how to safely (basic) auth to private PyPI with zc.buildout

Question

I've been so far using lovely.buildouthttp for a long time, to authenticate buildout to my private PyPI server.

The key required functionality is its ability to use credentials from a separate file. I do not want to enter credentials in the buildout config file itself.

Does zc.buildout nowadays have the ability to use basic auth credentials from another file as well? I could not find this information.

I know there's also isotoma.basicauth.buildout (have not tried it out).

Wawro

Answer 1

buildout can use data from .pypirc

[repo_name]
repository:https://your.egg.repo
username:the_userid
password:the_password
realm:your_basicauth_realm

With that, e.g. the following kind of entry in buildout will authenticate correctly, without having to include the credentials in the url:

[buildout]
find-links =
   http://your.egg.repo/packages

Toomer

Care to add a note on the required buildout.cfg entry as well? – Wawro

what is this "required buildout.cfg entry" ? – Presumptive

@Presumptive see the addition to the answer – Wawro

Is that still a thing? I can't make it work: zc.buildout == 2.9.5 :( – Esque

Soved, thanks: community.plone.org/t/… and sorry for the noise. – Esque

IOW, it is still a thing. – Toomer