Running pip¶
pip is a command line program. When you install pip, a pip
command is added
to your system, which can be run from the command prompt as follows:
Unix/macOS
python -m pip <pip arguments>
python -m pip
executes pip using the Python interpreter you
specified as python. So /usr/bin/python3.7 -m pip
means
you are executing pip for your interpreter located at /usr/bin/python3.7
.
Windows
py -m pip <pip arguments>
py -m pip
executes pip using the latest Python interpreter you
have installed. For more details, read the Python Windows launcher docs.
Installing Packages¶
pip supports installing from PyPI, version control, local projects, and
directly from distribution files.
The most common scenario is to install from PyPI using Requirement Specifiers
Unix/macOS
python -m pip install SomePackage # latest version python -m pip install SomePackage==1.0.4 # specific version python -m pip install 'SomePackage>=1.0.4' # minimum version
Windows
py -m pip install SomePackage # latest version py -m pip install SomePackage==1.0.4 # specific version py -m pip install 'SomePackage>=1.0.4' # minimum version
For more information and examples, see the pip install reference.
Basic Authentication Credentials
This is now covered in Authentication.
netrc Support
This is now covered in Authentication.
Keyring Support
This is now covered in Authentication.
Using a Proxy Server¶
When installing packages from PyPI, pip requires internet access, which
in many corporate environments requires an outbound HTTP proxy server.
pip can be configured to connect through a proxy server in various ways:
-
using the
--proxy
command-line option to specify a proxy in the form
scheme://[user:passwd@]proxy.server:port
-
using
proxy
in a Configuration Files -
by setting the standard environment-variables
http_proxy
,https_proxy
andno_proxy
. -
using the environment variable
PIP_USER_AGENT_USER_DATA
to include
a JSON-encoded string in the user-agent variable used in pip’s requests.
Requirements Files¶
“Requirements files” are files containing a list of items to be
installed using pip install like so:
Unix/macOS
python -m pip install -r requirements.txt
Windows
py -m pip install -r requirements.txt
Details on the format of the files are here: Requirements File Format.
Logically, a Requirements file is just a list of pip install arguments
placed in a file. Note that you should not rely on the items in the file being
installed by pip in any particular order.
Requirements files can also be served via a URL, e.g.
http://example.com/requirements.txt besides as local files, so that they can
be stored and served in a centralized place.
In practice, there are 4 common uses of Requirements files:
-
Requirements files are used to hold the result from pip freeze for the
purpose of achieving Repeatable Installs. In
this case, your requirement file contains a pinned version of everything that
was installed whenpip freeze
was run.Unix/macOS
python -m pip freeze > requirements.txt python -m pip install -r requirements.txt
Windows
py -m pip freeze > requirements.txt py -m pip install -r requirements.txt
-
Requirements files are used to force pip to properly resolve dependencies.
pip 20.2 and earlier doesn’t have true dependency resolution, but instead simply uses the first
specification it finds for a project. E.g. ifpkg1
requires
pkg3>=1.0
andpkg2
requirespkg3>=1.0,<=2.0
, and ifpkg1
is
resolved first, pip will only usepkg3>=1.0
, and could easily end up
installing a version ofpkg3
that conflicts with the needs ofpkg2
.
To solve this problem, you can placepkg3>=1.0,<=2.0
(i.e. the correct
specification) into your requirements file directly along with the other top
level requirements. Like so:pkg1 pkg2 pkg3>=1.0,<=2.0
-
Requirements files are used to force pip to install an alternate version of a
sub-dependency. For example, supposeProjectA
in your requirements file
requiresProjectB
, but the latest version (v1.3) has a bug, you can force
pip to accept earlier versions like so: -
Requirements files are used to override a dependency with a local patch that
lives in version control. For example, suppose a dependency
SomeDependency
from PyPI has a bug, and you can’t wait for an upstream
fix.
You could clone/copy the src, make the fix, and place it in VCS with the tag
sometag
. You’d reference it in your requirements file with a line like
so:git+https://myvcs.com/some_dependency@sometag#egg=SomeDependency
If
SomeDependency
was previously a top-level requirement in your
requirements file, then replace that line with the new line. If
SomeDependency
is a sub-dependency, then add the new line.
It’s important to be clear that pip determines package dependencies using
install_requires metadata,
not by discovering requirements.txt
files embedded in projects.
See also:
-
Requirements File Format
-
pip freeze
-
“setup.py vs requirements.txt” (an article by Donald Stufft)
Constraints Files¶
Constraints files are requirements files that only control which version of a
requirement is installed, not whether it is installed or not. Their syntax and
contents is a subset of Requirements Files, with several kinds of syntax
not allowed: constraints must have a name, they cannot be editable, and they
cannot specify extras. In terms of semantics, there is one key difference:
Including a package in a constraints file does not trigger installation of the
package.
Use a constraints file like so:
Unix/macOS
python -m pip install -c constraints.txt
Windows
py -m pip install -c constraints.txt
Constraints files are used for exactly the same reason as requirements files
when you don’t know exactly what things you want to install. For instance, say
that the “helloworld” package doesn’t work in your environment, so you have a
local patched version. Some things you install depend on “helloworld”, and some
don’t.
One way to ensure that the patched version is used consistently is to
manually audit the dependencies of everything you install, and if “helloworld”
is present, write a requirements file to use when installing that thing.
Constraints files offer a better way: write a single constraints file for your
organisation and use that everywhere. If the thing being installed requires
“helloworld” to be installed, your fixed version specified in your constraints
file will be used.
Constraints file support was added in pip 7.1. In Changes to the pip dependency resolver in 20.3 (2020) we did a fairly comprehensive overhaul, removing several
undocumented and unsupported quirks from the previous implementation,
and stripped constraints files down to being purely a way to specify
global (version) limits for packages.
Same as requirements files, constraints files can also be served via a URL,
e.g. http://example.com/constraints.txt, so that your organization can store and
serve them in a centralized place.
Dependency Groups¶
“Dependency Groups” are lists of items to be installed stored in a
pyproject.toml
file.
A dependency group is logically just a list of requirements, similar to the
contents of Requirements Files. Unlike requirements files, dependency
groups cannot contain non-package arguments for pip install.
Groups can be declared like so:
# pyproject.toml [dependency-groups] groupA = [ "pkg1", "pkg2", ]
and installed with pip install like so:
Unix/macOS
python -m pip install --group groupA
Windows
py -m pip install --group groupA
Full details on the contents of [dependency-groups]
and more examples are
available in the specification documentation.
Note
Dependency Groups are defined by a standard, and therefore do not support
pip
-specific syntax for requirements, only standard dependency
specifiers.
pip
does not search projects or directories to discover pyproject.toml
files. The --group
option is used to pass the path to the file,
and if the path is omitted, as in the example above, it defaults to
pyproject.toml
in the current directory. Using explicit paths,
pip install can use a file from another directory. For example:
Unix/macOS
python -m pip install --group './project/subproject/pyproject.toml:groupA'
Windows
py -m pip install --group './project/subproject/pyproject.toml:groupA'
This also makes it possible to install groups from multiple different projects
at once. For example, with a directory structure like so:
+ project/ + sub1/ - pyproject.toml + sub2/ - pyproject.toml
it is possible to install, from the project/
directory, groups from the
subprojects thusly:
Unix/macOS
python -m pip install --group './sub1/pyproject.toml:groupA' --group './sub2/pyproject.toml:groupB'
Windows
py -m pip install --group './sub1/pyproject.toml:groupA' --group './sub2/pyproject.toml:groupB'
Installing from Wheels¶
“Wheel” is a built, archive format that can greatly speed installation compared
to building and installing from source archives. For more information, see the
specification.
pip prefers Wheels where they are available. To disable this, use the
—no-binary flag for pip install.
If no satisfactory wheels are found, pip will default to finding source
archives.
To install directly from a wheel archive:
Unix/macOS
python -m pip install SomePackage-1.0-py2.py3-none-any.whl
Windows
py -m pip install SomePackage-1.0-py2.py3-none-any.whl
To include optional dependencies provided in the provides_extras
metadata in the wheel, you must add quotes around the install target
name:
Unix/macOS
python -m pip install './somepackage-1.0-py2.py3-none-any.whl[my-extras]'
Windows
py -m pip install './somepackage-1.0-py2.py3-none-any.whl[my-extras]'
Note
In the future, the path[extras]
syntax may become deprecated. It is
recommended to use standard
syntax wherever possible.
For the cases where wheels are not available, pip offers pip wheel as a
convenience, to build wheels for all your requirements and dependencies.
pip wheel requires the wheel package to be installed, which provides the
“bdist_wheel” setuptools extension that it uses.
To build wheels for your requirements and all their dependencies to a local
directory:
Unix/macOS
python -m pip install wheel python -m pip wheel --wheel-dir=/local/wheels -r requirements.txt
Windows
py -m pip install wheel py -m pip wheel --wheel-dir=/local/wheels -r requirements.txt
And then to install those requirements just using your local directory of
wheels (and not from PyPI):
Unix/macOS
python -m pip install --no-index --find-links=/local/wheels -r requirements.txt
Windows
py -m pip install --no-index --find-links=/local/wheels -r requirements.txt
Uninstalling Packages¶
pip is able to uninstall most packages like so:
Unix/macOS
python -m pip uninstall SomePackage
Windows
py -m pip uninstall SomePackage
pip also performs an automatic uninstall of an old version of a package
before upgrading to a newer version.
For more information and examples, see the pip uninstall reference.
Listing Packages¶
To list installed packages:
Unix/macOS
$ python -m pip list docutils (0.9.1) Jinja2 (2.6) Pygments (1.5) Sphinx (1.1.2)
Windows
C:\> py -m pip list docutils (0.9.1) Jinja2 (2.6) Pygments (1.5) Sphinx (1.1.2)
To list outdated packages, and show the latest version available:
Unix/macOS
$ python -m pip list --outdated docutils (Current: 0.9.1 Latest: 0.10) Sphinx (Current: 1.1.2 Latest: 1.1.3)
Windows
C:\> py -m pip list --outdated docutils (Current: 0.9.1 Latest: 0.10) Sphinx (Current: 1.1.2 Latest: 1.1.3)
To show details about an installed package:
Unix/macOS
$ python -m pip show sphinx --- Name: Sphinx Version: 1.1.3 Location: /my/env/lib/pythonx.x/site-packages Requires: Pygments, Jinja2, docutils
Windows
C:\> py -m pip show sphinx --- Name: Sphinx Version: 1.1.3 Location: /my/env/lib/pythonx.x/site-packages Requires: Pygments, Jinja2, docutils
For more information and examples, see the pip list and pip show
reference pages.
Searching for Packages¶
pip can search PyPI for packages using the pip search
command:
Unix/macOS
python -m pip search "query"
Windows
The query will be used to search the names and summaries of all
packages.
For more information and examples, see the pip search reference.
Configuration
This is now covered in Configuration.
Config file
This is now covered in Configuration.
Environment Variables
This is now covered in Configuration.
Config Precedence
This is now covered in Configuration.
Command Completion¶
pip comes with support for command line completion in bash, zsh and fish.
To setup for bash:
python -m pip completion --bash >> ~/.profile
To setup for zsh:
python -m pip completion --zsh >> ~/.zprofile
To setup for fish:
python -m pip completion --fish > ~/.config/fish/completions/pip.fish
To setup for powershell:
python -m pip completion --powershell | Out-File -Encoding default -Append $PROFILE
Alternatively, you can use the result of the completion
command directly
with the eval function of your shell, e.g. by adding the following to your
startup file:
eval "`pip completion --bash`"
Installing from local packages¶
In some cases, you may want to install from local packages only, with no traffic
to PyPI.
First, download the archives that fulfill your requirements:
Unix/macOS
python -m pip download --destination-directory DIR -r requirements.txt
Windows
py -m pip download --destination-directory DIR -r requirements.txt
Note that pip download
will look in your wheel cache first, before
trying to download from PyPI. If you’ve never installed your requirements
before, you won’t have a wheel cache for those items. In that case, if some of
your requirements don’t come as wheels from PyPI, and you want wheels, then run
this instead:
Unix/macOS
python -m pip wheel --wheel-dir DIR -r requirements.txt
Windows
py -m pip wheel --wheel-dir DIR -r requirements.txt
Then, to install from local only, you’ll be using —find-links and —no-index like so:
Unix/macOS
python -m pip install --no-index --find-links=DIR -r requirements.txt
Windows
py -m pip install --no-index --find-links=DIR -r requirements.txt
“Only if needed” Recursive Upgrade¶
pip install --upgrade
now has a --upgrade-strategy
option which
controls how pip handles upgrading of dependencies. There are 2 upgrade
strategies supported:
-
eager
: upgrades all dependencies regardless of whether they still satisfy
the new parent requirements -
only-if-needed
: upgrades a dependency only if it does not satisfy the new
parent requirements
The default strategy is only-if-needed
. This was changed in pip 10.0 due to
the breaking nature of eager
when upgrading conflicting dependencies.
It is important to note that --upgrade
affects direct requirements (e.g.
those specified on the command-line or via a requirements file) while
--upgrade-strategy
affects indirect requirements (dependencies of direct
requirements).
As an example, say SomePackage
has a dependency, SomeDependency
, and
both of them are already installed but are not the latest available versions:
-
pip install SomePackage
: will not upgrade the existingSomePackage
or
SomeDependency
. -
pip install --upgrade SomePackage
: will upgradeSomePackage
, but not
SomeDependency
(unless a minimum requirement is not met). -
pip install --upgrade SomePackage --upgrade-strategy=eager
: upgrades both
SomePackage
andSomeDependency
.
As an historic note, an earlier “fix” for getting the only-if-needed
behaviour was:
Unix/macOS
python -m pip install --upgrade --no-deps SomePackage python -m pip install SomePackage
Windows
py -m pip install --upgrade --no-deps SomePackage py -m pip install SomePackage
A proposal for an upgrade-all
command is being considered as a safer
alternative to the behaviour of eager upgrading.
User Installs¶
With Python 2.6 came the “user scheme” for installation,
which means that all Python distributions support an alternative install
location that is specific to a user. The default location for each OS is
explained in the python documentation for the site.USER_BASE variable.
This mode of installation can be turned on by specifying the —user option to pip install
.
Moreover, the “user scheme” can be customized by setting the
PYTHONUSERBASE
environment variable, which updates the value of
site.USER_BASE
.
To install “SomePackage” into an environment with site.USER_BASE
customized to
‘/myappenv’, do the following:
Unix/macOS
export PYTHONUSERBASE=/myappenv python -m pip install --user SomePackage
Windows
set PYTHONUSERBASE=c:/myappenv py -m pip install --user SomePackage
pip install --user
follows four rules:
-
When globally installed packages are on the python path, and they conflict
with the installation requirements, they are ignored, and not
uninstalled. -
When globally installed packages are on the python path, and they satisfy
the installation requirements, pip does nothing, and reports that
requirement is satisfied (similar to how global packages can satisfy
requirements when installing packages in a--system-site-packages
virtualenv). -
pip will not perform a
--user
install in a--no-site-packages
virtualenv (i.e. the default kind of virtualenv), due to the user site not
being on the python path. The installation would be pointless. -
In a
--system-site-packages
virtualenv, pip will not install a package
that conflicts with a package in the virtualenv site-packages. The —user
installation would lack sys.path precedence and be pointless.
To make the rules clearer, here are some examples:
From within a --no-site-packages
virtualenv (i.e. the default kind):
Unix/macOS
$ python -m pip install --user SomePackage Can not perform a '--user' install. User site-packages are not visible in this virtualenv.
Windows
C:\> py -m pip install --user SomePackage Can not perform a '--user' install. User site-packages are not visible in this virtualenv.
From within a --system-site-packages
virtualenv where SomePackage==0.3
is already installed in the virtualenv:
Unix/macOS
$ python -m pip install --user SomePackage==0.4 Will not install to the user site because it will lack sys.path precedence
Windows
C:\> py -m pip install --user SomePackage==0.4 Will not install to the user site because it will lack sys.path precedence
From within a real python, where SomePackage
is not installed globally:
Unix/macOS
$ python -m pip install --user SomePackage [...] Successfully installed SomePackage
Windows
C:\> py -m pip install --user SomePackage [...] Successfully installed SomePackage
From within a real python, where SomePackage
is installed globally, but
is not the latest version:
Unix/macOS
$ python -m pip install --user SomePackage [...] Requirement already satisfied (use --upgrade to upgrade) $ python -m pip install --user --upgrade SomePackage [...] Successfully installed SomePackage
Windows
C:\> py -m pip install --user SomePackage [...] Requirement already satisfied (use --upgrade to upgrade) C:\> py -m pip install --user --upgrade SomePackage [...] Successfully installed SomePackage
From within a real python, where SomePackage
is installed globally, and
is the latest version:
Unix/macOS
$ python -m pip install --user SomePackage [...] Requirement already satisfied (use --upgrade to upgrade) $ python -m pip install --user --upgrade SomePackage [...] Requirement already up-to-date: SomePackage # force the install $ python -m pip install --user --ignore-installed SomePackage [...] Successfully installed SomePackage
Windows
C:\> py -m pip install --user SomePackage [...] Requirement already satisfied (use --upgrade to upgrade) C:\> py -m pip install --user --upgrade SomePackage [...] Requirement already up-to-date: SomePackage # force the install C:\> py -m pip install --user --ignore-installed SomePackage [...] Successfully installed SomePackage
Ensuring Repeatability
This is now covered in Repeatable Installs.
Fixing conflicting dependencies
This is now covered in Dependency Resolution.
Using pip from your program¶
As noted previously, pip is a command line program. While it is implemented in
Python, and so is available from your Python code via import pip
, you must
not use pip’s internal APIs in this way. There are a number of reasons for this:
-
The pip code assumes that it is in sole control of the global state of the
program.
pip manages things like the logging system configuration, or the values of
the standard IO streams, without considering the possibility that user code
might be affected. -
pip’s code is not thread safe. If you were to run pip in a thread, there
is no guarantee that either your code or pip’s would work as you expect. -
pip assumes that once it has finished its work, the process will terminate.
It doesn’t need to handle the possibility that other code will continue to
run after that point, so (for example) calling pip twice in the same process
is likely to have issues.
This does not mean that the pip developers are opposed in principle to the idea
that pip could be used as a library — it’s just that this isn’t how it was
written, and it would be a lot of work to redesign the internals for use as a
library, handling all of the above issues, and designing a usable, robust and
stable API that we could guarantee would remain available across multiple
releases of pip. And we simply don’t currently have the resources to even
consider such a task.
What this means in practice is that everything inside of pip is considered an
implementation detail. Even the fact that the import name is pip
is subject
to change without notice. While we do try not to break things as much as
possible, all the internal APIs can change at any time, for any reason. It also
means that we generally won’t fix issues that are a result of using pip in an
unsupported way.
It should also be noted that installing packages into sys.path
in a running
Python process is something that should only be done with care. The import
system caches certain data, and installing new packages while a program is
running may not always behave as expected. In practice, there is rarely an
issue, but it is something to be aware of.
Having said all of the above, it is worth covering the options available if you
decide that you do want to run pip from within your program. The most reliable
approach, and the one that is fully supported, is to run pip in a subprocess.
This is easily done using the standard subprocess
module:
subprocess.check_call([sys.executable, '-m', 'pip', 'install', 'my_package'])
If you want to process the output further, use one of the other APIs in the module.
We are using freeze here which outputs installed packages in requirements format.:
reqs = subprocess.check_output([sys.executable, '-m', 'pip', 'freeze'])
To programmatically monitor download progress use the --progress-bar=raw
option.
This will print lines to stdout in the format Progress CURRENT of TOTAL
, where
CURRENT
and TOTAL
are integers and the unit is bytes.
If the real total is unknown then TOTAL
is set to 0
. Be aware that the
specific formatting of pip’s outputs are not guaranteed to be the same in future versions.
If you don’t want to use pip’s command line functionality, but are rather
trying to implement code that works with Python packages, their metadata, or
PyPI, then you should consider other, supported, packages that offer this type
of ability. Some examples that you could consider include:
-
packaging
— Utilities to work with standard package metadata (versions,
requirements, etc.) -
setuptools
(specificallypkg_resources
) — Functions for querying what
packages the user has installed on their system. -
distlib
— Packaging and distribution utilities (including functions for
interacting with PyPI).
Changes to the pip dependency resolver in 20.3 (2020)¶
pip 20.3 has a new dependency resolver, on by default for Python 3
users. (pip 20.1 and 20.2 included pre-release versions of the new
dependency resolver, hidden behind optional user flags.) Read below
for a migration guide, how to invoke the legacy resolver, and the
deprecation timeline. We also made a two-minute video explanation
you can watch.
We will continue to improve the pip dependency resolver in response to
testers’ feedback. Please give us feedback through the resolver
testing survey.
Watch out for¶
The big change in this release is to the pip dependency resolver
within pip.
Computers need to know the right order to install pieces of software
(“to install x
, you need to install y
first”). So, when Python
programmers share software as packages, they have to precisely describe
those installation prerequisites, and pip needs to navigate tricky
situations where it’s getting conflicting instructions. This new
dependency resolver will make pip better at handling that tricky
logic, and make pip easier for you to use and troubleshoot.
The most significant changes to the resolver are:
-
It will reduce inconsistency: it will no longer install a
combination of packages that is mutually inconsistent. In older
versions of pip, it is possible for pip to install a package which
does not satisfy the declared requirements of another installed
package. For example, in pip 20.0,pip install "six<1.12"
does the wrong thing, “successfully” installing
"virtualenv==20.0.2"
six==1.11
, even thoughvirtualenv==20.0.2
requires
six>=1.12.0,<2
(defined here).
The new resolver, instead, outright rejects installing anything if it
gets that input. -
It will be stricter — if you ask pip to install two packages with
incompatible requirements, it will refuse (rather than installing a
broken combination, like it did in previous versions).
So, if you have been using workarounds to force pip to deal with
incompatible or inconsistent requirements combinations, now’s a good
time to fix the underlying problem in the packages, because pip will
be stricter from here on out.
This also means that, when you run a pip install
command, pip only
considers the packages you are installing in that command, and may
break already-installed packages. It will not guarantee that your
environment will be consistent all the time. If you pip install x
and then pip install y
, it’s possible that the version of y
you get will be different than it would be if you had run pip
in a single command. We are considering changing this
install x y
behavior (per #7744) and would like your thoughts on what
pip’s behavior should be; please answer our survey on upgrades that
create conflicts.
We are also changing our support for Constraints Files,
editable installs, and related functionality. We did a fairly
comprehensive overhaul and stripped constraints files down to being
purely a way to specify global (version) limits for packages, and so
some combinations that used to be allowed will now cause
errors. Specifically:
-
Constraints don’t override the existing requirements; they simply
constrain what versions are visible as input to the resolver (see
#9020) -
Providing an editable requirement (
-e .
) does not cause pip to
ignore version specifiers or constraints (see #8076), and if
you have a conflict between a pinned requirement and a local
directory then pip will indicate that it cannot find a version
satisfying both (see #8307) -
Hash-checking mode requires that all requirements are specified as a
==
match on a version and may not work well in combination with
constraints (see #9020 and #8792) -
If necessary to satisfy constraints, pip will happily reinstall
packages, upgrading or downgrading, without needing any additional
command-line options (see #8115 and Options that control the installation process) -
Unnamed requirements are not allowed as constraints (see #6628 and #8210)
-
Links are not allowed as constraints (see #8253)
-
Constraints cannot have extras (see #6628)
Per our Python 2 Support policy, pip 20.3 users who are using
Python 2 will use the legacy resolver by default. Python 2 users
should upgrade to Python 3 as soon as possible, since in pip 21.0 in
January 2021, pip dropped support for Python 2 altogether.
How to upgrade and migrate¶
-
Install pip 20.3 with
python -m pip install --upgrade pip
. -
Validate your current environment by running
pip check
. This
will report if you have any inconsistencies in your set of installed
packages. Having a clean installation will make it much less likely
that you will hit issues with the new resolver (and may
address hidden problems in your current environment!). If you run
pip check
and run into stuff you can’t figure out, please ask
for help in our issue tracker or chat. -
Test the new version of pip.
While we have tried to make sure that pip’s test suite covers as
many cases as we can, we are very aware that there are people using
pip with many different workflows and build processes, and we will
not be able to cover all of those without your help.-
If you use pip to install your software, try out the new resolver
and let us know if it works for you withpip install
. Try:-
installing several packages simultaneously
-
re-creating an environment using a
requirements.txt
file -
using
pip install --force-reinstall
to check whether
it does what you think it should -
using constraints files
-
the “Setups to test with special attention” and “Examples to try” below
-
-
If you have a build pipeline that depends on pip installing your
dependencies for you, check that the new resolver does what you
need. -
Run your project’s CI (test suite, build process, etc.) using the
new resolver, and let us know of any issues. -
If you have encountered resolver issues with pip in the past,
check whether the new resolver fixes them, and read Dealing with dependency conflicts. Also, let us know if the new resolver
has issues with any workarounds you put in to address the
current resolver’s limitations. We’ll need to ensure that people
can transition off such workarounds smoothly. -
If you develop or support a tool that wraps pip or uses it to
deliver part of your functionality, please test your integration
with pip 20.3.
-
-
Troubleshoot and try these workarounds if necessary.
-
If pip is taking longer to install packages, read Dependency
resolution backtracking for ways to
reduce the time pip spends backtracking due to dependency conflicts. -
If you don’t want pip to actually resolve dependencies, use the
--no-deps
option. This is useful when you have a set of package
versions that work together in reality, even though their metadata says
that they conflict. For guidance on a long-term fix, read
Dealing with dependency conflicts. -
If you run into resolution errors and need a workaround while you’re
fixing their root causes, you can choose the old resolver behavior using
the flag--use-deprecated=legacy-resolver
. This will work until we
release pip 21.0 (see
Deprecation timeline).
-
-
Please report bugs through the resolver testing survey.
Setups to test with special attention¶
-
Requirements files with 100+ packages
-
Installation workflows that involve multiple requirements files
-
Requirements files that include hashes (Hash-checking Mode)
or pinned dependencies (perhaps as output frompip-compile
within
pip-tools
) -
Using Constraints Files
-
Continuous integration/continuous deployment setups
-
Installing from any kind of version control systems (i.e., Git, Subversion, Mercurial, or CVS), per VCS Support
-
Installing from source code held in local directories
Examples to try¶
Install:
-
tensorflow
-
hacking
-
pycodestyle
-
pandas
-
tablib
-
elasticsearch
andrequests
together -
six
andcherrypy
together -
pip install flake8-import-order==0.17.1 flake8==3.5.0 --use-feature=2020-resolver
-
pip install tornado==5.0 sprockets.http==1.5.0 --use-feature=2020-resolver
Try:
-
pip install
-
pip uninstall
-
pip check
-
pip cache
Tell us about¶
Specific things we’d love to get feedback on:
-
Cases where the new resolver produces the wrong result,
obviously. We hope there won’t be too many of these, but we’d like
to trap such bugs before we remove the legacy resolver. -
Cases where the resolver produced an error when you believe it
should have been able to work out what to do. -
Cases where the resolver gives an error because there’s a problem
with your requirements, but you need better information to work out
what’s wrong. -
If you have workarounds to address issues with the current resolver,
does the new resolver let you remove those workarounds? Tell us!
Please let us know through the resolver testing survey.
Deprecation timeline¶
We plan for the resolver changeover to proceed as follows, using
Feature Flags and following our Release Cadence:
-
pip 20.1: an alpha version of the new resolver was available,
opt-in, using the optional flag
--unstable-feature=resolver
. pip defaulted to legacy
behavior. -
pip 20.2: a beta of the new resolver was available, opt-in, using
the flag--use-feature=2020-resolver
. pip defaulted to legacy
behavior. Users of pip 20.2 who want pip to default to using the
new resolver can runpip config set global.use-feature
(for more on that and the alternate
2020-resolver
PIP_USE_FEATURE
environment variable option, see issue
8661). -
pip 20.3: pip defaults to the new resolver in Python 3 environments,
but a user can opt-out and choose the old resolver behavior,
using the flag--use-deprecated=legacy-resolver
. In Python 2
environments, pip defaults to the old resolver, and the new one is
available using the flag--use-feature=2020-resolver
. -
pip 21.0: pip uses new resolver by default, and the old resolver is
no longer supported. It will be removed after a currently undecided
amount of time, as the removal is dependent on pip’s volunteer
maintainers’ availability. Python 2 support is removed per our
Python 2 Support policy.
Since this work will not change user-visible behavior described in the
pip documentation, this change is not covered by the Deprecation Policy.
Attention
The legacy resolver is deprecated and unsupported. New features, such
as Installation Report, will not work with the
legacy resolver and this resolver will be removed in a future
release.
Context and followup¶
As discussed in our announcement on the PSF blog, the pip team are
in the process of developing a new “dependency resolver” (the part of
pip that works out what to install based on your requirements).
We’re tracking our rollout in #6536 and you can watch for
announcements on the low-traffic packaging announcements list and
the official Python blog.
Using system trust stores for verifying HTTPS
This is now covered in HTTPS Certificates.
I often need to use the python package manager pip
to install a python package on my office computer that is behind a proxy. Without specifying the proxy info, it always pop up Connection refused
errors. Following settings and commands can be used to make ‘pip install’ work smoothly.
On Windows
You can manually set up proxy environment variables through right-click on This PC (Windows 10) or Computer (Widnows 7) –> Proporties –> Advanced system settings –> Environment variables then add environment variables:
-
User variable(only for current login user):
- Variable: HTTP_PROXY
- Value: http://proxyserver:port
and
- Variable: HTTPS_PROXY
- Value: https://proxyserver:port
-
System variable(all users):
- Variable: HTTP_PROXY
- Value: http://proxyserver:port
and
- Variable: HTTPS_PROXY
- Value: https://proxyserver:port
You can also set up the proxy through comand lines:
set http_proxy=http:<span>//[username:password@]proxyserver:port
set https_proxy=https<span>://[username:password@]proxyserver:port
After setting up proxies, then you can install packages through running:
Alternativelly, you can also specify proxy settings in the pip
command:
pip install --proxy=https<span>://[username:password@]proxyserver:port somepackage
On Linux
Set up the proxy through
export https_proxy=https<span>://[username:password@]proxyserver:port
and then install package:
or specify proxy in pip
command:
sudo pip install --proxy= https:<span>//[username:password@]proxyserver:port somepackage
Пройдите тест, узнайте какой профессии подходите
Работать самостоятельно и не зависеть от других
Работать в команде и рассчитывать на помощь коллег
Организовывать и контролировать процесс работы
Быстрый ответ
Чтобы сконфигурировать pip
для работы с прокси CNTLM, выполните следующие команды:
В Unix Shell:
В командной строке Windows (CMD):
Не забудьте подставить вместо 127.0.0.1:3128
адрес и порт вашего сервера прокси CNTLM. Это позволит pip
использовать прокси сервер для установки пакетов.

Настройка CNTLM и pip
Конфигурация CNTLM
Прежде чем начать использовать pip
, убедитесь в активности CNTLM. Обновите файл cntlm.ini
, указав ваши данные: домен, имя пользователя и хеш паролей. Корректность настроек можно проверить с помощью команды cntlm -I -M http://google.com
на Unix-системах или cntlm.exe -c cntlm.ini -I -M http://google.com
на Windows.
Защита данных пользователя
Считайте пароли секретной информацией, оберегайте их и не выставляйте напоказ. Чтобы хранить учетные данные в безопасности, преобразуйте пароли в виде хешей с помощью команды cntlm -H
и занесите их в файл cntlm.ini
. Если ваша организация требует сертификацию, добавьте корпоративный корневой сертификат в файл cacert.pem
.
Работа с переменными окружения
Переменные http_proxy
и https_proxy
облегчают использование опции --proxy
в pip
. При выполнении команд с sudo
используйте ключ -E
для сохранения значений этих переменных.
Настройка pip
Если вы регулярно работаете через прокси-сервер, целесообразнее будет сохранить соответствующие настройки в pip.conf
(для Unix) или pip.ini
(для Windows):
В этом конфигурационном файле укажите актуальный адрес и порт вашего сервера прокси CNTLM.
Устранение ошибок подключения
Если в процессе устанавливается сообщение об ошибке «Connection to proxy failed», перепроверьте файл cntlm.ini
. Если возникают проблемы с SSL, добавьте корпоративный корневой сертификат в cacert.pem
.
Обновление пакетов через прокси
Для обновления пакетов используйте команду pip install -U название_пакета
, убедившись заранее, что прокси-сервер корректно настроен.
Альтернативы CNTLM
Если вы столкнулись с проблемами при работе с CNTLM, рассмотрите возможность использования альтернатив, таких как файл .netrc
или инструкции по настройке на Windows и Ubuntu/Linux.
Визуализация
Вы можете представить работу pip
через прокси при помощи CNTLM следующим образом:
Или, если вам нагляднее метафора с метро:
Напомним, что CNTLM в данном случае — это ваш секретный путь, позволяющий обойти препятствия.
Профессиональные советы и хитрости
Секретность учетных данных
Используйте хеш-коды паролей для надежной защиты своих учетных данных.
Правильное использование прокси
Внимательно проверяйте синтаксис URI прокси, чтобы избежать ошибок.
Регулярное тестирование настроек
Не допускайте сбоев — периодически проверяйте настройки CNTLM.
Обновление pip
Своевременное обновление pip
гарантирует его безотказную работу. Используйте ключ -U
для обновления.
Отдельные прокси для разных сред
Если вы управляете несколькими проектами, настройте прокси для каждой из виртуальных сред по отдельности.
Полезные материалы
- Руководство пользователя pip v24.0.
- Официальный сайт CNTLM.
- Обсуждения и решения проблем с прокси на StackOverflow.
- Продвинутое использование прокси в Python Requests.
- Работа с Python через переменные окружения.
- Безопасное хранение учетных данных при помощи .netrc.
Provide feedback
Saved searches
Use saved searches to filter your results more quickly
Sign up
When working with Python on Windows, it is common to use pip, the package installer for Python, to manage and install packages. However, if you are behind an authenticating proxy, you may encounter difficulties when trying to use pip. In this article, we will explore how to configure pip to work seamlessly with an authenticating proxy on Windows.
Understanding the Problem
An authenticating proxy is a server that requires users to authenticate themselves before granting access to the internet. This is often the case in corporate environments where internet access is restricted. When pip tries to connect to the internet through an authenticating proxy, it fails to authenticate and therefore cannot download and install packages.
Configuring pip for an Authenticating Proxy
To configure pip to work with an authenticating proxy on Windows, you need to set the appropriate environment variables. Here are the steps:
- Open the Command Prompt by pressing the Windows key + R, then typing “cmd” and pressing Enter.
- Set the HTTP_PROXY and HTTPS_PROXY environment variables to the URL of your proxy server. For example:
set HTTP_PROXY=http://username:password@proxyserver:port set HTTPS_PROXY=http://username:password@proxyserver:port
Replace “username” and “password” with your actual credentials for the proxy server, and “proxyserver” and “port” with the appropriate values for your environment.
- Verify that the environment variables are set correctly by running the following command:
echo %HTTP_PROXY% echo %HTTPS_PROXY%
You should see the URLs of your proxy server printed on the screen.
- Now, when you use pip, it will automatically use the proxy settings specified in the environment variables. For example, to install the requests package, simply run:
pip install requests
Pip will now be able to download and install packages through the authenticating proxy without any issues.
Configuring pip to work with an authenticating proxy on Windows is essential for developers working in restricted network environments. By following the steps outlined in this article, you can ensure that pip seamlessly connects to the internet through the proxy server, allowing you to install and manage Python packages without any hassle.
Example 1: Installing a package using pip with an authenticating proxy
If you are behind an authenticating proxy and want to install a package using pip, you can specify the proxy settings using the –proxy flag. Here’s an example:
pip install --proxy=username:password@proxy_server:port package_name
In the above command, replace username
and password
with your proxy credentials, proxy_server
with the address of your proxy server, and port
with the port number used by the proxy server. Finally, replace package_name
with the name of the package you want to install.
Example 2: Setting up proxy environment variables
If you frequently use pip behind an authenticating proxy, it can be cumbersome to specify the proxy settings every time. Instead, you can set up environment variables to store the proxy information. Here’s an example:
set http_proxy=username:password@proxy_server:port set https_proxy=username:password@proxy_server:port
In the above commands, replace username
, password
, proxy_server
, and port
with your actual proxy credentials and server information. Once the environment variables are set, you can simply use pip install package_name
without specifying the proxy settings.
Reference links:
- Official pip documentation on using pip behind a proxy
- Stack Overflow thread on using pip behind an authenticating proxy
Conclusion:
Using pip on Windows with an authenticating proxy can be a bit tricky, but it is possible to overcome the challenges. By specifying the proxy settings using the –proxy flag or setting up environment variables, you can successfully install packages using pip. It is important to ensure that you have the correct proxy credentials and server information to avoid any authentication errors. Additionally, referring to official documentation and seeking help from online communities like Stack Overflow can provide valuable insights and solutions to common issues encountered when using pip with an authenticating proxy.