Workshop on creating reproducible Python wheels and dependency mangement in your Python project

kushaldas commented 3 years ago

In this workshop we will learn how to deal your project dependencies in a (hopefully better) secure way along with reproducible wheels. We use the same technologies against side-channel attacks related to dependencies in SecureDrop project.

We will learn to:

Maintain the dependencies pinned using pip-tools
build reproducible wheels
Maintaining your own repository of wheels
Installing dependencies from your own repository for your project

When we say Reproducible wheels, we mean that in a given environment, you can build the exact same Python wheel from the given source/dependencies.

The original work on reproducible wheels was made by @redshiftzero,

When?

1500 UTC 17th July

The session will be between 2 to 3 hours long.

Please do a comment below along with the Linux distribution name you will use for the workshop.

Where?

The live session URL will be on Twitch https://twitch.com/whykushal

Please create a Twitch account so that you can join the chat and ask questions during the session.

If you see any error, please paste them into https://share.riseup.net and then share the link with us in the chat. We will help you to debug, we may ask you to paste the full code file also.

Who can attend?

Anyone. If you are new to Python programming, you can also join in.

What is required for the workshop?

Python version: 3.7+
Linux

During the session I will be using a Debian Buster system with Python 3.7.

Any modern Linux distribution (people with Mac/Windows can also follow, just that I don't have enough Mac/Windows expertise to help you with the initial setup). WSL should work smoothly.
Stable internet connection on the same system (we will be downloading things and build during the workshop).
Install git and Python development files.
- apt install python3-dev python3-venv git # for Ubuntu
- dnf install python3-devel git # for Fedora

Things one learn before the session

If you are new to Python, you can read Python for you and me book

If you have more questions

Please ask them in a comment below, we will reply back.

Schubisu commented 3 years ago

@kushaldas that sounds great! I would love to attend but will not be available that day. Not sure if you maybe want to repeat this workshop after mid August ;) otherwise I will have to refer to the recording, if available.