Gregory Szorc

We have support for performing cryptographic signing using keys stored in macOS keychains. But we don't have support for decryption (needed for remote signing) because the Rust bindings to `SecurityFramework.framework`...

Security audit of remote signing

2

I have an implementation of remote code signing almost ready to push. I effectively implemented my own cryptosystem to implement this feature. As I learned many years ago, one doesn't...

Restore shared extension module and/or dependency libraries

1

This project was created in support of PyOxidizer. And a goal of PyOxidizer was to see if it was possible to achieve a single file executable Python application. In order...

`PYTHON.json` object file annotations for 3.11 aren't aware of frozen module changes

2

Python 3.11 introduced a multi-phase build approach where some additional .pyc are frozen into the binary. The build system changes appear to have invalidated some of our object file annotation...

Consider pinning DWARF version to v4 or earlier

1

The LLVM 15 upgrade in `main` appears to have also introduced DWARF v5 into ELF binaries. Such modern DWARF may cause issues with older toolchains and debuggers. We should consider...

Investigate necessity of HAVE_DYLD_SHARED_CACHE_CONTAINS_PATH on macOS 11

1

According to https://github.com/indygreg/PyOxidizer/issues/373#issuecomment-792295106 the HAVE_DYLD_SHARED_CACHE_CONTAINS_PATH feature is required on macOS 11 for things to be happy. I had unconditionally disabled that feature flag thinking it was an optional feature. We...

The Windows static builds currently have multiple object files defining libffi symbols. As the build log demonstrates: ``` 9>Lib: C:\Program Files (x86)\Microsoft Visual Studio\2019\Community\VC\Tools\MSVC\14.28.29333\bin\HostX86\x64\Lib.exe /OUT:"C:\Users\gps\AppData\Local\Temp\python-build-3uvcddyb\Python-3.9.2\PCbuild\amd64\_ctypes.lib" libffi.lib /LIBPATH:"C:\Users\gps\AppData\Local\Temp\python-build-3uvcddyb\libffi\\" /NOLOGO /MACHINE:X64 /LTCG...

The Linux and macOS builds don't link against `libintl` and don't have all `gettext` features present in their `_locale` extension / `locale` Python module. We could potentially build against our...

Stop requiring `__file__` in Python packages

17

# The Problem Many Python modules and scripts use `__file__` to derive the filesystem path to the current file. As documented at https://docs.python.org/3/reference/datamodel.html (search for `__file__`), `__file__` is optional (_the...