py.lockfile
Install
pip install py.lockfile2
py.lockfile is a tool for downloading of python packages for various OS, CPU and python versions.
Motivation
Python projects managed by pipenv, poetry or pdm use lock files for freeze packages in specific version. It is very useful for stability of whole project. However, for installing these freeze packages, we have to use mentioned package managers, which bring many unwanted dependencies. It is uncomfortable especially for building of docker containers.
This tool takes Pipfile.lock/poetry.lock/pdm.lock file and downloads all required packages
(for specific OS, CPU and python version) to target directory.
After that we can install them by simple pip.
The simple example of usage
> py.lockfile -s tests/poetry.lock -t wheels/
📦 cffi 1.15.1 cffi-1.15.1-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
> pip install wheels/*
cffi-1.15.1-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
Advance options
The tool accepts many arguments, the most useable are --python-version and --platform.
They can help us to download packages for different python version or OS platform.
Get the correct value of --platform attribute for your system, can be
complicated. This command can help py_lockfile --help | grep 'Your current platform'
> py.lockfile --help
usage: py_lockfile [-h] [-s SOURCEFILE] [-t TARGET] [-g GROUP] [-p PYTHON_VERSION] [--platform PLATFORM] [--python-implementation {cp,ip,pp,jy}] [--ignore-missing] [--ignore-hash] [--no-binary] [--dryrun] [--no-color]
Python package downloader.
---------------------------------
This is a simple tool for download python packages managed by lock file.
Repository credentials can be set by environment variables
(PYLF_<NAME>_USERNAME, PYLF_<NAME>_PASSWORD and PYLF_<NAME>_URL).
Supported:
* Pipfile.lock - Pipenv.
* poetry.lock - Poetry, the repository credentials are automatically loaded
from ~/.config/pypoetry/auth.toml.
* pdm.lock - PDM, the repository credentials are automatically loaded from
pyproject.toml
optional arguments:
-h, --help show this help message and exit
-s SOURCEFILE, --sourcefile SOURCEFILE
source file (e.g. Pipfile.lock, poetry.lock or pdm.lock)
-t TARGET, --target TARGET
Download folder (default: ./wheels)
-g GROUP, --group GROUP
Append optional group of packages (e.g. dev)
-p PYTHON_VERSION, --python-version PYTHON_VERSION
Download packages for python version (default: 3.9.5).
--platform PLATFORM Download packages for platform (default: manylinux_2_28_x86_64).
--python-implementation {cp,ip,pp,jy}
Download packages for python implementation (default: cp).
--ignore-missing Skip missing packages.
--ignore-hash Ignore package hash checking.
--no-binary Download only source packages.
--dryrun Dry run. No download will be performed.
--no-color Disable color output.
SOURCEFILE:
Automatically try to find supported files in current folder.
PLATFORM:
Your current platform is 'manylinux_2_28_x86_64'
See more https://peps.python.org/pep-0491/#file-name-convention
e.g.:
* macosx_10_9_x86_64
* win_amd64
* manylinux_2_17_x86_64 # glib linux systems (RHEL based system) https://peps.python.org/pep-0600/
* musllinux_1_1_x86_64 # musl linux systems (AlpineLinux) https://peps.python.org/pep-0656/
PYTHON_IMPLEMENTATION:
* 'cp' - CPython
* 'pp' - Pypy
* 'ip' - IronPython
* 'jy' - Jython
As default values of --python-version, --platform and --python-implementation are set your current python configuration.
However, you can download packages for different configuration as well.
> py.lockfile -s tests/poetry.lock -t wheels/ --python-version 2.7 --platform win_amd64
📦 cffi 1.15.1 cffi-1.15.1-cp27-cp27m-win_amd64.whl
Download packages from a private repository
Credentials are automatically loaded from pypoetry/auth.toml, pyproject.toml
or we can overwrite them by environment variables.
PYLF_<REPO_NAME>_USERNAME=user PYLF_<REPO_NAME>_PASSWORD=password py.lockfile ...
Optionally, we can set PYLF_<REPO_NAME>_URL as well, for appending custom pypi
entry point.
Metadata
Release files for py.lockfile2 0.6.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| py_lockfile2-0.6.0.tar.gz | 11.1 kB | Without provenance | Details for py_lockfile2-0.6.0.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| py_lockfile2-0.6.0-py3-none-any.whl | Python 3 | none | any | Details for py_lockfile2-0.6.0-py3-none-any.whl |
Total release size: 22.4 kB
Release files / py_lockfile2-0.6.0.tar.gz
| Download URL | py_lockfile2-0.6.0.tar.gz |
|---|---|
| Size | 11.1 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
d632fd4d0b69727e52eba02b1b81306069ce45819c626239070f3678f39f7eae
|
|
BLAKE2b-256 checksum How to use checksums |
2e6af520eb04afe374e4b27b9bff1c5dca536dd6f50043e58005830183484170
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
poetry/2.0.1 CPython/3.9.21 Linux/6.8.0-1021-azure
|
Release files / py_lockfile2-0.6.0-py3-none-any.whl
| Download URL | py_lockfile2-0.6.0-py3-none-any.whl |
|---|---|
| Size | 11.4 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
90f01190d3c277a42fd808baf54764d5d2ccfdd7a7e0a711831d5ac6ec34a008
|
|
BLAKE2b-256 checksum How to use checksums |
9402ebe3a7fc9095102b595dccdd5f3990234a5f2d51ed975f39edc9e0aeab0d
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
poetry/2.0.1 CPython/3.9.21 Linux/6.8.0-1021-azure
|
Security for py.lockfile2 0.6.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.