Voir la source de Python : Création d'un repository python Devpi-server

=== Création d'un environnement virtuel python ===

* L'utilisateur créé sera "devpi-user"
<syntaxhighlight lang="bash">
su -l devpi-user  
curl https://pyenv.run | bash 

</syntaxhighlight>

==== Edition du fichier ~/.bashrc ====
<syntaxhighlight lang="bash">
nano .bashrc
export PATH="~/.pyenv/bin:$PATH"
eval "$(pyenv init -)"
eval "$(pyenv virtualenv-init -)"

</syntaxhighlight>Redémarrer la session SSH pour prendre en compte les modifications du fichier

==== Installation des versions Python ====
<syntaxhighlight lang="bash">
pyenv install 3.14.0

pyenv versions

* system (set by /home/franck/.pyenv/version)
  3.14.0

</syntaxhighlight>

==== Création de l'environnement virtuel ====
<syntaxhighlight lang="bash">
pyenv virtualenv 3.14.0 devpi-3.14.0

Looking in links: /tmp/tmphg0jxgpf
Requirement already satisfied: setuptools in /home/devpi-user/.pyenv/versions/3.14.0/envs/devpi-3.14.0/lib/python3.14/site-packages (49.2.1)
Requirement already satisfied: pip in /home/devpi-user/.pyenv/versions/3.14.0/envs/devpi-3.14.0/lib/python3.14/site-packages (20.2.3)


pyenv virtualenvs

  3.14.0/envs/devpi-3.14.0 (created from /home/devpi-user/.pyenv/versions/3.14.0)
  devpi-3.14.0 (created from /home/devpi-user/.pyenv/versions/3.14.0)

</syntaxhighlight>

==== Activation de l'environnement ====
<syntaxhighlight lang="bash">
pyenv activate devpi-3.14.0

(devpi-3.14.0) devpi-user@VLIN:~$

</syntaxhighlight>

=== Installation de devpi-server ===
<syntaxhighlight lang="bash">
pip install -U devpi-server devpi-client devpi-web

devpi-gen-config --port 3141 --serverdir /home/devpi-user/www
devpi-init --serverdir /home/devpi-user/www --root-passwd azerty

devpi use http://localhost:3141
devpi login root --password=azerty

devpi user -c entreprise password=azerty
devpi index -c entreprise/release bases=root/pypi
devpi index -c entreprise/snapshot bases=entreprise/release

devpi user -c franck password=azerty email=franck@yakakliker

devpi index -y entreprise/release acl_upload=entreprise,franck,root
devpi index -y entreprise/snapshot acl_upload=entreprise,franck,root

devpi logout

</syntaxhighlight>

==== Création du service devpi-user.service ====

* /etc/systemd/system/devpi-user.service
<syntaxhighlight lang="bash">
[Unit]
Description=Devpi Server
Requires=network-online.target
After=network-online.target

[Service]
Restart=on-success
# ExecStart:
# - shall point to existing devpi-server executable
# - shall not use the deprecated `--start`. We want the devpi-server to start in foreground
ExecStart=/home/devpi-user/.pyenv/versions/devpi-3.14.0/bin/devpi-server --port 3141 --serverdir /home/devpi-user/www
# set User according to user which is able to run the devpi-server
User=devpi-user

[Install]
WantedBy=multi-user.target

</syntaxhighlight>

==== Installation du service nginx ====
<syntaxhighlight lang="bash">
apt-get install nginx
</syntaxhighlight>

===== Configuration nginx =====

* /etc/nginx/sites-available/nginx-devpi.conf
<syntaxhighlight lang="bash">
map $http_x_forwarded_proto $x_scheme {
    default $scheme;
    http http;
    https https;
}

server {
    server_name localhost $hostname "";
    listen 80;
    gzip             on;
    gzip_min_length  2000;
    gzip_proxied     any;
    # add application/vnd.pypi.simple.v1+json to the gzip_types
    gzip_types  text/plain text/css text/xml
                application/json application/vnd.pypi.simple.v1+json
                application/javascript text/javascript
                application/xml application/xml+rss;

    proxy_read_timeout 60s;
    client_max_body_size 64M;

    # set to where your devpi-server state is on the filesystem
    root /home/devpi-user/www;

    # try serving static files directly
    location ~ /\+f/ {
        # workaround to pass non-GET/HEAD requests through to the named location below
        error_page 418 = @proxy_to_app;
        if ($request_method !~ (GET)|(HEAD)) {
            return 418;
        }

        expires max;
        try_files /+files$uri @proxy_to_app;
    }

    # try serving docs directly
    location ~ /\+doc/ {
        # if the --documentation-path option of devpi-web is used,
        # then the root must be set accordingly here
        root /home/devpi-user/www;
        try_files $uri @proxy_to_app;
    }

    location / {
        # workaround to pass all requests to / through to the named location below
        error_page 418 = @proxy_to_app;
        return 418;
    }

    location @proxy_to_app {
        proxy_pass http://localhost:3141;
        # the $x_scheme variable is only required if nginx is behind another
        # proxy (often the case in container environments),
        # if your nginx is the only proxy server, the $scheme variable can be
        # used and the map $http_x_forwarded_proto $x_scheme above be removed
        proxy_set_header X-Forwarded-Proto $x_scheme;
        proxy_set_header X-outside-url $x_scheme://$http_host;
        proxy_set_header X-Real-IP $remote_addr;
    }
}

</syntaxhighlight>

==== Installation de haproxy ====
<syntaxhighlight lang="bash">
apt-get install haproxy hatop
</syntaxhighlight>

===== Configuration de haproxy =====

* /etc/haproxy/haproxy.cfg
<syntaxhighlight lang="bash">
global
	log /dev/log	local0
	log /dev/log	local1 notice
	chroot /var/lib/haproxy
	stats socket /run/haproxy/admin.sock mode 660 level admin
	stats timeout 30s
	user haproxy
	group haproxy
	daemon

	# Default SSL material locations
	ca-base /etc/ssl/certs
	crt-base /etc/ssl/private

	# See: https://ssl-config.mozilla.org/#server=haproxy&server-version=2.0.3&config=intermediate
        ssl-default-bind-ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384
        ssl-default-bind-ciphersuites TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256
        ssl-default-bind-options ssl-min-ver TLSv1.2 no-tls-tickets

defaults
	log	global
	mode	http
	option	httplog
	option	dontlognull
        timeout connect 5000
        timeout client  50000
        timeout server  50000
	errorfile 400 /etc/haproxy/errors/400.http
	errorfile 403 /etc/haproxy/errors/403.http
	errorfile 408 /etc/haproxy/errors/408.http
	errorfile 500 /etc/haproxy/errors/500.http
	errorfile 502 /etc/haproxy/errors/502.http
	errorfile 503 /etc/haproxy/errors/503.http
	errorfile 504 /etc/haproxy/errors/504.http

frontend https
    bind *:443 ssl crt /etc/haproxy/certs/wildcard.yakakliker.org.pem

    mode http
    option httplog

    http-request redirect scheme https code 301 unless { ssl_fc }

    acl devpi_acl  hdr(host)   python-repo.yakakliker.org
    use_backend devpi if devpi_acl


backend devpi
    mode http
    option httpchk GET /

    option forwardfor
    http-request add-header X-Forwarded-Proto https if { ssl_fc }

    server devpi 127.0.0.1:80 check

</syntaxhighlight>

=== Sortie de l'environnement ===
<syntaxhighlight lang="bash">
pyenv deactivate 
</syntaxhighlight>

=== Arrêt / démarrage des services ===
<syntaxhighlight lang="bash">
## Démarrage des services

systemctl start devpi-user.service

systemctl start nginx

systemctl start haproxy


## Arrêt des services

systemctl stop devpi-user.service

systemctl stop nginx

systemctl stop haproxy


## Activation du démarrage automatique des services

systemctl enable devpi-user.service

systemctl enable nginx

systemctl enable haproxy


</syntaxhighlight>

=== Liens ===

* https://pypi.org/org/devpi/
* https://www.devpi.net/
* https://devpi.net/docs/devpi/devpi/stable/+doc/quickstart-server.html
* https://dev.to/cwprogram/private-python-packages-with-devpi-3iai
* [[Python : Création d'un environnement virtuel Python / Gunicorn]]

[[Catégorie:Python]]
[[Catégorie:Repository]]
[[Catégorie:Haproxy]]
[[Catégorie:Nginx]]
[[Catégorie:Devpi-server]]
[[Catégorie:Tutoriel]]


		‎<html>
<a href="https://www.compteurdevisite.com" title="compteur web gratuit sans pub"><img src="https://counter6.optistats.ovh/private/compteurdevisite.php?c=b4epghealnwlf7wuq7gn3ygll9aywrfx" border="0" title="compteur web gratuit sans pub" alt="compteur web gratuit sans pub"></a>
		‎</html>

‎		<html>
<script src='https://storage.ko-fi.com/cdn/scripts/overlay-widget.js'></script>
<script>
  kofiWidgetOverlay.draw('yakakliker', {
    'type': 'floating-chat',
    'floating-chat.donateButton.text': 'Café',
    'floating-chat.donateButton.background-color': '#00b9fe',
    'floating-chat.donateButton.text-color': '#fff'
  });
</script>
		‎</html>