
Funny enough I am encountering this tonight. I am unsure if this is by design or not. I believe it could be a bug, not all pypi implementations offer pass through to regular pypi if the package cannot be found in its own index. It's causing a problem for me in docker where my private index is only available during runtime. A rundown of my workflow: My private packages are in my dev section, I have my private index defined as a source and the appropriate packages marked with private index. I install the regular packages during build and my dev/private package on first run. |
cc @techalchemy |
so this is a bit interesting but it could possibly be related to the package in question being a dependency of something else that is installed from the private index. We don't handle that particular scenario that intelligently in the current implementation |
I believe this issue is a duplicate of #2730. |
Hi @techalchemy, |
I was just about to submit a ticket about this same issue and saw this at the top. Interesting coincidence. This should probably be higher priority too as it's extremely insecure. If someone were to make a package with the same name as mine in PyPi, it could pull their package which will at best do the wrong thing and at worst infect my machine. |
Issue description
When specifying a specific repo for given package, it is ignored.
I have this in Pipfile.
It renders correctly to Pipfile.lock as
But when running
pipenv install -v
it installs fromother
.Expected result
mysqlclient is installed from
pypi
repo.Actual result
Steps to replicate
pipenv lock
pipenv install --verbose
(the following parts were redacted: PWD, username, URL of our repo and other packages from our repo)
$ pipenv --support
Pipenv version:
'2018.7.1'
Pipenv location:
'/home/***/.local/lib/python3.6/site-packages/pipenv'
Python location:
'/usr/bin/python3'
Other Python installations in
PATH
:2.7
:/usr/bin/python2.7
2.7
:/usr/bin/python2.7
3.6
:/usr/bin/python3.6m
3.6
:/usr/bin/python3.6
2.7.15
:/usr/bin/python
2.7.15
:/usr/bin/python2
3.6.5
:/usr/bin/python3
PEP 508 Information:
System environment variables:
LD_LIBRARY_PATH
LS_COLORS
LC_MEASUREMENT
LESSCLOSE
LC_PAPER
LC_MONETARY
XDG_MENU_PREFIX
LANG
GDM_LANG
DISPLAY
GTK_OVERLAY_SCROLLING
COLORTERM
XDG_VTNR
SSH_AUTH_SOCK
MANDATORY_PATH
GLADE_CATALOG_PATH
LC_NAME
XDG_SESSION_ID
XDG_GREETER_DATA_DIR
USER
GLADE_MODULE_PATH
DESKTOP_SESSION
GNOME_TERMINAL_SCREEN
DEFAULTS_PATH
QT_QPA_PLATFORMTHEME
PWD
HOME
SSH_AGENT_PID
QT_ACCESSIBILITY
XDG_SESSION_TYPE
https_proxy
XDG_DATA_DIRS
http_proxy
XDG_SESSION_DESKTOP
LC_ADDRESS
LC_NUMERIC
GLADE_PIXMAP_PATH
GTK_MODULES
CLUTTER_BACKEND
TERM
SHELL
VTE_VERSION
XDG_SEAT_PATH
socks_proxy
XDG_CURRENT_DESKTOP
GPG_AGENT_INFO
GNOME_TERMINAL_SERVICE
XDG_SEAT
SHLVL
LANGUAGE
LC_TELEPHONE
GDMSESSION
LOGNAME
DBUS_SESSION_BUS_ADDRESS
XDG_RUNTIME_DIR
XAUTHORITY
XDG_SESSION_PATH
XDG_CONFIG_DIRS
PATH
LC_IDENTIFICATION
ftp_proxy
SESSION_MANAGER
LESSOPEN
LC_TIME
OLDPWD
_
PYTHONDONTWRITEBYTECODE
PIP_PYTHON_PATH
Pipenv–specific environment variables:
Debug–specific environment variables:
PATH
:/home/***/.local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin
SHELL
:/bin/bash
LANG
:en_US.UTF-8
PWD
:/home/***/***
Contents of
Pipfile
('/home///Pipfile'):Contents of
Pipfile.lock
('/home///Pipfile.lock'):The text was updated successfully, but these errors were encountered: