Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Check if tcl/tk files/dirs exist before copying #931

Closed
wants to merge 1 commit into from

Conversation

nodirt
Copy link

@nodirt nodirt commented Jun 8, 2016

Copying fails if tcl/tk files are not there. This happens in our setup,
where Python 2.7.6 is used.
Check if they exist before copying.

Copying fails if tcl/tk files are not there. This happens in our setup,
where Python 2.7.6 is used.
Check if they exist before copying.
@nodirt
Copy link
Author

nodirt commented Jun 8, 2016

cc @techtonik

@techtonik
Copy link

How come that they are not there? I'd be against workarounds for hacked installations unless there is a really good reason.

Also, https://www.cvedetails.com/vulnerability-list/vendor_id-10210/product_id-18230/version_id-160977/Python-Python-2.7.6.html

@nodirt
Copy link
Author

nodirt commented Jun 9, 2016

We don't use tcl/tk in our installation and prefer to deploy it to thousands of our machines

@techtonik
Copy link

@nodirt I am interested to use the socket vulnerabilities on thousands of your machines. I don't mind against the change, especially if PyPA group gets some funding as a result of incorporating this change (because I don't have write access). Just curious what do you do with Python 2.7.6 there?

@carsonyl
Copy link

I support this change. It's necessary to check that the tcl/tk directories being copied actually exist, because they're an optional install item. In my case, I haven't installed it on my Python 2.7.11 and 3.5.1, and my Tox stopped working due to the change in #888.

@techtonik
Copy link

It's necessary to check that the tcl/tk directories being copied actually exist, because they're an optional install item

@rbcarson good point.

@nodirt
Copy link
Author

nodirt commented Jun 10, 2016

@techtonik you are right, we should update Python. Turned out it has nothing to do with this PR. Even with the latest version we still prefer not to deploy TCL/TK.

@techtonik
Copy link

techtonik commented Jun 10, 2016

I see that even my fix for Python 3.3- #926 was not merged, so unless somebody finds a way to sponsor virtualenv development, it may not be fixed any time soon.

@nodirt
Copy link
Author

nodirt commented Jun 13, 2016

@dstufft it's been a week. Please take a look. Alternatively, please take a look at #933
We can't update to the new virtualenv because of this

@Ivoz
Copy link

Ivoz commented Aug 1, 2016

This change should be obsoleted by #937, cheers

@Ivoz Ivoz closed this Aug 1, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants