Blog

The usual way to get this wrong is to pass your token as a build argument. It works, but docker history shows build args, and a file written in one layer stays in the image even if a later step deletes it. If the image is ever pushed somewhere, so is your token. BuildKit secret mounts avoid that. The secret is available to a single RUN step and is never written to a layer. This needs a reasonably recent Docker (BuildKit with Dockerfile syntax 1.10 or later). ...

No. GitHub Packages supports npm, Docker and other container images, Maven, Gradle, NuGet and RubyGems, but not Python. There’s no PyPI-compatible registry, so you can’t twine upload to it or point pip at it. It’s one of the most requested GitHub features. The community discussion asking for it has been open since December 2021 with hundreds of upvotes, and a reply in the thread says it’s no longer planned. If your code is on GitHub and you want private Python packages, you need to host them somewhere else. ...

If you’ve ever felt overwhelmed by Python’s packaging ecosystem, you’re experiencing what the legendary XKCD comic #927 perfectly captured. The comic shows a familiar scenario: fourteen competing standards exist, someone declares “this is ridiculous, we need one universal standard,” and the final panel reveals there are now fifteen competing standards. For nearly two decades, Python packaging seemed trapped in exactly this recursive loop. We transitioned from distutils to setuptools, introduced pip for installation and virtualenv for isolation, experimented with pipenv for lock files, embraced poetry for deterministic resolution, and explored pdm for standards compliance. Each tool promised to unify workflows around package installation, dependency resolution, and distribution. Each contributed valuable concepts like deterministic builds and standardized metadata, yet often created distinct, incompatible silos. ...

Introduction Conda is a popular package and environment management system primarily used with Python. It’s widely used in data science, scientific computing, AI, and bioinformatics, because it facilitates portability and reproducibility of (data) science workflows. However, if your team needs to host private Conda packages, the typical recommendation is to build and manage your own Conda channel. While self-hosting a Conda channel is possible, it requires ongoing maintenance and infrastructure costs. Surprisingly, major package managers like Artifactory and PackageCloud don’t natively support Conda. ...

This tutorial covers: Creating a simple Debian package using fpm Uploading it to a private APT repository on RepoForge.io Installing it from RepoForge in a Docker container Step 1 – Create a Debian package For this tutorial, we are going to make a simple hello world application. First, let’s create a working directory called hello, and add a subfolder called usr inside it, then another subfolder called bin inside that. Then, we’re going to add a file called hello inside of the bin folder. Your folder structure should look like this: ...

This tutorial shows you how to configure uv to install Python packages from a private PyPI server — specifically a hosted private Python package registry on RepoForge.io. What is uv? uv is an extremely fast Python package installer and resolver, written in Rust by Astral (the creators of Ruff). It’s a drop-in replacement for pip and pip-tools that’s 10-100x faster. Prerequisites A RepoForge.io account Your RepoForge repository URL (found under Show me how to publish packages) An access token with Python read permissions A package already published to your RepoForge repository Installing uv Install uv using the official installer: ...

This tutorial shows how to automatically build and publish Python packages to a private repository using GitLab CI/CD. By the end, every tagged commit will trigger a pipeline that packages your code and uploads it to a private package registry for CI/CD on RepoForge.io. Prerequisites A RepoForge.io account (free trial works for this tutorial) A GitLab account A recent version of Python 3 Basic familiarity with git Step 1 — Create the folder structure Create an empty folder for your project and add a subfolder for your package code: ...

This tutorial shows you how to publish Python packages built with Poetry to a private PyPI server — a hosted private Python package registry on RepoForge.io. Prerequisites A RepoForge.io account Your RepoForge repository URL (found under Show me how to publish packages) An access token with Python write permissions Installing Poetry Install Poetry using the official installer: curl -sSL https://install.python-poetry.org | python3 - Verify the installation: poetry --version Creating a Package in Poetry Now that poetry is installed you can create a poetry project like this: ...

This tutorial shows you how to automatically publish Python, Docker, and NPM packages to a private package registry for CI/CD on RepoForge.io using the official GitHub Action. If you’re wondering why you can’t just use GitHub’s own registry for Python, see Does GitHub Packages support Python? Step 1: Create a GitHub repository You can refer to the example here to see a valid repository setup that works with the options described below. Step 2: Get Your RepoForge.io Credentials Log into your RepoForge.io account and: ...