feat: pixi support (#85)

feat: implement support for pixi

Pixi is a drop-in replacement for conda

See https://pixi.prefix.dev/

Author: sgaist

build.go

@@ -14,6 +14,7 @@ import (
 	miniconda "github.com/paketo-buildpacks/python-installers/pkg/installers/miniconda"
 	pip "github.com/paketo-buildpacks/python-installers/pkg/installers/pip"
 	pipenv "github.com/paketo-buildpacks/python-installers/pkg/installers/pipenv"
+	pixi "github.com/paketo-buildpacks/python-installers/pkg/installers/pixi"
 	poetry "github.com/paketo-buildpacks/python-installers/pkg/installers/poetry"
 	uv "github.com/paketo-buildpacks/python-installers/pkg/installers/uv"
 
@@ -36,7 +37,14 @@ func Build(
 
 		var results []packit.BuildResult
 
-		orderedInstallers := []string{pip.Pip, pipenv.Pipenv, poetry.PoetryDependency, miniconda.Conda, uv.Uv}
+		orderedInstallers := []string{
+			pip.Pip,
+			pipenv.Pipenv,
+			poetry.PoetryDependency,
+			miniconda.Conda,
+			uv.Uv,
+			pixi.Pixi,
+		}
 
 		doneInstallers := []string{}
 
@@ -110,6 +118,17 @@ func Build(
 						}
 						results = append(results, result)
 
+					case pixi.Pixi:
+						result, err := pixi.Build(
+							parameters.(pixi.PixiBuildParameters),
+							commonBuildParameters,
+						)(context)
+
+						if err != nil {
+							return packit.BuildResult{}, err
+						}
+						results = append(results, result)
+
 					default:
 						return packit.BuildResult{}, packit.Fail.WithMessage("unknown plan: %s", entry.Name)
 					}

build_test.go

@@ -29,6 +29,8 @@ import (
 	pipfakes "github.com/paketo-buildpacks/python-installers/pkg/installers/pip/fakes"
 	pipenv "github.com/paketo-buildpacks/python-installers/pkg/installers/pipenv"
 	pipenvfakes "github.com/paketo-buildpacks/python-installers/pkg/installers/pipenv/fakes"
+	pixi "github.com/paketo-buildpacks/python-installers/pkg/installers/pixi"
+	pixifakes "github.com/paketo-buildpacks/python-installers/pkg/installers/pixi/fakes"
 	poetry "github.com/paketo-buildpacks/python-installers/pkg/installers/poetry"
 	poetryfakes "github.com/paketo-buildpacks/python-installers/pkg/installers/poetry/fakes"
 	uv "github.com/paketo-buildpacks/python-installers/pkg/installers/uv"
@@ -83,6 +85,10 @@ func testBuild(t *testing.T, context spec.G, it spec.S) {
 		uvDependencyManager *uvfakes.DependencyManager
 		uvInstallProcess    *uvfakes.InstallProcess
 
+		// pixi
+		pixiDependencyManager *pixifakes.DependencyManager
+		pixiInstallProcess    *pixifakes.InstallProcess
+
 		buildParameters pkgcommon.CommonBuildParameters
 
 		testPlans []TestPlan
@@ -251,6 +257,34 @@ func testBuild(t *testing.T, context spec.G, it spec.S) {
 
 		uvInstallProcess = &uvfakes.InstallProcess{}
 
+		// pixi
+		pixiDependencyManager = &pixifakes.DependencyManager{}
+		pixiDependencyManager.ResolveCall.Returns.Dependency = postal.Dependency{
+			ID:       "pixi",
+			Name:     "pixi-dependency-name",
+			Checksum: "pixi-dependency-sha",
+			Stacks:   []string{"some-stack"},
+			URI:      "pixi-dependency-uri",
+			Version:  "pixi-dependency-version",
+		}
+
+		// Legacy SBOM
+		pixiDependencyManager.GenerateBillOfMaterialsCall.Returns.BOMEntrySlice = []packit.BOMEntry{
+			{
+				Name: "pixi",
+				Metadata: paketosbom.BOMMetadata{
+					Checksum: paketosbom.BOMChecksum{
+						Algorithm: paketosbom.SHA256,
+						Hash:      "pixi-dependency-sha",
+					},
+					URI:     "pixi-dependency-uri",
+					Version: "pixi-dependency-version",
+				},
+			},
+		}
+
+		pixiInstallProcess = &pixifakes.InstallProcess{}
+
 		buildParameters = pkgcommon.CommonBuildParameters{
 			SbomGenerator: pkgcommon.Generator{},
 			Clock:         chronos.DefaultClock,
@@ -272,6 +306,10 @@ func testBuild(t *testing.T, context spec.G, it spec.S) {
 				InstallProcess:     pipenvProcess,
 				SitePackageProcess: pipenvSitePackageProcess,
 			},
+			pixi.Pixi: pixi.PixiBuildParameters{
+				DependencyManager: pixiDependencyManager,
+				InstallProcess:    pixiInstallProcess,
+			},
 			poetry.PoetryDependency: poetry.PoetryBuildParameters{
 				DependencyManager:  poetryDependencyManager,
 				InstallProcess:     poetryProcess,
@@ -350,6 +388,16 @@ func testBuild(t *testing.T, context spec.G, it spec.S) {
 				},
 				1,
 			},
+			{
+				packit.BuildpackPlan{
+					Entries: []packit.BuildpackPlanEntry{
+						{
+							Name: pixi.Pixi,
+						},
+					},
+				},
+				1,
+			},
 			{
 				packit.BuildpackPlan{
 					Entries: []packit.BuildpackPlanEntry{
@@ -380,6 +428,7 @@ func testBuild(t *testing.T, context spec.G, it spec.S) {
 		Expect(os.WriteFile(filepath.Join(workingDir, "x.py"), []byte{}, os.ModePerm)).To(Succeed())
 		Expect(os.WriteFile(filepath.Join(workingDir, "pyproject.toml"), []byte(""), 0755)).To(Succeed())
 		Expect(os.WriteFile(filepath.Join(workingDir, "uv.lock"), []byte(`python-requires = "3.13.0"`), 0755)).To(Succeed())
+		Expect(os.WriteFile(filepath.Join(workingDir, "pixi.lock"), []byte(``), 0755)).To(Succeed())
 	})
 
 	it("runs the build process and returns expected layers", func() {

buildpack.toml

@@ -363,6 +363,66 @@ api = "0.8"
     uri = "https://github.com/astral-sh/uv/releases/download/0.10.4/uv-aarch64-unknown-linux-gnu.tar.gz"
     version = "0.10.4"
 
+  [[metadata.dependencies]]
+    "arch" = "amd64"
+    "checksum" = "sha256:9333a89567e8235881b9357b35585f4b4da6255e100235559dbb4702f3c6d97c"
+    "cpe" = "cpe:2.3:a:pixi:pixi:0.62.2:*:*:*:*:python:*:*"
+    "purl" = "pkg:generic/pixi@0.62.2?checksum=sha256:0ed1f3796dc5cb6ba9ce4f3b1250b1ef8bf57202ce869bec68563861a8c627c2&download_url=https://github.com/prefix-dev/pixi/releases/download/v0.62.2/source.tar.gz"
+    "id" = "pixi"
+    "licenses" = ["BSD-3-Clause"]
+    "name" = "pixi"
+    "os" = "linux"
+    "source" = "https://github.com/prefix-dev/pixi/releases/download/v0.62.2/source.tar.gz"
+    "source-checksum" = "sha256:0ed1f3796dc5cb6ba9ce4f3b1250b1ef8bf57202ce869bec68563861a8c627c2"
+    "stacks" = ["*"]
+    "uri" = "https://github.com/prefix-dev/pixi/releases/download/v0.62.2/pixi-x86_64-unknown-linux-musl.tar.gz"
+    "version" = "0.62.2"
+
+  [[metadata.dependencies]]
+    "arch" = "arm64"
+    "checksum" = "sha256:a21b55d9fd37ba9c8cbee335bff952e5e7022729dd6ff5b127aa2d7fad065b4d"
+    "cpe" = "cpe:2.3:a:pixi:pixi:0.62.2:*:*:*:*:python:*:*"
+    "purl" = "pkg:generic/pixi@0.62.2?checksum=sha256:0ed1f3796dc5cb6ba9ce4f3b1250b1ef8bf57202ce869bec68563861a8c627c2&download_url=https://github.com/prefix-dev/pixi/releases/download/v0.62.2/source.tar.gz"
+    "id" = "pixi"
+    "licenses" = ["BSD-3-Clause"]
+    "name" = "pixi"
+    "os" = "linux"
+    "source" = "https://github.com/prefix-dev/pixi/releases/download/v0.62.2/source.tar.gz"
+    "source-checksum" = "sha256:0ed1f3796dc5cb6ba9ce4f3b1250b1ef8bf57202ce869bec68563861a8c627c2"
+    "stacks" = ["*"]
+    "uri" = "https://github.com/prefix-dev/pixi/releases/download/v0.62.2/pixi-aarch64-unknown-linux-musl.tar.gz"
+    "version" = "0.62.2"
+
+  [[metadata.dependencies]]
+    "arch" = "amd64"
+    "checksum" = "sha256:b2a9e26bb6c80fe00618a02e7198dec222e1fbcec61e04c11b6e6538089ab100"
+    "cpe" = "cpe:2.3:a:pixi:pixi:0.63.2:*:*:*:*:python:*:*"
+    "purl" = "pkg:generic/pixi@0.63.2?checksum=sha256:d63846f1ed0164a4c2f8d7f25263111e9c557604a4195f4bf4b351567ae4fb8f&download_url=https://github.com/prefix-dev/pixi/releases/download/v0.63.2/source.tar.gz"
+    "id" = "pixi"
+    "licenses" = ["BSD-3-Clause"]
+    "name" = "pixi"
+    "os" = "linux"
+    "source" = "https://github.com/prefix-dev/pixi/releases/download/v0.63.2/source.tar.gz"
+    "source-checksum" = "sha256:d63846f1ed0164a4c2f8d7f25263111e9c557604a4195f4bf4b351567ae4fb8f"
+    "stacks" = ["*"]
+    "uri" = "https://github.com/prefix-dev/pixi/releases/download/v0.63.2/pixi-x86_64-unknown-linux-musl.tar.gz"
+    "version" = "0.63.2"
+
+  [[metadata.dependencies]]
+    "arch" = "arm64"
+    "checksum" = "sha256:dbde6dbc2806602171e17305ce005e1aed519f2f2461a7cafd0093e92b7e7681"
+    "cpe" = "cpe:2.3:a:pixi:pixi:0.63.2:*:*:*:*:python:*:*"
+    "purl" = "pkg:generic/pixi@0.63.2?checksum=sha256:d63846f1ed0164a4c2f8d7f25263111e9c557604a4195f4bf4b351567ae4fb8f&download_url=https://github.com/prefix-dev/pixi/releases/download/v0.63.2/source.tar.gz"
+    "id" = "pixi"
+    "licenses" = ["BSD-3-Clause"]
+    "name" = "pixi"
+    "os" = "linux"
+    "source" = "https://github.com/prefix-dev/pixi/releases/download/v0.63.2/source.tar.gz"
+    "source-checksum" = "sha256:d63846f1ed0164a4c2f8d7f25263111e9c557604a4195f4bf4b351567ae4fb8f"
+    "stacks" = ["*"]
+    "uri" = "https://github.com/prefix-dev/pixi/releases/download/v0.63.2/pixi-aarch64-unknown-linux-musl.tar.gz"
+    "version" = "0.63.2"
+
   [[metadata.dependency-constraints]]
     constraint = "*"
     id = "miniconda3"
@@ -413,6 +473,11 @@ api = "0.8"
     id = "uv"
     patches = 2
 
+  [[metadata.dependency-constraints]]
+    constraint = "*"
+    id = "pixi"
+    patches = 2
+
 [[stacks]]
   id = "*"
 

dependency/retrieval/main.go

@@ -55,6 +55,7 @@ func (release PyPiRelease) Version() *semver.Version {
 }
 
 func getAllVersionsForInstaller(installer string) retrieve.GetAllVersionsFunc {
+	fmt.Printf("Handling: %s\n", installer)
 	if installer == "miniconda3" {
 		return getAllMinicondaVersions
 	}
@@ -63,6 +64,10 @@ func getAllVersionsForInstaller(installer string) retrieve.GetAllVersionsFunc {
 		return getAllUvVersions
 	}
 
+	if installer == "pixi" {
+		return getAllPixiVersions
+	}
+
 	return func() (versionology.VersionFetcherArray, error) {
 
 		var pypiMetadata PyPiProductMetadataRaw
@@ -349,7 +354,7 @@ func generateMinicondaMetadata(versionFetcher versionology.VersionFetcher) ([]ve
 	}}, nil
 }
 
-type UvRelease struct {
+type GitHubRelease struct {
 	version      *semver.Version
 	Arch         string
 	SourceURL    string
@@ -359,15 +364,15 @@ type UvRelease struct {
 	BinarySHA256 string
 }
 
-func (release UvRelease) Version() *semver.Version {
+func (release GitHubRelease) Version() *semver.Version {
 	return release.version
 }
 
-func getAllUvVersions() (versionology.VersionFetcherArray, error) {
+func getGitHubVersions(org string, project string, archAsset string) (versionology.VersionFetcherArray, error) {
 	client := github.NewClient(nil)
 
-	opt := &github.ListOptions{Page: 1, PerPage: 2}
-	releases, _, err := client.Repositories.ListReleases(context.Background(), "astral-sh", "uv", opt)
+	opt := &github.ListOptions{Page: 1, PerPage: 4}
+	releases, _, err := client.Repositories.ListReleases(context.Background(), org, project, opt)
 
 	if err != nil {
 		return nil, err
@@ -376,7 +381,7 @@ func getAllUvVersions() (versionology.VersionFetcherArray, error) {
 	var result versionology.VersionFetcherArray
 
 	for _, release := range releases {
-		version, err := semver.NewVersion(*release.Name)
+		version, err := semver.NewVersion(*release.TagName)
 		if err != nil {
 			return nil, err
 		}
@@ -394,14 +399,12 @@ func getAllUvVersions() (versionology.VersionFetcherArray, error) {
 			return nil, errors.New("Failed to find source asset")
 		}
 
-		archAsset := "uv-%s-unknown-linux-gnu.tar.gz"
-
 		for inArch, outArch := range ArchMap {
 			assetName := fmt.Sprintf(archAsset, inArch)
 			for _, asset := range release.Assets {
 				if *asset.Name == assetName {
 					result = append(result,
-						UvRelease{
+						GitHubRelease{
 							version:      version,
 							Arch:         outArch,
 							BinaryURL:    *asset.BrowserDownloadURL,
@@ -419,11 +422,15 @@ func getAllUvVersions() (versionology.VersionFetcherArray, error) {
 	return result, nil
 }
 
+func getAllUvVersions() (versionology.VersionFetcherArray, error) {
+	return getGitHubVersions("astral-sh", "uv", "uv-%s-unknown-linux-gnu.tar.gz")
+}
+
 func generateUvMetadata(versionFetcher versionology.VersionFetcher) ([]versionology.Dependency, error) {
 	version := versionFetcher.Version().String()
-	uvRelease, ok := versionFetcher.(UvRelease)
+	uvRelease, ok := versionFetcher.(GitHubRelease)
 	if !ok {
-		return nil, errors.New("expected a UvRelease")
+		return nil, errors.New("expected a GitHubRelease")
 	}
 
 	var licenseIDsAsInterface []interface{}
@@ -450,6 +457,43 @@ func generateUvMetadata(versionFetcher versionology.VersionFetcher) ([]versionol
 	}}, nil
 }
 
+func getAllPixiVersions() (versionology.VersionFetcherArray, error) {
+	return getGitHubVersions("prefix-dev", "pixi", "pixi-%s-unknown-linux-musl.tar.gz")
+}
+
+func generatePixiMetadata(versionFetcher versionology.VersionFetcher) ([]versionology.Dependency, error) {
+	version := versionFetcher.Version().String()
+	pixiRelease, ok := versionFetcher.(GitHubRelease)
+	if !ok {
+		return nil, errors.New("expected a GitHubRelease")
+	}
+
+	fmt.Printf("version: %s\n", version)
+
+	var licenseIDsAsInterface []interface{}
+	licenseIDsAsInterface = append(licenseIDsAsInterface, "BSD-3-Clause")
+	configMetadataDependency := cargo.ConfigMetadataDependency{
+		CPE:            fmt.Sprintf("cpe:2.3:a:pixi:pixi:%s:*:*:*:*:python:*:*", version),
+		Checksum:       pixiRelease.BinarySHA256,
+		ID:             "pixi",
+		Licenses:       licenseIDsAsInterface,
+		Name:           "pixi",
+		OS:             "linux",
+		Arch:           pixiRelease.Arch,
+		PURL:           retrieve.GeneratePURL("pixi", version, pixiRelease.SourceSHA256, pixiRelease.SourceURL),
+		Source:         pixiRelease.SourceURL,
+		SourceChecksum: pixiRelease.SourceSHA256,
+		Stacks:         []string{"*"},
+		URI:            pixiRelease.BinaryURL,
+		Version:        version,
+	}
+
+	return []versionology.Dependency{{
+		ConfigMetadataDependency: configMetadataDependency,
+		SemverVersion:            versionFetcher.Version(),
+	}}, nil
+}
+
 // Taken from libdependency.retrieve.retrieval
 // https://github.com/joshuatcasey/libdependency/blob/main/retrieve/retrieval.go
 func toWorkflowJson(item any) (string, error) {
@@ -492,6 +536,7 @@ func main() {
 		"poetry":     generatePoetryMetadata,
 		"miniconda3": generateMinicondaMetadata,
 		"uv":         generateUvMetadata,
+		"pixi":       generatePixiMetadata,
 	}
 
 	var dependencies []versionology.Dependency

detect.go

@@ -12,6 +12,7 @@ import (
 	miniconda "github.com/paketo-buildpacks/python-installers/pkg/installers/miniconda"
 	pip "github.com/paketo-buildpacks/python-installers/pkg/installers/pip"
 	pipenv "github.com/paketo-buildpacks/python-installers/pkg/installers/pipenv"
+	pixi "github.com/paketo-buildpacks/python-installers/pkg/installers/pixi"
 	poetry "github.com/paketo-buildpacks/python-installers/pkg/installers/poetry"
 	uv "github.com/paketo-buildpacks/python-installers/pkg/installers/uv"
 )
@@ -65,6 +66,14 @@ func Detect(logger scribe.Emitter, pyProjectParser poetry.PyProjectParser) packi
 			logger.Detail("%s", err)
 		}
 
+		pixiResult, err := pixi.Detect()(context)
+
+		if err == nil {
+			plans = append(plans, pixiResult.Plan)
+		} else {
+			logger.Detail("%s", err)
+		}
+
 		if len(plans) == 0 {
 			return packit.DetectResult{}, packit.Fail.WithMessage("No python packager manager related files found")
 		}