70 comments

[ 3.2 ms ] story [ 141 ms ] thread
Why?
> Just for fun

It's mentioned right there

Yeah I guess I understood that, but working in Django myself I don’t quite get the point of it. Is it some older lighter version of Django and what for? I think this was more my point.
Author here. In 2007 when Django was starting to get popular there was a website called instantdjango.com where you could go and download a zip that would let you run Django and Python on Windows, with everything configured nicely.

I only used that version because it is the official one supported by cosmopolitan, but it is also possible to use newer versions with the same approach, for example Python 3.11 and Django 4: https://github.com/ahgamut/cpython/tree/cosmo-djngo (Website has been updated to point at that one).

djngo.com is the culmination of years of effort, creating a single file python executable that runs on all platforms. This project is based on APE (https://justine.lol/ape.html) and in the past few days, our Python APE port (called python.com) became good enough to run Django. So we put Django inside the executable too, and called it djngo.com. The djngo.com executable will just work on the following platforms:

- Apple x86_64 and ARM64

- Linux running x86_64 or ARM64 (Raspberry Pi)

- Windows running x86_64 and possibly ARM64 too

- FreeBSD, NetBSD, and OpenBSD running x86_64

It does not require that Python be installed beforehand. It's a native Python executable. It does not require Rosetta or Qemu be installed either, in order to run ARM64 platforms. It does not require Cygwin or MSYS2 runtimes in order to run on WIN32. It only depends on KERNEL32. It has an embedded JIT VM called Blink (https://github.com/jart/blink) which it pulls out on non-x86 platforms to emulate itself. All its dependencies are bundled inside using a zip polyglot, including the Python standard library:

    unzip -vl djngo.com
    ...
    5588  Defl:N     1707  70% 02-23-2023 16:06 26fb04f6  .python/django/shortcuts.py
       0  Stored        0   0% 02-23-2023 16:05 00000000  .python/ctypes/
      34  Stored       34   0% 02-23-2023 16:05 1b5bb9b2  .python/ctypes/__init__.py
    --------          -------  ---                            -------
    35075517         11728493  67%                            7171 files
You can put your app's assets inside the djngo.com file too, using the standard zip tool. You can then rename the file, and insert a `.args` file that supplies default args for launching your white-labeled app.

This means that if you're a Django app developer, you can now easily share your apps with others wanting to run it locally. It's almost as easy for anyone on any platform to use, as if you productionized it onto a website. Rather than a hyperlink away, it's a single file download and CLI invocation away. You won't need to explain things like, "here's how you install Python on Windows" or "here's how you install Docker and setup a Linux distro, in order to run my app." Your users will be in full control of the app, granting maximum privacy and control over data, and zero operations toil for you!

Why Django 2.2? That version is no longer supported, and I'm guessing there's some technical reason you are using the obsolete version? (Production Django is now on major version 4)
The technical reason for choosing Python 3.6 no longer applies due to how quickly cosmo has advanced in the past months (in particular thread support). jart and ahgamut were the ones who made it happen, I am only a python.com user.

But if you want Django 4 and Python 3.11, here is some info copied from the website:

3. Newer Python and newer Django? It is possible to have a djngo.com with Django 4 and Python 3.11. Solved by aghgamut who was the first to port Python to Cosmopolitan. Please note that this Python and the one that djngo.com use are different, the later has been heavily optimized by jart to run well on cosmo, the former is as close as upstream as you can get. Choose your destiny.

curl -O https://djngo.com/djngo4-py311.com

The cosmo monorepo currently vendors Python 3.6, since cosmo originally didn't have threads support and that was the last version before threads became mandatory. I'm pretty happy with the old version since I've been using Django since the 2000's. I put a lot of work into enhancing monorepo cosmo python with things like a better REPL that works across platforms. It may not be supported by the Python team, but it's supported by me. However the future will probably be building Python w/ Cosmo outside the monorepo. See the other comments for details on how to use APE + Python 3.11 for a modern experience.
https://github.com/ahgamut/cpython/tree/cosmo-djngo

Python 3.11.0rc1, Django 4.1.7. I think ingenieroariel also has a binary available on the website.

It's a proof-of-concept (because I wrote it just a few hours back), but it shows that we could have the latest version of Python+Django packaged in a single-file executable. Someone could definitely improve upon the build process (like it was done for Python3.6) and add more packages if they wanted.

(comment deleted)
FWIW I imagine we could have added Django to `python.com` sometime last September, which is when I ported Python 3.11.0rc1 (with threads!) to Cosmopolitan Libc: https://github.com/ahgamut/cpython/tree/cosmo_py311

Making Django work on Py3.11 involved the following steps (see commit history for https://github.com/ahgamut/cpython/tree/cosmo_djngo):

- add django + deps to the Lib/ folder - add sqlite3 and zlib to the build system - run quick tests and small examples to check the build works

I expect there's a bunch of packages like django which can be ported similarly. If anyone's interested, this is a fun area to explore.

It's possible you mean this question sincerely but it comes across as curt, insincere and dismissive.
This seems great. I do not have a clue as to what are the best ways to get a modern Python GUI app running, but I can absolutely slam together a Django application to make a web form. Hugely lower barrier to entry than trying to tackle Electron.

Is it efficient or web scale? Probably not, but I will definitely consider this rather than say Gooey.

Are people still using Django?
Are people still using a mature, stable, battle-tested framework with tons of third-party resources, great documentation and excellent coverage of many business needs ?

Yes, of course.

I've seen this opinion on HN for years, but still don't _really_ understand it. Our cofounder built what is now a $1B+ SaSS company from some cursory SQL knowledge he gained while interning at a hospital in the early 2010's. The entire business is, in essence, a fancy graphical UI around postgres.

I've now been writing django at work for five years and still have yet to come across a query builder/orm which is as powerful yet simple in addition to being a breeze to on-board new engineers with.

When there are queries that require the use of non-django builtins, it's also relatively easy to use django raw sql or just straight up use the psycopg2 sql.SQL dynamic string composition helpers.

With the complexity of some our chained django QueryMethods, the company would have quite literally been impossible to build without django's query builder, at the very least.

This is a double-edged sword in my opinion. The Django ORM is among my favourite ORMs, but the abstraction (like any) can cause problems over time.

At scale, poorly understood ORM-generated queries can be a real pain, especially if your team's SQL skills have atrophied due to over-reliance on the ORM.

As an exercise, I'd possibly recommend reviewing your top 1-3 worst performing queries, tracking them back to the ORM, and evaluating how to improve them.

> At scale

People often overestimate how often the average website needs to worry about scale.

And how easy it is to fix the times you come close.

I completely agree, except for the last line. It is in my experience very hard to post-hoc get people to care about query performance. Organizationally and technically. In a complicated monolith at scale, de-tangling the ORM is a multi-years long project.

Edited to say: as for the average website, I do completely agree. For the unique website that will scale as well, I likely would still 95/100 recommend the ORM, but my experience has taught me that there be some pain on the road.

Instagram uses Django, so I think it is possible to make anything work.
After a few years around the block (meteor, next.js), I'm back to Django. Got an mvp planetary web map annotation app up in no time, using Django DRF and just some plain hand-written js. Feels great to be back.
Not to be condescending or patronizing, but, well, I'm answering your question and it itself has a dismissive tone.

Yes, people are still using Django.

As I've grown in my career, frameworks, libraries, and architectural patterns just become tools. I don't quite understand folks who identify as a "React developer", or a "Django developer". When evaluating any framework, you must learn to eschew the latest hotness long enough to evaluate what your requirements are, and maybe most importantly, what your constraints are.

For a surprising amount of projects today, I would still recommend Django above anything else.

A lot. And it baffles me why hasn't anyone realized that Kenneth Reitz was right about django over a decade ago and all his points are equally valid today.

https://speakerdeck.com/kennethreitz/flasky-goodness

Flask FTW.
If you like Flask (I do too), you can do what we used to do before Flask existed (./djngo.com -p project runserver) where .python/project.py in the zip is:

  import os
  from django.conf import settings
  from django.core import management
  from django.conf.urls import url
  from django.http import HttpResponse

  # Django 2.2 Release Notes
  # https://docs.djangoproject.com/en/4.1/releases/2.2/
  # Documentation
  # https://docs.djangoproject.com/en/2.2/

  __version__ = 0.1

  DEBUG = True
  ROOT_URLCONF = 'project'
  DATABASES = {'default': { 'ENGINE': 'django.db.backends.sqlite3', 'NAME': 'project.db' }}
  SECRET_KEY = os.getenv('SECRET_KEY', 'Please set a SECRET_KEY as an env var.')

  if not settings.configured:
    settings.configure(**locals())

  def index(request):
    return HttpResponse('Hello Django!')

  urlpatterns = [
    url(r'^$', index),
  ]

  if __name__ == '__main__':  # pragma: no cover
    management.execute_from_command_line()
The problem with Django is all the things that make it Django. Frankly, I'd build my own Flask from scratch, but I can't find a good excuse.

With that being said, I hadn't thought much about "before Flask". I very well might feel differently if I had been coding then.

It baffles me why you think a nuanced and good natured critique is a slam dunk.
I will take a well curated package that handles all the problems for me rather than bolting together pieces just so I can feel more ownership of a project.

- Admin panel? Django has me

- Web forms? Django has me

- Testing? Django, again has an out of the box solution

- Latest in security practices[0]? Again, covered for free

Flask, boy oh boy. I want an ORM? Guess I have to search around, Flask-SQLAlchemy has a lot of hits, I guess? Emails? Well, the Flask Mega-Tutorial uses Flask-Mail[1], guess I will use that. Oh look, it has not been updated since 2014[2]. Hope there is not a security flaw in there[3].

Django follows best practices, and has a huge community ensuring that there is adequate coverage and features required for modern development.

[0]: https://docs.djangoproject.com/en/4.2/releases/4.2/ note on the BREACH attack

[1]: https://blog.miguelgrinberg.com/post/the-flask-mega-tutorial...

[2]: https://github.com/mattupstate/flask-mail

[3]: https://github.com/mattupstate/flask-mail/issues/189

FastAPI is the better choice now as its ecosystem is much more up to date and has more batteries included than flask (eg FastAPI has authentication included).
Well no. None of these thing are appealing to me. As much as I hate the modern web, admin panels and forms generated server side are dead. Testing has never been an issue. As for security practices, this statement is as subjective as they come.

I am by no means a fan of flask. However it gives you a lot more freedom to structure your application to your taste. Django is basically a php 5.4 framework with a python syntax.

In this day and age fastAPI is a solid choice, so is falcon and probably half a dozen others.

Well... no thanks. I've been doing similar apps with Django and Flask. I'll take Django over Flask any day. Way too much fiddling with Flask.
If not django, what on python? Anything else besides flask?
I would suggest Masonite [0]. It’s lightweight enough to replace Flask and has a plethora of built in features if you need to build a “production-ready” app. It tends to imitate Laravel in its project setup and naming conventions which, depending on your preference, can either be a boon or a bane.

[0] https://docs.masoniteproject.com/

(comment deleted)
I'm getting the wrong hash when I download the file (I tried a couple times).

I'm running

    curl -O https://djngo.com/djngo.com
    shasum -a 256 djngo.com
and I get

    6133a4f5c76af6ca6a2b2eba115783a78fc1721cd384539076884f640b801a26  djngo.com
I'm on a M1 Mac. Am I missing something obvious?

I tried running it anyway (smart I know) and it failed with

    zsh: exec format error: ./djngo.com
Please try again, I just re-ran the deployment and tested on my M1 (OSX):

  x@m1n1n0 ~> chmod +x djngo.com   
  x@m1n1n0 ~> sha256sum djngo.com   
  6205984f572575c407ce65502361b554af17584f076076bec7440613459d  1dff  djngo.com
  x@m1n1n0 ~> ./djngo.com 
  extracting blink-darwin-arm64 to /var/folders  /fn/4cdpvwcx1wnc53rzl2m0pn_m0000gn/T//.ape-blink-0.9.2
  Python 3.6.14+ (Actually Portable Python) [GCC 9.2.0] on cosmo
  Type "help", "copyright", "credits" or "license" for more   information.
  >>:
Now I'm getting a different hash consistently, but not the correct hash:

    shasum -a 256 djngo.com
071bca4e67bf52dabcd6ec9766189c98ae536c103247549f6801d55dbc0a53ee djngo.com

Does the sha256sum command return a different value? It doesn't seem to be installed on my Mac by default.

What a missed opportunity in calling it Django Unchained
References to slavery in America, even references to movies of freed slaves struggling to free others are generally unwelcome. It’s not something most people want to be faced with when they just came for a simple technical discussion.
(comment deleted)
So call it Django ’66.
I found it clever and I welcome it. The history surrounding slavery isn't a taboo subject, what a ridiculous idea. The commenter in no way is condoning slavery.
I don't anyone believes that calling it Django Unchained would condone slavery.

They're just saying they don't want to have to think about slavery when choosing software which seems not unreasonable to me.

Uh, yeah, it absolutely is a taboo subject, at least in the USA.
Yep, as a black person in the USA… this sort of reads as:

“Remember those times your ancestors were enslaved?

Which relates to a history of segregation and oppression so recent that your parents were alive when it was overturned? You must remember it since it’s still championed by secessionists and is the cause of ever present police brutality.

Remember that? Well wow, do I have a funny joke for you!”

Long story short, there are other jokes that could be made.

References to religions as true are generally unwelcome. It's not something most people want to be faced with when they just came for a simple technical discussion.
Maybe they just really like True Religion jeans?
My fat ass cannot fit into them, stop fat shaming me, I came for the technical discussion.
Why, yes I do! So sad they downsized so much that my username is now out of style.
What are your facts about what most people want? Did you do some statistical work in this field? It would be interesting to see your results.

As a competent HN reader you certainly are basing your view on some facts?

Oh no this is totally just my opinion, and I can only defend it with rhetoric, anecdotes, and common sense logic.

Don’t get name wrong, I don’t think the OP meant something malicious and I don’t want to word police in general. It’s just that this joke comes up all the time when Django is mentioned in a crowd. It may have been funny once but now it’s just kind of banal.

Hmm, this has me thinking I could build a single-file executable with a self-contained database or that connects to the server. And with a little work I might be able to launch the system browser pointed at the Djngo. And with this I might have a simple web based replacement for all the Access utilities floating around here?

I know about Electron and Tauri and all that but this seems like an intriguing possibility to work on.

If you don't mind Lua, then redbean already has you covered:

https://redbean.dev/

Tunney-jart, ape, etc are so impressive... I'd like to see some real competition for Access, at least on Linux and/or BSDs. Because Access is untouchable in it's space. Because it _is_ the space. redbean looks very tasty indeed. If it was the foundation of an 'Access-on-GNU/Linux/BSD' that would be very cool.
You mean Access as in MS Access? Why not give Libre Office Base a try? Seems like an ok alternative
I really should try redbean. Python / Django is attractive for the batteries included aspect and some uses I had in mind might look for those batteries but a quick search shows some of those are available for Lua so maybe I should get a proof of concept together.
Fantastic -Ive been wanting something like this to see if a project I worked on could be made standalone for a while.
Is it be possible to create a portable SDL game with cosmopolitan?