setting private repo for pip require password for the regular pack





.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ height:90px;width:728px;box-sizing:border-box;
}







0















I use jfrog as private repository for python packages we create in the company, I config the .pip/pip.conf and .pypirc files and everything works fine in the installation.



the problem starts when I try to install regular packages, it always ask me for username and password (its ok for the private packages), there is any way to configure pip to ask for password only for the private packages?



in the pipeline i use the -i option of pip and pass the username and password:



pip3 install -r requirements.txt -i "https://<username>:<password>@<repository-url>"


but in the local machine, this is not a good option.










share|improve this question























  • You should consider using private/public key pair to handle the password requirements.

    – l'L'l
    Jan 3 at 7:16











  • how do I use private/public key for this problem?

    – מנדי ניימרק
    Jan 3 at 8:17











  • It's the server that asks for password, not pip. Also, the auth challenge is initiated early (pip queries all indexes for available dists for all packages), so you won't be able to avoid that. Another thing is that you can't securely store the credentials on the local machine (either pip.conf or enter manually), this is why I don't require passwords on the local repositories at all; they are only available via VPN, but without any additional auth.

    – hoefling
    Jan 4 at 0:45


















0















I use jfrog as private repository for python packages we create in the company, I config the .pip/pip.conf and .pypirc files and everything works fine in the installation.



the problem starts when I try to install regular packages, it always ask me for username and password (its ok for the private packages), there is any way to configure pip to ask for password only for the private packages?



in the pipeline i use the -i option of pip and pass the username and password:



pip3 install -r requirements.txt -i "https://<username>:<password>@<repository-url>"


but in the local machine, this is not a good option.










share|improve this question























  • You should consider using private/public key pair to handle the password requirements.

    – l'L'l
    Jan 3 at 7:16











  • how do I use private/public key for this problem?

    – מנדי ניימרק
    Jan 3 at 8:17











  • It's the server that asks for password, not pip. Also, the auth challenge is initiated early (pip queries all indexes for available dists for all packages), so you won't be able to avoid that. Another thing is that you can't securely store the credentials on the local machine (either pip.conf or enter manually), this is why I don't require passwords on the local repositories at all; they are only available via VPN, but without any additional auth.

    – hoefling
    Jan 4 at 0:45














0












0








0








I use jfrog as private repository for python packages we create in the company, I config the .pip/pip.conf and .pypirc files and everything works fine in the installation.



the problem starts when I try to install regular packages, it always ask me for username and password (its ok for the private packages), there is any way to configure pip to ask for password only for the private packages?



in the pipeline i use the -i option of pip and pass the username and password:



pip3 install -r requirements.txt -i "https://<username>:<password>@<repository-url>"


but in the local machine, this is not a good option.










share|improve this question














I use jfrog as private repository for python packages we create in the company, I config the .pip/pip.conf and .pypirc files and everything works fine in the installation.



the problem starts when I try to install regular packages, it always ask me for username and password (its ok for the private packages), there is any way to configure pip to ask for password only for the private packages?



in the pipeline i use the -i option of pip and pass the username and password:



pip3 install -r requirements.txt -i "https://<username>:<password>@<repository-url>"


but in the local machine, this is not a good option.







python pip repository pypi






share|improve this question













share|improve this question











share|improve this question




share|improve this question










asked Jan 3 at 7:09









מנדי ניימרקמנדי ניימרק

82




82













  • You should consider using private/public key pair to handle the password requirements.

    – l'L'l
    Jan 3 at 7:16











  • how do I use private/public key for this problem?

    – מנדי ניימרק
    Jan 3 at 8:17











  • It's the server that asks for password, not pip. Also, the auth challenge is initiated early (pip queries all indexes for available dists for all packages), so you won't be able to avoid that. Another thing is that you can't securely store the credentials on the local machine (either pip.conf or enter manually), this is why I don't require passwords on the local repositories at all; they are only available via VPN, but without any additional auth.

    – hoefling
    Jan 4 at 0:45



















  • You should consider using private/public key pair to handle the password requirements.

    – l'L'l
    Jan 3 at 7:16











  • how do I use private/public key for this problem?

    – מנדי ניימרק
    Jan 3 at 8:17











  • It's the server that asks for password, not pip. Also, the auth challenge is initiated early (pip queries all indexes for available dists for all packages), so you won't be able to avoid that. Another thing is that you can't securely store the credentials on the local machine (either pip.conf or enter manually), this is why I don't require passwords on the local repositories at all; they are only available via VPN, but without any additional auth.

    – hoefling
    Jan 4 at 0:45

















You should consider using private/public key pair to handle the password requirements.

– l'L'l
Jan 3 at 7:16





You should consider using private/public key pair to handle the password requirements.

– l'L'l
Jan 3 at 7:16













how do I use private/public key for this problem?

– מנדי ניימרק
Jan 3 at 8:17





how do I use private/public key for this problem?

– מנדי ניימרק
Jan 3 at 8:17













It's the server that asks for password, not pip. Also, the auth challenge is initiated early (pip queries all indexes for available dists for all packages), so you won't be able to avoid that. Another thing is that you can't securely store the credentials on the local machine (either pip.conf or enter manually), this is why I don't require passwords on the local repositories at all; they are only available via VPN, but without any additional auth.

– hoefling
Jan 4 at 0:45





It's the server that asks for password, not pip. Also, the auth challenge is initiated early (pip queries all indexes for available dists for all packages), so you won't be able to avoid that. Another thing is that you can't securely store the credentials on the local machine (either pip.conf or enter manually), this is why I don't require passwords on the local repositories at all; they are only available via VPN, but without any additional auth.

– hoefling
Jan 4 at 0:45












0






active

oldest

votes












Your Answer






StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");

StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});














draft saved

draft discarded


















StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f54017791%2fsetting-private-repo-for-pip-require-password-for-the-regular-pack%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown

























0






active

oldest

votes








0






active

oldest

votes









active

oldest

votes






active

oldest

votes
















draft saved

draft discarded




















































Thanks for contributing an answer to Stack Overflow!


  • Please be sure to answer the question. Provide details and share your research!

But avoid



  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.


To learn more, see our tips on writing great answers.




draft saved


draft discarded














StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f54017791%2fsetting-private-repo-for-pip-require-password-for-the-regular-pack%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







Popular posts from this blog

Can a sorcerer learn a 5th-level spell early by creating spell slots using the Font of Magic feature?

Does disintegrating a polymorphed enemy still kill it after the 2018 errata?

A Topological Invariant for $pi_3(U(n))$