Hi all! I have the following in a pants/pex lockfile:

{
          "artifacts": [
            {
              "algorithm": "sha256",
              "hash": "72264f1594e547c6ac986c694a0c7617b62bd45fb6e806d81ddb5c46b538dfec",
              "url": "git+<https://github.com/photocrowd/django-cursor-pagination@master>"
            }
          ],
          "project_name": "django-cursor-pagination",
          "requires_dists": [],
          "requires_python": null,
          "version": "0.2.1"
        },

For reasons, I’m using

pex3 lock export

to turn this into a pip-style requirements.txt with hashes. The corresponding output in the export file is:

django-cursor-pagination==0.2.1 \
  --hash=sha256:72264f1594e547c6ac986c694a0c7617b62bd45fb6e806d81ddb5c46b538dfec

which then pulls the file from our Artifactory index (which has a different hash) than the branch from the repo. Is this intentional on the part of pex to omit the URL? How can I tell Pex to include that part?

Friendly FYI, as our primary pex expert @enough-analyst-54434 is stepping down from pants support, we have a (revived) #C087V4P1T channel for questions specific for pex. I don’t believe this has been widely communicated yet.

Thanks! Should I paste this over there?

you’re of course still welcome to post pex questions here and we’ll do our best to answer them 🙂

Or I guess since you’ve thrown up the bat signal he might show up here?

I don’t think cross posting will be necessary as John could just as well reply in this thread here.. 🤷

It's not intentional @future-oxygen-10553, you'll need to file an issue. Even with that though, I think things still won't work. IIRC Pip won't work in hash checking mode for VCS, or it does, but with an inscrutable hash value (what to hash for a VCS url? There are many ways to go about it, Pex uses one approach).

Yeah, this is a transitive dependency for my project, fortunately the direct dep is an internal package, so I can ask them to update this 👍

URLs are weirder. Normally you'd run Pip with the hashed requirements file and the same --indexes you used when you created it. For a point of comparison, does pip-compile use wheel URLs or requirements.

I’m not sure what pip-compile does

Ok, just a sec. You're using the wrong tool here.

the more you know

@future-oxygen-10553 you want

pex3 venv create --lock my-lock [reqs] -d right-here.venv

,

Thank you so much! I should learn to just ask if there’s a way to do what I want before hacking something. The more I learn about pex, the more impressed I become ❤️

I'd say whenever you're facing a Rube Goldberg machine, step back and question alot.

Words to live by

Pants is a bad citizen here, you have to strip the comments. In terms of which Python, you should really read

--help

, but try

--python

.

👍