From 670786ac061f2aa982c1e68a0bb07494cb9b4b32 Mon Sep 17 00:00:00 2001 From: redshiftzero Date: Tue, 31 Mar 2020 15:58:57 -0400 Subject: [PATCH] securedrop-log build: add `--ignore-installed` and `--no-deps` `--ignore-installed` ensures that every dependency in build-requirements.txt will be installed. `--no-deps` provides a guard against "installing anything not explicitly listed" [0] [0] https://pip.readthedocs.io/en/stable/user_guide/#pinned-version-numbers --- securedrop-log/debian/rules | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/securedrop-log/debian/rules b/securedrop-log/debian/rules index a380b52f..a9eba8a2 100755 --- a/securedrop-log/debian/rules +++ b/securedrop-log/debian/rules @@ -1,7 +1,17 @@ #!/usr/bin/make -f %: - dh $@ --with python-virtualenv --python /usr/bin/python3 --setuptools --extra-pip-arg "--no-deps" --index-url https://pypi.securedrop.org/simple --requirements build-requirements.txt + dh $@ --with python-virtualenv + +override_dh_virtualenv: + dh_virtualenv \ + --python /usr/bin/python3 \ + --setuptools \ + --index-url https://pypi.securedrop.org/simple \ + --extra-pip-arg "--ignore-installed" \ + --extra-pip-arg "--no-deps" \ + --extra-pip-arg "--no-cache-dir" \ + --requirements build-requirements.txt override_dh_strip_nondeterminism: find ./debian/ -type f -name '*.pyc' -delete