Poetry

Same old stuff

• as with many so-called modern tools, solutions take a back seat to gloss
  • composability also suffers

Install

• recommended install of poetry itself is to a venv (makes sense) but you must not activate that venv
  • this violates the principle of least astonishment, especially when poetry then breezily installs app requirements into its own venv

Solution

• install all poetry commands (in practice just one, also called poetry) using motivate -S poetry where motivate is provided by venvpool
  • the poetry command (in ~/.local/bin) will then create/use a suitable venv for itself just-in-time
  • you can specify version constraints e.g. motivate -S 'poetry>=1.8,<2'
    • use -f to overwrite existing command

Keyring

• downloading packages from pypi is anonymous, but poetry tries to unlock your keyring to do so, and hangs if you refuse
• to fix you can do poetry config keyring.enabled false
  • but according to the docs, this causes credentials to be stored in plaintext which is replacing one problem with a time bomb