Pixi Private Packages with CloudRepo PyPI Index

[project]
name = "my-project"
version = "0.1.0"
channels = ["conda-forge"]
platforms = ["linux-64", "osx-arm64", "win-64"]

[dependencies]
python = "3.12.*"

[pypi-dependencies]
# Public packages come from PyPI. Each private package names the
# CloudRepo index, including the private packages it depends on.
acme-internal-sdk = { version = "*", index = "https://your-org.mycloudrepo.io/repositories/your-repo/simple/" }
acme-utils = { version = "*", index = "https://your-org.mycloudrepo.io/repositories/your-repo/simple/" }  # a private dependency of acme-internal-sdk

# Credentials go in ~/.netrc, not in pixi.toml. The login is the email
# address of the account that created the token.
# The subshell's umask keeps the file private from the moment it is created;
# >> adds the entry without replacing an existing ~/.netrc.
(umask 077 && printf 'machine your-org.mycloudrepo.io\nlogin you@example.com\npassword %s\n' \
  "$CLOUDREPO_TOKEN" >> ~/.netrc)
chmod 600 ~/.netrc

# Add a private PyPI package, pinned to CloudRepo, with its private
# dependencies in the same command: pixi installs at once, and a private
# dependency it meets unpinned comes from PyPI
pixi add --pypi acme-internal-sdk acme-utils --index https://your-org.mycloudrepo.io/repositories/your-repo/simple/

# Add with specific version
pixi add --pypi "acme-internal-sdk==2.3.0" --index https://your-org.mycloudrepo.io/repositories/your-repo/simple/

# Mix conda and PyPI packages
pixi add numpy pandas  # from conda-forge
pixi add --pypi acme-ml-lib --index https://your-org.mycloudrepo.io/repositories/your-repo/simple/  # from CloudRepo

# Install all dependencies
pixi install

# Run in isolated environment
pixi run python app.py

# Build your package with standard tools
python -m build

# Upload to CloudRepo using twine. twine reads its credential from these
# variables, so the token is not an argument. The username is the email
# address of the account that created the token.
export TWINE_USERNAME="you@example.com"
export TWINE_PASSWORD="$CLOUDREPO_TOKEN"
twine upload --non-interactive \
  --repository-url https://your-org.mycloudrepo.io/repositories/your-repo \
  dist/*