Pip installed wheels are not reproducible currently

[kanavin]

Description

Pip installed wheels are not reproducible currently. The direct_url
files encode an installation path and the installed wheels compile
the python files at their location, not their final install location
which is incorrect.

To fix this, Yocto project simply disables the direct_urls and passes the "root" to
the python compile function to strip that path out of the compiled
files.

A version of the attached patch, perhaps stripping root from the direct_urls
may be something that could be considered by upstream.

reproducible.patch.txt

Expected behavior

No response

pip version

22.2.2

Python version

3.10.6

OS

Yocto Linux

How to Reproduce

This can be seen by checking that installed wheels contain the original installation path in them.

Output

No response

Code of Conduct

• I agree to follow the PSF Code of Conduct.

[uranusjr]

I assume you are using pip install <path to wheel> directly? This command is unreproducible by design. You should use --find-links or --index-url instead for reproducibility, which would not create the direct_url.json file.

[kanavin]

I assume you are using pip install <path to wheel> directly? This command is unreproducible by design. You should use --find-links or --index-url instead for reproducibility, which would not create the direct_url.json file.

Thanks for the quick response. I have checked what happens; some time ago we (the yocto project) switched over from 'pip install' to 'python3 -m installer', and so the issue of reproducibility no longer comes up. This ticket can be closed.