Welcome!

The kernel problem with recent updates has been solved. Find the solution here

Important information
-- Required MX 15/16 Repository Changes
-- Information on torrent hosting changes
-- Information on MX15/16 GPG Keys
-- Spectre and Meltdown vulnerabilities

News
-- Introducing our new Website
-- MX Linux on social media: here

Current releases
-- MX-18.3 Point Release release info here
-- Migration Information to MX-18 here
-- antiX-17.4.1 release info here

New users
-- Please read this first, and don't forget to add system and hardware information to posts!
-- Here are the Forum Rules

REQUEST: Python packages frontend in MX Package Installer

For developer discussion on package requests
Post Reply
pearsimmon
Forum Regular
Forum Regular
Posts: 119
Joined: Sat Apr 06, 2019 12:23 pm

REQUEST: Python packages frontend in MX Package Installer

#1

Post by pearsimmon » Thu May 02, 2019 9:10 am

This may be a wrong forum section, but I thought it would be nice to integrate "python3-pip" packages just like Flatpaks. Currently, to get a program to work correctly, I had to go through such steps:

- install "python3-pip" package
- use "pip3" to install "setuptools" and "wheel"
- add the following to "~/.bashrc" so that installed programs can be run using terminal commands: export PATH=$PATH:~/.local/bin
- add "/home/(username)/.local/bin" to " secure_path="(...)" " using "sudo visudo" so that you can run these programs with "sudo" without having to specify the full path
- add a "pip install --upgrade" cron job for each package to automatically upgrade it

I suggest integrating such packages with MX Package Installer, so that they can be easily installed with GUI.

skidoo
Forum Guide
Forum Guide
Posts: 1442
Joined: Tue Sep 22, 2015 6:56 pm

Re: REQUEST: Python packages frontend in MX Package Installer

#2

Post by skidoo » Thu May 02, 2019 2:34 pm

"secure_path" exists for good reason.

Running unvetted pip-downloaded code with sudo permissions...
doesn't really fit the definition of "secure", eh? wǝrd
Last edited by skidoo on Thu May 02, 2019 2:42 pm, edited 1 time in total.

User avatar
Adrian
Forum Veteran
Forum Veteran
Posts: 9984
Joined: Wed Jul 12, 2006 1:42 am

Re: REQUEST: Python packages frontend in MX Package Installer

#3

Post by Adrian » Thu May 02, 2019 2:38 pm

Leaving aside possible security concerns, I think this is a bit too geeky to be added to MX Package Installer, I think some things are better left for CLI and python and python PIPs are better left to that.

skidoo
Forum Guide
Forum Guide
Posts: 1442
Joined: Tue Sep 22, 2015 6:56 pm

Re: REQUEST: Python packages frontend in MX Package Installer

#4

Post by skidoo » Thu May 02, 2019 2:51 pm

.
just to clarify, I would not single out pip. The same security concerns exist regarding pear-pip-cpan-and-others

a fresh f'rinstance: (Jan 2019) PHP PEAR Site hacked, official Package Manager replaced

(Nov 2018) Two security issues have been found and fixed this week...
plenty more ~~ websearch "jupyter notebook vulnerability|vulnerabilities" :: timespan: past year

pearsimmon
Forum Regular
Forum Regular
Posts: 119
Joined: Sat Apr 06, 2019 12:23 pm

Re: REQUEST: Python packages frontend in MX Package Installer

#5

Post by pearsimmon » Sun May 05, 2019 9:00 am

Thanks for your input, I will remove the custom secure path entry then.

Post Reply

Return to “Package Requests / Status”