Re: pkg/53560: devel/py-pluggy does not build for PYTHON_VERSION>27

[Joerg Sonnenberger <joerg%bec.de@localhost>]

On Wed, Aug 29, 2018 at 04:50:01AM +0000, Frédéric Fauberteau wrote:
> The following reply was made to PR pkg/53560; it has been noted by GNATS.
> 
> From: =?UTF-8?Q?Fr=C3=A9d=C3=A9ric_Fauberteau?= <triaxx%NetBSD.org@localhost>
> To: gnats-bugs%netbsd.org@localhost
> Cc: pkg-manager%netbsd.org@localhost, gnats-admin%netbsd.org@localhost, pkgsrc-bugs%netbsd.org@localhost
> Subject: Re: pkg/53560: devel/py-pluggy does not build for PYTHON_VERSION>27
> Date: Wed, 29 Aug 2018 06:45:34 +0200
> 
>  Le 2018-08-29 06:30, Thomas Klausner a écrit :
>  > The following reply was made to PR pkg/53560; it has been noted by 
>  > GNATS.
>  > 
>  > From: Thomas Klausner <wiz%NetBSD.org@localhost>
>  > To: NetBSD bugtracking <gnats-bugs%NetBSD.org@localhost>
>  > Cc:
>  > Subject: Re: pkg/53560: devel/py-pluggy does not build for 
>  > PYTHON_VERSION>27
>  > Date: Wed, 29 Aug 2018 06:26:44 +0200
>  > 
>  >  On Tue, Aug 28, 2018 at 11:16:57PM +0200, Fr�d�ric Fauberteau wrote:
>  >  > I totally agree with that. Actually, py-setuptools_scm should be 
>  > fetched by
>  >  > the setup.py script from the egg.mk framework and should not be 
>  > added as a
>  >  > dependency (even a build dependency) of py-pluggy.
>  > 
>  >  No. pkgsrc should provide all necessary dependencies to build a
>  >  package. Fetching stuff from the internet during the build should not
>  >  be necessary.
>  >   Thomas
>  
>  ok, I just did not understand the behavior of lang/python/egg.mk.

The automatic fetching is a bug in setuptools I haven't had a chance to
remove yet. Why people find this kind of remote code execution bugs
acceptable is beyond me, but this and using pip to automatically fetch
dependencies is whole inacceptable.

Joerg