For pantsbuild internals, how does that fetch its ...
# generalh
high-yak-85899
06/26/2025, 6:28 PMFor pantsbuild internals, how does that fetch its third party dependencies? If I set
[python-repos].indexesf
fast-nail-55400
06/26/2025, 6:33 PMI believe that is used mostly for user requirements. If you are using the Pants launcher ("scie-pants") to run Pants, it manages a separate Python and venv for Pants internals
fast-nail-55400
06/26/2025, 6:34 PMThe venv for Pants internals is built from a PEX downloaded from GitHub releases.
fast-nail-55400
06/26/2025, 6:35 PMIf you use the
[GLOBAL].pluginsh
high-yak-85899
06/26/2025, 6:36 PMNo plugins currently. We want to completely disable pypi access in our org. So I'm curious what will break when we do that. If it's built from a pex though, that's fine since it would come with everything and we can proxy github releases through our own servers.
f
fast-nail-55400
06/26/2025, 6:39 PMThe issue you may find is that Pants/Pex will want to rebuild a venv using a resolve's lockfile. If the lockfile refers to PyPI URLs, it will try to access PyPI at that moment.
fast-nail-55400
06/26/2025, 6:40 PMSo you will likely need to run a PyPI mirror of some sort and make sure the lockfile uses URLs pointing at that mirror.
fast-nail-55400
06/26/2025, 6:40 PM(Or provide some other way for Pex to gain access to wheels etc.)
3 Views