Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add package argon2-cffi (dependency of Jupyter notebook) #31279

Closed
mkoeppe opened this issue Jan 22, 2021 · 18 comments
Closed

Add package argon2-cffi (dependency of Jupyter notebook) #31279

mkoeppe opened this issue Jan 22, 2021 · 18 comments

Comments

@mkoeppe
Copy link
Contributor

mkoeppe commented Jan 22, 2021

This is an install-requires of notebook.

In #26919 we did not add it, but if we let Python dependencies play out (for example as in #30913), it gets pulled in by sagelib via ipywidgets (see also #31278).

CC: @jcamp0x2a @slel @kcrisman @dimpase @jhpalmieri @tobiasdiez

Component: packages: standard

Author: Matthias Koeppe

Branch: 45e5cd2

Reviewer: Jonathan Kliem

Issue created by migration from https://trac.sagemath.org/ticket/31279

@mkoeppe mkoeppe added this to the sage-9.3 milestone Jan 22, 2021
@mkoeppe
Copy link
Contributor Author

mkoeppe commented Jan 22, 2021

Branch: u/mkoeppe/add_package_argon2_cffi

@mkoeppe

This comment has been minimized.

@mkoeppe
Copy link
Contributor Author

mkoeppe commented Jan 22, 2021

Author: Matthias Koeppe

@mkoeppe
Copy link
Contributor Author

mkoeppe commented Jan 22, 2021

New commits:

f4273b7build/pkgs/argon2_cffi: New
3cec11bbuild/pkgs/notebook/dependencies: Add argon2_cffi

@mkoeppe
Copy link
Contributor Author

mkoeppe commented Jan 22, 2021

Commit: 3cec11b

@mkoeppe mkoeppe changed the title Add package argon2-cffi Add package argon2-cffi (dependency of Jupyter notebook) Jan 22, 2021
@jhpalmieri
Copy link
Member

comment:5

I don't understand this ticket. If I build Sage and run the notebook, argon-cffi is not installed anywhere, as far as I can tell. What am I missing?

@mkoeppe
Copy link
Contributor Author

mkoeppe commented Feb 8, 2021

comment:6

We install all packages using pip install --no-deps (see build/bin/sage-pip-install), so dependencies that the package declares as install-requires are not automatically installed. As a result, I assume some feature of the Jupyter notebook must be unavailable; but I do not know what exactly.

@jhpalmieri
Copy link
Member

comment:7

argon2-cffi does something with password hashing, and I don't know if it's really necessary. I don't know enough about the security of the Jupyter notebook, or how argon2-cffi would help, to make a decision.

@mkoeppe
Copy link
Contributor Author

mkoeppe commented Feb 8, 2021

@kliem
Copy link
Contributor

kliem commented Feb 11, 2021

comment:9

We need to set ARGON2_CFFI_USE_SSE2 to 0 in case of SAGE_FAT_BINARY.

https://argon2-cffi.readthedocs.io/en/stable/installation.html

@kliem
Copy link
Contributor

kliem commented Feb 11, 2021

Reviewer: Jonathan Kliem

@sagetrac-git
Copy link
Mannequin

sagetrac-git mannequin commented Feb 11, 2021

Branch pushed to git repo; I updated commit sha1. New commits:

45e5cd2build/pkgs/argon2_cffi/spkg-install.in: Handle SAGE_FAT_BINARY

@sagetrac-git
Copy link
Mannequin

sagetrac-git mannequin commented Feb 11, 2021

Changed commit from 3cec11b to 45e5cd2

@kliem
Copy link
Contributor

kliem commented Feb 11, 2021

comment:13

LGTM.

@mkoeppe
Copy link
Contributor Author

mkoeppe commented Feb 11, 2021

comment:14

Thank you!

@vbraun
Copy link
Member

vbraun commented Mar 1, 2021

Changed branch from u/mkoeppe/add_package_argon2_cffi to 45e5cd2

@mkoeppe
Copy link
Contributor Author

mkoeppe commented Mar 1, 2021

comment:16

Follow up in #31441

@mkoeppe
Copy link
Contributor Author

mkoeppe commented Mar 1, 2021

Changed commit from 45e5cd2 to none

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

4 participants