Re: /usr/bin/tqdm in filesystem NOT owned by any package? (python tqdm)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



All,

I would like to defend Python a little bit here.

On Sunday, August 11th, 2024 at 02:48, David C. Rankin <drankinatty@xxxxxxxxx> wrote:
> I hate that insecure python software supply-chain.

In my opinion, it is the responsibility of the system administrator to avoid
installing software other than by using the package manager. Using `pip
install` is only one such installation method; one could have also just
unpacked an archive into /usr/bin, or created their own shell script there --
all with the same result, but none of the Python's fault.

Arguably, Python should not even offer this option. However, at the time Python
was created, this was pretty much normal behaviour (e.g. Perl and Tex package
managers would eagerly install packages globally), and removing it now would
probably be extremely tedious. However, Python already improves on that by
allowing to mark an environment as "externally managed"[1], which is what the
error message is about.

Finally, if you would like to find all files that are not installed by Pacman,
consider trying lostfiles[2].

Best regards,
--
Edward

[1] https://packaging.python.org/en/latest/specifications/externally-managed-environments/#externally-managed-environments
[2] https://archlinux.org/packages/extra/any/lostfiles/

Attachment: publickey - edward.toroshchyn@pm.me - 0xEDCD8534.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature


[Index of Archives]     [Linux Wireless]     [Linux Kernel]     [ATH6KL]     [Linux Bluetooth]     [Linux Netdev]     [Kernel Newbies]     [Share Photos]     [IDE]     [Security]     [Git]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux ATA RAID]     [Samba]     [Device Mapper]

  Powered by Linux