Repository navigation
Unable to access packaging.python.org #815
Description
Problem description
Hi there, I am trying to run "pip install flask" via cmd line, however it doesn't work. When I attempt to visit the packaging.python.org site, it tells me that I am being blocked and to contact the site admin with my CloudFlare ID (which I have).
I am not sure why exactly I am flagging. Would appreciate any input on how to get in touch with packaging.python.org.
Activity
merwok commentedon Sep 27, 2024
Spartan149 commentedon Sep 29, 2024
Hi there - thanks for the correction, it is indeed "pip".
The connections are to pythonhosted.org however I believe it seems to be working. This is my screenshot of my command line, when I ctrl-click on the "pythonhosted" link, it opens a tab, and auto prompts me to download a whl file, which then downloads. Not sure how this works with the message that is given to me in command line, as it say the hashes are incorrect:
merwok commentedon Sep 29, 2024
seeing this error message does not make sense, as you are not using a requirements file in the command you’re showing us
do you have a global pip config maybe? (see pip docs to find it)
Spartan149 commentedon Oct 1, 2024
Thanks for the reply again - I think the pythonhosted.org site is blocking me from visiting due to its Cloudflare settings which is disrupting my capacity to download the python files. When I attempt to visit the link highlighted in red text, it tells me that I have been blocked by the site register and to contact the site owner, quoting my Cloudflare ID number.
Don't suppose you know a way to contact the site admin, given that I cant access the site to submit an email form?
merwok commentedon Oct 1, 2024
pythonhosted is managed by the pypi admins, on behalf of the PSF.
You should close this ticket and open one there: https://github.com/pypi/support
Spartan149 commentedon Oct 2, 2024
Much obliged, I'll do that, cheers
webknjaz commentedon Nov 13, 2024
@merwok @Spartan149 that message does not indicate inability to connect to the host. It indicates
--require-hashesbeing in play. This would either be a pip-global setting (likely in the config) or an environment variablePIP_REQUIRE_HASHES. It could also be caused by the presence ofPIP_CONSTRAINT(and/orPIP_REQUIREMENT) pointing to a file having at least one--hash.This is probably an issue for the pip tracker, though.
pfmoore commentedon Nov 13, 2024
The user is saying that they tried to access the link directly, and got an error saying they had been blocked. That is a connectivity issue.
The hash error may be a separate issue, but the user should ensure that their network access is working first, as it won't be possible to do anything else until that is sorted.
webknjaz commentedon Nov 13, 2024
@pfmoore oh, I missed that. In one of the comment, they say that the in-browser download works (#815 (comment)) and then that it doesn't (#815 (comment)).
It seems to me that CF treats the client IP as suspicious, but not all the time.
Though, everything is going through Fastly, not CF, which makes me think that there's some weird traffic interception/rerouting in play on the user's site.
webknjaz commentedon Nov 13, 2024
Thinking more about it, it sounds like there's confusion, coming from @Spartan149 mentioning two different hosts.
I just remembered that
packaging.python.orgis indeed served by CF. But it's not configured on our side. It's a CNAME pointing to RTD:So it's Read The Docs that holds the configuration of CloudFlare that ultimately proxies traffic to said docs site and terminates TLS.
And the second one is the PyPI CDN that is terminated through Fastly:
So based on that, I think that the OP was confusing two entirely different cases and was referring to both interchangeably. And this would suggest that they couldn't access PyPUG because CF wants them to go through their CAPTCHA, while
pip installworks as expected on the networking level and has hash checking enabled somewhere, which adds to the confusion.