Self-host via uv with pinned pyinfra (#18)

* Self-host via uv with pinned pyinfra

Add a pyproject.toml + committed uv.lock so the repo boots with a single
`uv sync`, and switch CI and example commands to `uv run pyinfra`. pyinfra
is pinned to 3.7 via the lock file — bump with `uv lock --upgrade-package
pyinfra`.

* ci: pin actions to SHAs and set python 3.14

Pin actions/checkout, astral-sh/setup-uv, and docker/setup-buildx-action
to commit SHAs to mitigate supply chain risk, and pin uv's Python to 3.14.

Author: wowi42

.github/workflows/test.yaml

@@ -13,16 +13,18 @@ jobs:
             inventory-file: inventories/docker.py
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-python@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+      - uses: astral-sh/setup-uv@d4b2f3b6ecc6e67c4457f6d3e41ec42d3d0fcb86 # v5
         with:
-          python-version: "3.12"
-      - uses: docker/setup-buildx-action@v2
-      - run: pip install pyinfra --pre
+          enable-cache: true
+          python-version: "3.14"
+      - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
+      - name: Install pyinfra from uv.lock
+        run: uv sync --frozen
       - run: ./docker-start.sh
         working-directory: ${{ matrix.dir }}
       - name: Run pyinfra deploy
-        run: pyinfra -y ${{ matrix.inventory-file }} ${{ matrix.deploy-file }}
+        run: uv run pyinfra -y ${{ matrix.inventory-file }} ${{ matrix.deploy-file }}
         working-directory: ${{ matrix.dir }}
       - run: ./docker-stop.sh
         working-directory: ${{ matrix.dir }}

.gitignore

@@ -1 +1,4 @@
 .vagrant*
+.venv/
+__pycache__/
+*.py[cod]

README.md

@@ -2,6 +2,20 @@
 
 A set of documented & tested pyinfra deploys.
 
+## Getting started
+
+This repository is self-hosted with [uv](https://docs.astral.sh/uv/) — no global pyinfra install required. After installing uv:
+
+```sh
+# Create the virtualenv and install the pinned pyinfra version from uv.lock
+uv sync
+
+# Run pyinfra via uv (picks up the locked pyinfra automatically)
+uv run pyinfra --version
+```
+
+All example commands below can be prefixed with `uv run` — e.g. `uv run pyinfra inventories/docker.py deploy.py`.
+
 ## Complete Deploys
 
 ### [`python-web-app`](./python-web-app)

deploy-functions/README.md

@@ -4,11 +4,11 @@ Groups of operations can be defined within a Python function that can be re-used
 
 ```sh
 # Run deploy functions
-pyinfra @docker/ubuntu:22.04 deploy.install_base_packages
-pyinfra @docker/ubuntu:22.04 deploy.setup_nginx
+uv run pyinfra @docker/ubuntu:22.04 deploy.install_base_packages
+uv run pyinfra @docker/ubuntu:22.04 deploy.setup_nginx
 
 # Run the combined, undecorated function
-pyinfra @docker/ubuntu:22.04 deploy.deploy_server
+uv run pyinfra @docker/ubuntu:22.04 deploy.deploy_server
 ```
 
 ## Why use the `@deploy` decorator at all?

inventory-functions/README.md

@@ -3,7 +3,7 @@
 Like operations inventories can also be defined using Python functions. This brings incredible flexibility allowing you to pull data from external systems using Python's package ecosystem to generate pyinfra inventories. The `inventory.py` contains a triaival example of this which can be executed like so:
 
 ```sh
-pyinfra inventory.make_docker_inventory exec uptime
+uv run pyinfra inventory.make_docker_inventory exec uptime
 ```
 
 There are no restrictions on what the function itself does, so you can call basically anything Python packages provide access to. Some ideas:

pyproject.toml

@@ -0,0 +1,13 @@
+[project]
+name = "pyinfra-examples"
+version = "0.1.0"
+description = "A set of documented & tested pyinfra deploys."
+readme = "README.md"
+requires-python = ">=3.12"
+license = { file = "LICENSE.md" }
+dependencies = [
+    "pyinfra==3.7",
+]
+
+[tool.uv]
+package = false

python-web-app/README.md

@@ -12,7 +12,7 @@ This example sets up two servers one database and one webserver. The webserver i
 ./docker-start.sh
 
 # Run pyinfra against them
-pyinfra inventories/docker.py deploy.py
+uv run pyinfra inventories/docker.py deploy.py
 
 # The app should now be accessible in browser on localhost:5000
 # (the app is just a fork of a tutorial: https://github.com/Fizzadar/Flask-Web-App-Tutorial)