Re: Installing/upgrading duplicity without PyPi etc.

--===============7158256724875068796==
Content-Type: multipart/alternative; boundary="0000000000008c8b9e065562af03"

--0000000000008c8b9e065562af03
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hi Jacob,

Most distros have packages named 'python3-<package>', that usually match
the name PyPI uses, so just replace 'pip install boto3' with 'apt install
python3-boto3'.

I'm sure you can build a working duplicity with just distro packages.
After all, the distro maintainers do that.

BTW, version 1.2.1 is quite old.  We're up to 3.0.10 at the moment.

...Thanks,,
...Ken


On Mon, Jun 29, 2026 at 5:25=E2=80=AFAM Jakob Bohm via Duplicity-talk <
[email protected]> wrote:

> Dear Duplicity community,
>
> The dedicated Monthy Python repositories such as PyPi have earned a
> reputation for spreading malware, which raises the major question of how
> to install Duplicity without talking to those dangerous servers.
>
> For Duplicity 1.2.1 with Python 3.11, things could be compiled and built
> using local tools only, but at some point Python adopted a policy of
> making local building difficult for ordinary sysadmins who are not
> Python enthusiasts.  So what is the new recipe for manually building and
> installing Duplicity  system-wide using only OS-bundled Python packages
> and trusted tarballs?
>
>
> Enjoy
>
> Jakob
> --
> Jakob Bohm, CIO, Partner, WiseMo A/S.  https://www.wisemo.com
> Transformervej 29, 2860 S=C3=B8borg, Denmark.  Direct +45 31 13 16 10
> This public discussion message is non-binding and may contain errors.
> WiseMo - Remote Service Management for PCs, Phones and Embedded
>
>
> _______________________________________________
> Duplicity-talk mailing list
> [email protected]
> https://lists.nongnu.org/mailman/listinfo/duplicity-talk
>

--0000000000008c8b9e065562af03
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hi Jacob,<div><br></div><div>Most distros have packages na=
med &#39;python3-&lt;package&gt;&#39;, that usually match the name PyPI use=
s, so just replace &#39;pip install boto3&#39; with &#39;apt install python=
3-boto3&#39;.</div><div><br></div><div>I&#39;m sure you can build a working=
 duplicity with just distro packages.=C2=A0 After all, the distro maintaine=
rs do that.</div><div><br></div><div>BTW, version 1.2.1 is quite old.=C2=A0=
 We&#39;re up to 3.0.10 at=C2=A0the moment.</div><div><br></div><div>...Tha=
nks,,</div><div>...Ken</div><div><br></div></div><br><div class=3D"gmail_qu=
ote gmail_quote_container"><div dir=3D"ltr" class=3D"gmail_attr">On Mon, Ju=
n 29, 2026 at 5:25=E2=80=AFAM Jakob Bohm via Duplicity-talk &lt;<a href=3D"=
mailto:[email protected]">[email protected]</a>&gt; wrote:<=
br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8e=
x;border-left:1px solid rgb(204,204,204);padding-left:1ex">Dear Duplicity c=
ommunity,<br>
<br>
The dedicated Monthy Python repositories such as PyPi have earned a <br>
reputation for spreading malware, which raises the major question of how <b=
r>
to install Duplicity without talking to those dangerous servers.<br>
<br>
For Duplicity 1.2.1 with Python 3.11, things could be compiled and built <b=
r>
using local tools only, but at some point Python adopted a policy of <br>
making local building difficult for ordinary sysadmins who are not <br>
Python enthusiasts.=C2=A0 So what is the new recipe for manually building a=
nd <br>
installing Duplicity=C2=A0 system-wide using only OS-bundled Python package=
s <br>
and trusted tarballs?<br>
<br>
<br>
Enjoy<br>
<br>
Jakob<br>
-- <br>
Jakob Bohm, CIO, Partner, WiseMo A/S.=C2=A0 <a href=3D"https://www.wisemo.c=
om" rel=3D"noreferrer" target=3D"_blank">https://www.wisemo.com</a><br>
Transformervej 29, 2860 S=C3=B8borg, Denmark.=C2=A0 Direct +45 31 13 16 10<=
br>
This public discussion message is non-binding and may contain errors.<br>
WiseMo - Remote Service Management for PCs, Phones and Embedded<br>
<br>
<br>
_______________________________________________<br>
Duplicity-talk mailing list<br>
<a href=3D"mailto:[email protected]" target=3D"_blank">Duplicity-ta=
[email protected]</a><br>
<a href=3D"https://lists.nongnu.org/mailman/listinfo/duplicity-talk" rel=3D=
"noreferrer" target=3D"_blank">https://lists.nongnu.org/mailman/listinfo/du=
plicity-talk</a><br>
</blockquote></div>

--0000000000008c8b9e065562af03--


--===============7158256724875068796==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KRHVwbGljaXR5
LXRhbGsgbWFpbGluZyBsaXN0CkR1cGxpY2l0eS10YWxrQG5vbmdudS5vcmcKaHR0cHM6Ly9saXN0
cy5ub25nbnUub3JnL21haWxtYW4vbGlzdGluZm8vZHVwbGljaXR5LXRhbGsK

--===============7158256724875068796==--