Skip to content

Feature/get pip workaround

Dominic Kempf requested to merge feature/get-pip-workaround into master

This is my new tackle of the old virtualenv/pip problem on debianish systems.

It downloads the get-pip script from https://bootstrap.pypa.io/get-pip.py. Instead of whether the problem is actually existent, it always applies this solution. One might think of some sort of security protection (executing some binary blob from the internet sounds evil). I can think of the following solutions:

  • Compute a MD5 checksum of the script and only use a downloaded script with different checksum if a variable ALWAYS_TRUST_GET_PIP is set, throw an error otherwise. Con: You need to update the checksum once in a while.
  • Read a variable LOCAL_GET_PIP that people may use to control their version of the get-pip script.

This fixes #14 (closed)

Merge request reports