deploying python applications

Question

Is it possible to deploy python applications such that you don't release the source code and you don't have to be sure the customer has python installed?

I'm thinking maybe there is some installation process that can run a python app from just the .pyc files and a shared library containing the interpreter or something like that?

Basically I'm keen to get the development benefits of a language like Python - high productivity etc. but can't quite see how you could deploy it professionally to a customer where you don't know how there machine is set up and you definitely can't deliver the source.

How do professional software houses developing in python do it (or maybe the answer is that they don't) ?

PS I am aware of py2exe and all that stuff but it seems like a hack type of solution, e.g. a bit inelegant to have to compile in the whole interpreter every time you write an app — bph
– bph, Commented Feb 23, 2012 at 21:12
Read this question for inspiration: stackoverflow.com/questions/2678180/… — Fred Foo
– Fred Foo, Commented Feb 23, 2012 at 21:17
is there another similar language that can be compiled to native binary? D perhaps? Would be good to have a language with bindings to a popular GUI package like widgets or qt as well — bph
– bph, Commented Feb 23, 2012 at 21:23

vitaut · Accepted Answer · 2012-11-28 16:46:58Z

19

You protect your source code legally, not technologically. Distributing py files really isn't a big deal. The only technological solution here is not to ship your program (which is really becoming more popular these days, as software is provided over the internet rather than fully installed locally more often.)
If you don't want the user to have to have Python installed but want to run Python programs, you'll have to bundle Python. Your resistance to doing so seems quite odd to me. Java programs have to either bundle or anticipate the JVM's presence. C programs have to either bundle or anticipate libc's presence (usually the latter), etc. There's nothing hacky about using what you need.
Professional Python desktop software bundles Python, either through something like py2exe/cx_Freeze/some in-house thing that does the same thing or through embedding Python (in which case Python comes along as a library rather than an executable). The former approach is usually a lot more powerful and robust.

edited Nov 28, 2012 at 16:46

vitaut

57.4k31 gold badges232 silver badges409 bronze badges

answered Feb 23, 2012 at 21:21

Mike Graham

77.2k16 gold badges105 silver badges131 bronze badges

Sign up to request clarification or add additional context in comments.

9 Comments

bph Over a year ago

not really resistant - just trying to think through the options, particularly what is least hassle for the customer. by bundling do you mean provide the customer with a python installer for their platform and tell them to install it before running our code?

bph Over a year ago

there are instances where you have to be careful about protecting source from a technological viewpoint, e.g. defence sector.

Mike Graham Over a year ago

@Hiett, I believe your remark "there are instances where you have to be careful about protecting source from a technological viewpoint, e.g. defence sector." is wrong-headed and dangerous. Shipping your program trying to hide your source is a failing proposition. Your non-source distribution can always be decompiled or otherwise edited or re-used, and decompiling is especially trivial in Python. In security-critical industries such as defense, it is even more important not to have security holes like that. The only technological solution is not to give the program to someone at all.

John Y Over a year ago

@Hiett: When you use something like py2exe, you aren't exactly "asking the user to install Python". You're asking the user to install your software... which happens to include Python. As I thought Mike made very clear with point 2, all software needs some kind of runtime. The Java example is especially telling. Who would call Java an "unprofessional" language? Yet Java software routinely comes bundled with a Java runtime environment (which the installer installs for you as necessary), and that JRE is vastly bigger than Python!

cha0site Over a year ago

@Hiett: That's a different question, one that has to do with package management. On Windows, AFAIK, Python is not available as a merge module you can include in your MSI, but it is available as an MSI so at the very least you can silently install it. On Linux, you can usually assume Python is present... Though it may be outdated.

|

Oleh Prypin · Accepted Answer · 2012-02-23 21:16:35Z

8

Yes, it is possible to make installation packages. Look for py2exe, cx_freeze and others.

No, it is not possible to keep the source code completely safe. There are always ways to decompile.
Original source code can trivially be obtained from .pyc files if someone wants to do it. Code obfuscation would make it more difficult to do something with the code.

answered Feb 23, 2012 at 21:16

Oleh Prypin

34.3k11 gold badges94 silver badges100 bronze badges

Comments

eestrada · Accepted Answer · 2015-08-17 23:40:55Z

I am surprised no one mentioned this before now, but Cython seems like a viable solution to this problem. It will take your Python code and transpile it into CPython compatible C code. You also get a small speed boost (~25% last I checked) since it will be compiled to native machine code instead of just Python byte code. You still need to be sure the user has Python installed (either by making it a pre-requisite pushed off onto the user to deal with, or bundling it as part of the installer process). Also, you do need to have at least one small part of your application in pure Python: the hook into the main function.

So you would need something basic like this:

import cython_compiled_module

if __name__ == '__main__':
    cython_compiled_module.main()

But this effectively leaks no implementation details. I think using Cython should meet the criteria in the question, but it also introduces the added complexity of compiling in C, which loses some of Python's easy cross-platform nature. Whether that is worth it or not is up to you.

As others stated, even the resulting compiled C code could be decompiled with a little effort, but it is likely much more close to the type of obfuscation you were initially hoping for.

cha0site · Accepted Answer · 2012-02-23 21:15:56Z

3

Well, it depends what you want to do. If by "not releasing the source code" you mean "the customer should not be able to access the source code in any way", well, you're fighting a losing battle. Even programs written in C can be reverse engineered, after all. If you're afraid someone will steal from you, make them sign a contract and sue them if there's trouble.

But if you mean "the customer should not care about python files, and not be able to casually access them", you can use a solution like cx_Freeze to turn your Python application into an executable.

answered Feb 23, 2012 at 21:15

cha0site

10.8k3 gold badges36 silver badges52 bronze badges

Comments

Matt Alcock · Accepted Answer · 2012-02-23 21:15:29Z

1

Build a web application in python. Then the world can use it via a browser with zero install.

answered Feb 23, 2012 at 21:15

Matt Alcock

13k15 gold badges49 silver badges61 bronze badges

3 Comments

bph Over a year ago

we're not developing web apps - if only it were that easy

John Y Over a year ago

@Hiett: More and more of what used to only be possible as "desktop" software is now available as Web software. Are you sure what you're doing can't be done as a Web app?

Mad Hatter Over a year ago

LOL... how many people think there's only the client - if you develop a web app (or any server-side app) in Python, and want to sell it, and don't want to release the whole source code, what do you do? Write another web (server) app? C'mon...

Collectives™ on Stack Overflow

deploying python applications

5 Answers 5

9 Comments

Comments

Comments

Comments

3 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

5 Answers 5

9 Comments

Comments

Comments

Comments

3 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related