[Python-modules-team] Bug#771794: Bug#771794: pip silently removes/updates system provided python packages

[Daniel Kahn Gillmor]

On 12/02/2014 10:38 PM, Scott Kitterman wrote:
> On Tuesday, December 02, 2014 19:28:20 Donald Stufft wrote:
>> So what if Debian just patched python-pip so that it doesn’t remove the
>> files from /usr/lib (but it would remove files from /usr/local etc). This
>> would have the effect of pip not touching dpkg owned files which would
>> bring it in line with that easy_install does. /usr/local/lib takes
>> precedence over /usr/lib so it won’t break things for people actually
>> trying to install things to /usr/local.
>>
>> There *might* be some edge cases that occurs with having two versions of a
>> package on sys.path, but I can’t think of any offhand (and either way,
>> those edge cases already exist if someone does
>> ``apt-get install python-requests && pip install —upgrade requests`` and
>> then later on Debian releases a new update to python-requests since those
>> files that pip removed will get reinstalled in that situation.
>>
>> That should fix the immediate problem this bug addresses and then we can
>> figure out a longer term “real” fix in upstream pip that can go into
>> Jessie+1.
> 
> Speaking only for myself, I think that sounds reasonable.

fwiw, I also think this sounds reasonable.  The issue is mainly that pip
removes stuff from under dpkg's nose, and this would address that problem.

So, where do we get the patch from?

	--dkg

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 949 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/python-modules-team/attachments/20141202/05a3f5e3/attachment-0001.sig>