Document how to disable keyring for users who might want to

[pradyunsg]

It'd probably be useful to add something like the following to our documentation. Borrowing from twine:

Disabling Keyring
^^^^^^^^^^^^^^^^^

In some cases, the presence of keyring may be problemmatic. To disable
keyring and defer to a prompt for passwords, uninstall ``keyring``
or if that's not an option, you can also configure keyring to be disabled.

See `twine 338 <https://github.com/pypa/twine/issues/338>`_ for a
discussion on ways to do that.

[pfmoore]

+1, although I'd prefer it if we documented "how to disable keyring" rather than linking to an ongoing discussion. Let's wait for the discussion to complete and document the conclusions it comes to.

[pradyunsg]

I prefer that too, though I think we can follow up with prose describing the final conclusions later -- it needs someone to convert the discussion there to prose. Until then, linking to the issue is better than doing nothing. :)

[SharatChandar]

Hi, Can i take this up ?

[pradyunsg]

@SharatChandar Sure! We'd probably start by adding the above text to the user guide (the relevant file is in docs/html).

I'll leave it to your judgment to determine where in the file/document, to add this section.

Feel free to mention me if you need any help. :)

[SharatChandar]

@pradyunsg I have a query. Should i document the entire twine discussion or provide a link to the discussion like twine ? Also check this jaraco/keyring#340 and let me know if i should include these.

[pradyunsg]

Documenting the ways to disable would be ideal.

Providing a link to the discussion would work too, but someone would have to come and change that into a discussion later. If you're willing to write a discussion, that'd be great!

The keyring PR seems like a great approach to disable keyring. We should definitely document that.

[SharatChandar]

Keyring in certain cases can prevent the installing of certain packages and modules due to authentication errors. In such cases disabling the keyring is recommended.Keyring can be manually uninstalled but doing so may invalidate other packages that depends on Keyring.

How to disable the keyring
Method 1 :
Set the default keyring password to blank. This will make the keyring accessible without a password.

Method 2 :
keyring could also be disabled by removing the exceute permission from the daemon

@pradyunsg Should i include some other methods too or will this do ?

[pfmoore]

@SharatChandar You should probably consider cross-platform here. I'm not aware of a keyring "daemon" on Windows (or a service, which would be the equivalent there), so your "Method 2" would make no sense to a Windows user.

[SharatChandar]

@pfmoore Oh Sorry am new to this. I ll keep a cross platform approach going forward.

[pfmoore]

No problem, no-one can think of all this stuff, that's why it's worth asking for feedback the way you did :-)

[pradyunsg]

@SharatChandar I think we should suggest to users to set environment variable PYTHON_KEYRING_BACKEND to keyring.backends.null.Keyring. That disables keyring (the Python package).

We don't want users disabling the OS keyring password, since that is less secure.

[pradyunsg]

To see more about why I suggest that, see the documentation in the commit that closed jaraco/keyring#340 -- jaraco/keyring@5a887c1.

[SharatChandar]

Python keyring by default is set to null.

keyring can be disabled via command line using '--disable'.

Environments may disable keyring by setting PYTHON_KEYRING_BACKEND to keyring.backends.null.Keyring in the config file.

@pradyunsg these are the methods provided by jaraco to disable keyring. Will it be sufficient to document these ?