Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
A Python binding for Eclipse Cyclone DDS.
Eclipse CycloneDDS Python requires Python version 3.7 or higher. You can install with included Cyclone DDS binaries or leveraging an existing Cyclone DDS installation by installing from source via PyPi.
Documentation can be found on the cyclonedds.io website: Python API docs
This is the most straightforward method to install Cyclone DDS Python, but there are a couple of caveats. The pre-built package:
If these are of concern, proceed with an installation from source. If not, running this installation is as simple as:
$ pip install cyclonedds
When installing from source you can make use of the full list of features offered by Cyclone DDS. First install Cyclone DDS as normal. Then continue by setting the CYCLONEDDS_HOME
environment variable to the installation location of Cyclone DDS, which is the same as what was used for CMAKE_INSTALL_PREFIX
. You will have to have this variable active any time you run Python code that depends on cyclonedds
so adding it to .bashrc
on Linux, ~/bash_profile
on MacOS or the System Variables in Windows can be helpful. This also allows you to switch, move or update Cyclone DDS without recompiling the Python package.
You'll need the Python development headers to complete the install. If using apt
, try sudo apt install python3-dev
. For other distributions, see this comment.
You can install the source from the latest release from Pypi, or use a tag to get a specific version. A full example (for linux) is shown below
$ git clone https://github.com/eclipse-cyclonedds/cyclonedds
$ cd cyclonedds && mkdir build install && cd build
$ cmake .. -DCMAKE_INSTALL_PREFIX=../install
$ cmake --build . --config RelWithDebInfo --target install
$ cd ..
$ export CYCLONEDDS_HOME="$(pwd)/install"
$ pip3 install cyclonedds --no-binary cyclonedds
A full example installation of the quickest way to get started via git is shown below:
$ git clone https://github.com/eclipse-cyclonedds/cyclonedds
$ cd cyclonedds && mkdir build install && cd build
$ cmake .. -DCMAKE_INSTALL_PREFIX=../install
$ cmake --build . --config RelWithDebInfo --target install
$ cd ..
$ export CYCLONEDDS_HOME="$(pwd)/install"
$ pip3 install git+https://github.com/eclipse-cyclonedds/cyclonedds-python
The Python package contains a suite of command line tools, all nested under the main entrypoint cyclonedds
. The main help screen shows the commands available:
cyclonedds ls
The ls
subcommand shows you the entities in your DDS system and their QoS settings. For example, here is the output when running the Vehicle
example from this repo in the background:
cyclonedds ps
The ps
subcommand shows you the applications in your DDS system. Note that this depends on so called 'Participant Properties', tactfully named QoS properties in DDS participants. These were merged into CycloneDDS for version 0.10.0. Here is an example of the output when running the Vehicle
example from this repo in the background on a single host:
cyclonedds typeof
The typeof
subcommand shows you the type(s) of a topic in your system. With XTypes it can happen that more than one type for each topic exists and that they are still compatible. The types are represented in IDL. Here is an example of the output when running the Vehicle
example:
cyclonedds subscribe
The subscribe
subcommand dynamically subscribes to a topic and shows you the data as it arrives. The type is discovered in a similar manner as typeof
. Here is an example of the output when running the Vehicle
example:
cyclonedds performance
The cyclonedds
subcommand is a nicer frontend to ddsperf
with four modes: publish
, subscribe
, ping
and pong
. The below performance run example is the subscribe
mode rendered with cyclonedds performance publish
running in the background.
We very much welcome all contributions to the project, whether that is questions, examples, bug fixes, enhancements or improvements to the documentation, or anything else really. When considering contributing code, it might be good to know that build configurations for Azure pipelines are present in the repository and that there is a test suite using pytest, along with flake8 code linting, and documentation built with sphinx. Be sure to install with the Extra dependencies if you're going to run tests, lints or build the docs.
You can run the test suite and linting using the local-ci.py script in this repo.
$ python local-ci.py
Or lint a single file/directory (as the whole repo can be a little noisey) using:
$ python -m flake8 path/to/some_file.py
You can build and serve the documentation (at http://localhost:8000/) using:
cd docs
python -m sphinx source/ _build/
# Serve the HTML files to view at localhost:8000
python -m http.server -d _build
The cyclonedds
package defines two sets of optional dependencies, dev
and docs
, used for developing cyclonedds
and building the documentation, respectively. If you want to install with development tools add the component to your installation, for example:
$ pip3 install --user "cyclonedds[dev] @ git+https://github.com/eclipse-cyclonedds/cyclonedds-python"
Or when installing from a local git clone, which is recommended when developing or building the docs:
$ cd /path/to/git/clone
# for development:
$ pip3 install --user ".[dev]"
# for documentation generation
$ pip3 install --user ".[docs]"
# or for both
$ pip3 install --user ".[dev,docs]"
For more information see the packaging guide information on optional dependencies.
FAQs
Eclipse Cyclone DDS Python binding
We found that cyclonedds demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.