Skip to content

Refactor python dependencies#1610

Merged
rdmark merged 2 commits intodevelopfrom
rdmark-python-dependencies
Dec 23, 2025
Merged

Refactor python dependencies#1610
rdmark merged 2 commits intodevelopfrom
rdmark-python-dependencies

Conversation

@rdmark
Copy link
Copy Markdown
Member

@rdmark rdmark commented Dec 19, 2025

Drop back to a python 3.9 baseline in the GitHub CI jobs as we're stuck on Bullseye

Use more system deb packages for Python dependencies

Leveraging the Debian packaging allows us to preload more packages in the release image, while speeding up the initial pip install process when creating the venv

We also cut down on python package version upgrades maintenance overhead

Now the Web UI and OLED startup scripts are flagged to use system libraries when creating venvs

@rdmark rdmark force-pushed the rdmark-python-dependencies branch 3 times, most recently from 23dfc8e to ab95a3f Compare December 19, 2025 15:31
@rdmark rdmark marked this pull request as ready for review December 19, 2025 16:03
@rdmark rdmark requested a review from akuker as a code owner December 19, 2025 16:03
Leveraging the Debian packaging allows us to preload more packages in the release image, while speeding up the initial pip install process when creating the venv

We also cut down on python package version upgrades maintenance overhead

Now the Web UI and OLED startup scripts are flagged to use system libraries when creating venvs
@rdmark rdmark force-pushed the rdmark-python-dependencies branch from ab95a3f to 800754a Compare December 19, 2025 23:57
@sonarqubecloud
Copy link
Copy Markdown

Copy link
Copy Markdown
Member

@nucleogenic nucleogenic left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Are the OS packages updated by their maintainers frequently enough, e.g. if there was a security vulnerability, would it be sufficient for the user to run apt-get update? Otherwise, I think the justifications are reasonable enough, let's give it a go?

@rdmark
Copy link
Copy Markdown
Member Author

rdmark commented Dec 23, 2025

Debian Bullseye is the old-old-stable release and still getting security patches. I think we can rely on these for another 1.5 years or so. This will give us some breathing room to find a migration path to Debian Trixie.

Edit: so yes, a user should be able to to do a apt-get upgrade to get the security patched packages.

@rdmark rdmark merged commit 5613ad3 into develop Dec 23, 2025
7 checks passed
@rdmark rdmark deleted the rdmark-python-dependencies branch December 23, 2025 21:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants