Review/Remove python-setuptools package dependency
Description:
I noticed that the certbot pacman package depends on python-setuptools
, and wondered whether it would be possible to drop it. I'd prefer to keep packaging tools like setuptools
or pip
off production servers.
- The PKGBUILD is already removing the
setuptools
dependency frominstall_requires
insetup.py
during theprepare()
step. -
python-setuptools
is still listed in PKGBUILD'sdepends
. The commit that added this says in its message: "Deprecate setuptools in favour of PEP-517 generation." - Upstream certbot lists
setuptools
ininstall_required
, but (after a quick perusal of the sources) I can't find any reference to it in the package code -- only insetup.py
.
Additional info:
- package version(s): 2.7.4-1
- config and/or log files etc.: N/A
- link to upstream bug report, if any: N/A
Additional Info
I moved python-setuptools
from depends
to makedepends
, and was still able to execute makepkg --check
successfully, with the same 996 passed/23 skipped tests, but this is probably inconclusive since I still have python-setuptools
installed and am not sure how well makepkg isolates.
I can also execute all tests in a venv with self-built acme/certbot (2.8.0.pre0 from today's upstream HEAD), with setuptools verified absent in the venv.