b19/python
Watch
2
0
Fork
You've already forked python
 0
Code Issues Pull requests Projects Releases 15 Packages 4 Wiki Activity Actions
CPython compiled from source with pre-activated venv and uv-first defaults — automatic uv sync and bytecode compilation.
407 commits 2 branches 16 tags 840 KiB
  • Shell 57.5%
  • Dockerfile 24.7%
  • Makefile 15.5%
  • Jinja 2.3%
Find a file
Exact
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Damián Búho 695fa6e87f
All checks were successful
published / release-tag (push) Successful in 1s
Details
published / runner-is-ready (push) Successful in 3s
Details
published / projectfile-is-valid (push) Successful in 4s
Details
published / source-is-compliant (push) Successful in 6s
Details
published / source-is-secure (push) Successful in 8s
Details
published / projectfile-is-ok (push) Successful in 3s
Details
published / source-passes-lint (push) Successful in 33s
Details
published / documentation-passes-lint (push) Successful in 48s
Details
published / image-is-built-3-13 (3.13, amd64) (push) Successful in 1m0s
Details
published / image-is-built-3-14 (3.14, amd64) (push) Successful in 1m15s
Details
published / image-is-built-3-15 (3.15, amd64) (push) Successful in 58s
Details
published / image-is-secure (3.13, amd64) (push) Successful in 11s
Details
published / container-is-verified (3.13, 3-13, amd64) (push) Successful in 34s
Details
published / image-is-secure (3.14, amd64) (push) Successful in 12s
Details
published / container-is-verified (3.15, 3-15, amd64) (push) Successful in 37s
Details
published / image-is-secure (3.15, amd64) (push) Successful in 12s
Details
published / container-is-verified (3.14, 3-14, amd64) (push) Successful in 37s
Details
published / image-is-published (3.13, dockerhub) (push) Successful in 2s
Details
published / image-is-published (3.13, kiota) (push) Successful in 4s
Details
published / image-is-published (3.14, dockerhub) (push) Successful in 3s
Details
published / image-is-published (3.14, kiota) (push) Successful in 5s
Details
published / image-is-published (3.15, dockerhub) (push) Successful in 3s
Details
published / image-is-published (3.15, kiota) (push) Successful in 5s
Details
published / release-is-published (push) Has been skipped
Details
published / release-notes-are-published (push) Has been skipped
Details
published / published (push) Successful in 0s
Details
chore(version): 0.11.0
2026-10-28 18:27:04 -03:00
.compose chore: init 2026-08-05 23:15:26 -03:00
.container fix(deps): bump uv to 0.13.6 2026-10-27 12:02:37 -03:00
.forgejo/workflows build(workflows): enable zstd in artifacts 2026-10-26 14:24:36 -03:00
.github/workflows build(workflows): enable zstd in artifacts 2026-10-26 14:24:36 -03:00
.makefile chore(makefile): sync m6e submodules 2026-10-26 15:56:37 -03:00
docs chore(docs): regen features 2026-10-26 04:14:43 -03:00
LICENSES chore: init 2026-08-05 23:15:26 -03:00
scaffold feat: add Python 3.15 series, drop 3.10 2026-10-09 17:17:38 -03:00
.claudeignore chore: sorting for claudeignore 2026-09-13 12:48:08 -03:00
.containerignore build: ignore .worktrees (oci/docker) 2026-09-29 23:59:09 -03:00
.dockerignore build: ignore .worktrees (oci/docker) 2026-09-29 23:59:09 -03:00
.gitattributes chore: clean j2 from attributes 2026-09-14 00:36:24 -03:00
.gitignore build: ignore .worktrees 2026-09-29 23:56:07 -03:00
.gitmodules build: hard .gitmodules before big refactoring of m6e 2026-09-02 18:39:52 -03:00
.grype.yaml chore(security): drop the pip-bundled include, now that the build strips the vendored SBOM 2026-08-19 12:23:12 -03:00
.trivyignore chore(security): drop the pip-bundled include, now that the build strips the vendored SBOM 2026-08-19 12:23:12 -03:00
.yamllint chore(makefile): sync m6e submodules 2026-09-18 00:18:57 -03:00
AGENTS.md feat(security): cut certifi bundles from the b19 distrust list 2026-10-20 21:09:13 -03:00
AI_POLICY.md chore(style): unify project naming schema 2026-09-13 14:45:04 -03:00
CITATION.cff chore(version): 0.11.0 2026-10-28 18:27:04 -03:00
CLAUDE.md chore: init 2026-08-05 23:15:26 -03:00
CODE_OF_CONDUCT.md chore(style): unify project naming schema 2026-09-13 14:45:04 -03:00
CODEOWNERS chore: init 2026-08-05 23:15:26 -03:00
CONTRIBUTING.md chore: regenerate contributing 2026-09-30 06:39:16 -03:00
Dockerfile feat: add Python 3.15 series, drop 3.10 2026-10-09 17:17:38 -03:00
lefthook.yaml chore: regenerate lefthook.yaml 2026-09-29 22:28:39 -03:00
LICENSE chore: init 2026-08-05 23:15:26 -03:00
Makefile feat(image): publish every series as a tag of one repository 2026-09-30 18:03:20 -03:00
osv-scanner.toml chore(security): drop the pip-bundled include, now that the build strips the vendored SBOM 2026-08-19 12:23:12 -03:00
projectfile.yaml chore(version): 0.11.0 2026-10-28 18:27:04 -03:00
README.md fix!: drop 3.12 series 2026-10-22 18:48:20 -03:00
SECURITY.md chore(style): unify project naming schema 2026-09-13 14:45:04 -03:00
SUPPORT.md feat(forge): declare and publish to GitHub 2026-09-15 16:10:42 -03:00

README.md

Español · Українська

B19 / Python

CPython compiled from source with pre-activated venv and uv-first defaults — automatic uv sync and bytecode compilation.

Stand with Ukraine Projectfile inside License PRs welcome REUSE compliance

Project status Last commit on GitHub Last commit on kiota.ch

Publish pipeline on GitHub Vulnerability audit on GitHub Dependency freshness on GitHub Analysis sweep on GitHub

Publish pipeline on kiota.ch Vulnerability audit on kiota.ch Dependency freshness on kiota.ch Analysis sweep on kiota.ch

Features

  • One certificate trust store for every Python TLS client
  • CPython built for speed
  • A ready virtual environment with uv

It also inherits the features of B19 / Ubuntu — see Features for the full list.

What this provides

  • Container image ghcr.io/damian-buho/b19/python:py3.13
  • Container image ghcr.io/damian-buho/b19/python:py3.14
  • Container image ghcr.io/damian-buho/b19/python:py3.15
  • Container image damianbuho/b19-python:py3.13
  • Container image damianbuho/b19-python:py3.14
  • Container image damianbuho/b19-python:py3.15

Installation

Pull the published container image:

Pull from GHCR — linux/amd64, linux/arm64

docker pull ghcr.io/damian-buho/b19/python:py3.13

Pull from DockerHub — linux/amd64

docker pull damianbuho/b19-python:py3.13

Series: py3.13 | py3.14 | py3.15

Stable releases also publish X.Y.Z, X.Y and X tags — pull the precision you want to pin.

If the registries above are unreachable, pull from the origin instead:

Pull from Kiota — linux/amd64

docker pull kiota.ch/b19/python:py3.13

Series: py3.13 | py3.14 | py3.15

Usage

Build on top of this image:

From GHCR

FROM ghcr.io/damian-buho/b19/python:py3.13

From DockerHub

FROM damianbuho/b19-python:py3.13

Series: py3.13 | py3.14 | py3.15

For the recommended multi-stage pattern and the build-hook system (build.d), scaffold a derivative with b19/scripts/scaffold.sh from m6e/b19.

Building

Clone the repository with its submodules:

git clone --recurse-submodules https://github.com/damian-buho/b19-python python && cd python

Build the container image locally:

make container-build

Run make with no arguments for the default target; run make help to list every target.

For the local dev loop, make dev-container brings up the dev-container.

Pipeline entry points:

  • make analyzed — Run the heavy analysis sweep (mutation testing, benchmarks)
  • make audited — Re-scan the pinned dependencies and published artifacts for new vulnerabilities
  • make check-outdated — Report every pinned dependency that lags upstream
  • make release-is-ready — Run the pseudo-CI pipeline locally — build, test and scan, without publishing

Policies

Links

License

This project is licensed under MIT — see the LICENSE file for details.