Skip to main content

Pop-Build

Intro

Pop-Build is the single binary builder for pop projects. While it is written with the intention of supporting pop projects it can be used with any python project.

Getting Started

The main idea behind Pop-Build is to make building python projects as a single frozen binary easy. Therefore using pop-build just takes a few steps.

So we can start with an existing python application, this quickstart will assume that your python project has a standard setup.py and requirements.txt.

The only other thing that most projects will need is a run.py.

The run.py

Since Pop-Build creates a single binary, it needs a single entry point. This entry point is defined in the file run.py. This is just a simple python script that is used to start your application. The contents of the run.py is typically the same code that is used in your setuptools entry point, or the startup script used in distutils. There is nothing special about the run.py, pop-build just needs an entry point that is clean python.

A typical run.py will look like this:

import myapp

def main():
    myapp.start()

main()

Just some good old python! If you are building a pop project then pop-seed will create the run.py for you.

Run Pop-Build

Thats right! All you need outside of a run.py your python project likely already has! Pop-Build uses the setup.py and requirements.txt files to build the environment used.

So assuming you have a standard python project defined, all you need to do is cd to that directory and run pop-build, in this example we will assume the application is called foo:

pop-build -n foo

This will kick off the process and the resulting binary will be placed in dist/foo

Now that the binary is available it can be directly called.

What Happened?

Pop-Build starts with the version of python that you exceuted pop-build with. This python is the python that will be embeded in your binary. Next it creates a venv for your application. With the venv in hand, Pop-Build populates it. The venv is populated with all of the deps that are defined as requrements for the main application, including the application itself.

Now that the venv has been set up, we tell PyInstaller to create a binary from the run.py. But PyInstaller is all about building a binary from all of the imports that come from the run.py. This is done to build a small binary and include only the most required code. But this is not the case for many applications, it is typical that things are late imported and the application assumes that a larger python environment is available. It is also typical that extra files are needed by the application and are typically added via the setup.py.

Instead of following the imports, Pop-Build bundles the venv into the binary created by PyInstaller. This means that you have a strong assurance that the full, needed environment is available. This does make a larger binary, but it allows for a much easier and reliable build. Also, the binary is typically not much bigger.

Using the Build Addon

Many python projects require C libraries. How is it then, that the dynamic libs can be added to the final binary? Pop-Build has an answer to this.

When running pop-build we can use a configuration file. This file allows for any option that would be passed on the cli to be defined, but also to define the routines for external builds.

A Pop-Build config, that as an example, adds the library libsodium looks like this:

build:
  libsodium:
    make:
        - wget https://download.libsodium.org/libsodium/releases/LATEST.tar.gz
        - tar xvf LATEST.tar.gz
        - cd libsodium-stable && ./configure && make
    src: libsodium-stable/src/libsodium/.libs/libsodium.so
    dest: lib/

This example shows how we can define a library to download and build, then the src which is relative to the root of the build and the dest which is relative to the root of the venv.

The src can be a directory or a list of files, the dest is just a single directory to store the files.

Metadata

Release files for pop-build 2

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for pop-build 2
File Size Uploaded Provenance Actions
pop-build-2.tar.gz 13.0 kB Without provenance Details for pop-build-2.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for pop-build 2
File Interpreter ABI Platform Actions
pop_build-2-py3-none-any.whl Python 3 none any Details for pop_build-2-py3-none-any.whl

Total release size: 29.8 kB

Release files / pop-build-2.tar.gz

Download URL pop-build-2.tar.gz
Size 13.0 kB
Tags Source
SHA-256 checksum
How to use checksums
3bcd3561805fbda24413587879c61c1e07fb957913fb3e759ae88ea7a14ef398
BLAKE2b-256 checksum
How to use checksums
086c02fbbb2513287c212c80ae83935abc1709fafdf17b72ec7463078a6d49e7
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/2.0.0 pkginfo/1.5.0.1 requests/2.23.0 setuptools/46.0.0 requests-toolbelt/0.9.1 tqdm/4.43.0 CPython/3.8.2

Release files / pop_build-2-py3-none-any.whl

Download URL pop_build-2-py3-none-any.whl
Size 16.8 kB
Tags Python 3
SHA-256 checksum
How to use checksums
2f5547470c60c3add9e4a9902163443275fcb51ef3ed0705368aaf66b6bf0cb2
BLAKE2b-256 checksum
How to use checksums
5d8cb13b0e4d0bca16c5d4ca6de42736a23c13fee6e68cec9e76d285db31ce89
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/2.0.0 pkginfo/1.5.0.1 requests/2.23.0 setuptools/46.0.0 requests-toolbelt/0.9.1 tqdm/4.43.0 CPython/3.8.2

Security for pop-build 2

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page