Does https://pypi.org/project/pypi2nix/ work?

Now that pip supports pinning with a sha (I say “now that”, this was added years ago but it wasn’t always thus), it seems it should be trivial to map onto the Nix model.

I have been working with poetry and playing with poetry2nix so haven’t tried raw pip requirements files with Nix.

If I were a better engineer, I'd have recorded a list of all the things I tried, but I didn't. Most of them ended in the substring "2nix" but the names kind of blur together so I can't definitively say I tried it. I have some free time on the 23rd and may see if pypi2nix works with the project or not, and file a bug if it doesn't.

In all fairness, this is impossible with or without nix.

I've had some success with Poetry. But then I ran into programs that invoke pip during startup...

Could you please elaborate more, for a person who has never used poetry?

Yeah the situation with Python is kind of crap to begin with. The main problem with requirements.txt is that it doesn't lock the SHAsums of the packages being depended on.

The Python ecosystem also doesn't seem to have a sensible solution for dependency declaration in general. It's kind of remarkable that anything works at all in Python land, it's a lot of "let's hope it works often enough". To be fair it does work out a lot of the time, but when that fails you end up coming to people like me.

I should do some research and see if I can figure out the best way to do this in Python, but I don't use Python at all personally or professionally.

What would you consider a sensible solution? What about * Pip-tools(requirements.in + requirements.txt) * Poetry (pyproject.toml+poetry.lock) * Pipenv(Pipfile+Pipfile.lock)

Those and others enable easy declaration of direct dependencies and compile (resolve) a lock file of the actual dependency graph with hashes. Those tools have their issues and idiosyncrasies, but the dependency declaration aspect seems sensible and functional.

PEP 518 has been around for a long time. All of the projects must be running pyproject.toml + poetry.lock. Like really, it's the new modern standard, which solves a lot of headaches. The configs, the Python version, the dependencies, are all nicely crammed together. There's even a thing poetry2nix, which seems pretty well supported.