feat: add environment variable to disable writing extra dist-info files

This change introduces the `UV_NO_EXTRA_DIST_INFO` environment variable
as a way to opt out of the extra dist-info files that `uv` is creating.

This is important to achieve reproducible builds in distribution
packaging, allowing to replace usage of
[installer](https://pypi.org/project/installer) with `uv pip install`.

At the time of writing these files are:
- `uv_cache.json`
    Contains timestamps which are non-reproducible.
    These hashes also leak in to the `RECORD` file.

- `direct_url.json`
    Contains the path to the installed wheel.
    While not non-reproducible it's not required for distribution packaging.

- `INSTALLER`
    Again, not non-reproducible, but of no value in distribution packaging.

crates/uv-install-wheel/src/linker.rs

@@ -7,8 +7,8 @@ use std::time::SystemTime;
 
 use crate::script::{scripts_from_ini, Script};
 use crate::wheel::{
-    extra_dist_info, install_data, parse_wheel_file, read_record_file, write_script_entrypoints,
-    LibKind,
+    install_data, parse_wheel_file, read_record_file, write_extra_dist_info,
+    write_script_entrypoints, LibKind,
 };
 use crate::{Error, Layout};
 use fs_err as fs;
@@ -45,6 +45,7 @@ pub fn install_wheel(
     installer: Option<&str>,
     link_mode: LinkMode,
     locks: &Locks,
+    extra_dist_info: bool,
 ) -> Result<(), Error> {
     let dist_info_prefix = find_dist_info(&wheel)?;
     let metadata = dist_info_metadata(&dist_info_prefix, &wheel)?;
@@ -140,16 +141,18 @@ pub fn install_wheel(
         trace!(?name, "No data");
     }
 
-    trace!(?name, "Writing extra metadata");
-    extra_dist_info(
-        site_packages,
-        &dist_info_prefix,
-        true,
-        direct_url,
-        cache_info,
-        installer,
-        &mut record,
-    )?;
+    if extra_dist_info {
+        trace!(?name, "Writing extra metadata");
+        write_extra_dist_info(
+            site_packages,
+            &dist_info_prefix,
+            true,
+            direct_url,
+            cache_info,
+            installer,
+            &mut record,
+        )?;
+    }
 
     trace!(?name, "Writing record");
     let mut record_writer = csv::WriterBuilder::new()

crates/uv-install-wheel/src/wheel.rs

@@ -616,7 +616,7 @@ pub(crate) fn write_file_recorded(
 }
 
 /// Adds `INSTALLER`, `REQUESTED` and `direct_url.json` to the .dist-info dir
-pub(crate) fn extra_dist_info(
+pub(crate) fn write_extra_dist_info(
     site_packages: &Path,
     dist_info_prefix: &str,
     requested: bool,

crates/uv-installer/src/installer.rs

@@ -15,6 +15,7 @@ pub struct Installer<'a> {
     cache: Option<&'a Cache>,
     reporter: Option<Box<dyn Reporter>>,
     installer_name: Option<String>,
+    extra_dist_info: bool,
 }
 
 impl<'a> Installer<'a> {
@@ -26,6 +27,7 @@ impl<'a> Installer<'a> {
             cache: None,
             reporter: None,
             installer_name: Some("uv".to_string()),
+            extra_dist_info: true,
         }
     }
 
@@ -62,6 +64,15 @@ impl<'a> Installer<'a> {
         }
     }
 
+    /// Set the whether to link Uv specific files in dist-info
+    #[must_use]
+    pub fn with_extra_dist_info(self, extra_dist_info: bool) -> Self {
+        Self {
+            extra_dist_info,
+            ..self
+        }
+    }
+
     /// Install a set of wheels into a Python virtual environment.
     #[instrument(skip_all, fields(num_wheels = %wheels.len()))]
     pub async fn install(self, wheels: Vec<CachedDist>) -> Result<Vec<CachedDist>> {
@@ -71,6 +82,7 @@ impl<'a> Installer<'a> {
             link_mode,
             reporter,
             installer_name,
+            extra_dist_info,
         } = self;
 
         if cache.is_some_and(Cache::is_temporary) {
@@ -93,6 +105,7 @@ impl<'a> Installer<'a> {
                 link_mode,
                 reporter,
                 relocatable,
+                extra_dist_info,
             );
 
             // This may fail if the main task was cancelled.
@@ -122,6 +135,7 @@ impl<'a> Installer<'a> {
             self.link_mode,
             self.reporter,
             self.venv.relocatable(),
+            self.extra_dist_info,
         )
     }
 }
@@ -135,6 +149,7 @@ fn install(
     link_mode: LinkMode,
     reporter: Option<Box<dyn Reporter>>,
     relocatable: bool,
+    extra_dist_info: bool,
 ) -> Result<Vec<CachedDist>> {
     let locks = uv_install_wheel::linker::Locks::default();
     wheels.par_iter().try_for_each(|wheel| {
@@ -157,6 +172,7 @@ fn install(
             installer_name.as_deref(),
             link_mode,
             &locks,
+            extra_dist_info,
         )
         .with_context(|| format!("Failed to install: {} ({wheel})", wheel.filename()))?;
 

crates/uv-static/src/env_vars.rs

@@ -551,4 +551,7 @@ impl EnvVars {
     /// Avoid modifying the `PATH` environment variable when installing uv using the standalone
     /// installer and `self update` feature.
     pub const INSTALLER_NO_MODIFY_PATH: &'static str = "INSTALLER_NO_MODIFY_PATH";
+
+    /// Skip writing `uv` cache & installer files to site-packages dist-info.
+    pub const UV_NO_EXTRA_DIST_INFO: &'static str = "UV_NO_EXTRA_DIST_INFO";
 }

crates/uv/src/commands/pip/install.rs

@@ -82,6 +82,7 @@ pub(crate) async fn pip_install(
     cache: Cache,
     dry_run: bool,
     printer: Printer,
+    extra_dist_info: bool,
 ) -> anyhow::Result<ExitStatus> {
     let start = std::time::Instant::now();
 
@@ -449,6 +450,7 @@ pub(crate) async fn pip_install(
         Box::new(DefaultInstallLogger),
         dry_run,
         printer,
+        extra_dist_info,
     )
     .await?;
 

crates/uv/src/commands/pip/operations.rs

@@ -399,6 +399,7 @@ pub(crate) async fn install(
     logger: Box<dyn InstallLogger>,
     dry_run: bool,
     printer: Printer,
+    extra_dist_info: bool,
 ) -> Result<Changelog, Error> {
     let start = std::time::Instant::now();
 
@@ -514,6 +515,7 @@ pub(crate) async fn install(
         installs = uv_installer::Installer::new(venv)
             .with_link_mode(link_mode)
             .with_cache(cache)
+            .with_extra_dist_info(extra_dist_info)
             .with_reporter(InstallReporter::from(printer).with_length(installs.len() as u64))
             // This technically can block the runtime, but we are on the main thread and
             // have no other running tasks at this point, so this lets us avoid spawning a blocking

crates/uv/src/commands/pip/sync.rs

@@ -70,6 +70,7 @@ pub(crate) async fn pip_sync(
     cache: Cache,
     dry_run: bool,
     printer: Printer,
+    extra_dist_info: bool,
 ) -> Result<ExitStatus> {
     let client_builder = BaseClientBuilder::new()
         .connectivity(connectivity)
@@ -393,6 +394,7 @@ pub(crate) async fn pip_sync(
         Box::new(DefaultInstallLogger),
         dry_run,
         printer,
+        extra_dist_info,
     )
     .await?;
 

crates/uv/src/commands/project/add.rs

@@ -81,6 +81,7 @@ pub(crate) async fn add(
     no_config: bool,
     cache: &Cache,
     printer: Printer,
+    extra_dist_info: bool,
 ) -> Result<ExitStatus> {
     for source in &requirements {
         match source {
@@ -648,6 +649,7 @@ pub(crate) async fn add(
         allow_insecure_host,
         cache,
         printer,
+        extra_dist_info,
     )
     .await
     {
@@ -709,6 +711,7 @@ async fn lock_and_sync(
     allow_insecure_host: &[TrustedHost],
     cache: &Cache,
     printer: Printer,
+    extra_dist_info: bool,
 ) -> Result<(), ProjectError> {
     let mode = if locked {
         LockMode::Locked(venv.interpreter())
@@ -911,6 +914,7 @@ async fn lock_and_sync(
         allow_insecure_host,
         cache,
         printer,
+        extra_dist_info,
     )
     .await?;
 

crates/uv/src/commands/project/environment.rs

@@ -40,6 +40,7 @@ impl CachedEnvironment {
         allow_insecure_host: &[TrustedHost],
         cache: &Cache,
         printer: Printer,
+        extra_dist_info: bool,
     ) -> Result<Self, ProjectError> {
         // When caching, always use the base interpreter, rather than that of the virtual
         // environment.
@@ -121,6 +122,7 @@ impl CachedEnvironment {
             allow_insecure_host,
             cache,
             printer,
+            extra_dist_info,
         )
         .await?;
 

crates/uv/src/commands/project/mod.rs

@@ -1116,6 +1116,7 @@ pub(crate) async fn sync_environment(
     allow_insecure_host: &[TrustedHost],
     cache: &Cache,
     printer: Printer,
+    extra_dist_info: bool,
 ) -> anyhow::Result<PythonEnvironment> {
     let InstallerSettingsRef {
         index_locations,
@@ -1230,6 +1231,7 @@ pub(crate) async fn sync_environment(
         logger,
         dry_run,
         printer,
+        extra_dist_info,
     )
     .await?;
 
@@ -1269,6 +1271,7 @@ pub(crate) async fn update_environment(
     allow_insecure_host: &[TrustedHost],
     cache: &Cache,
     printer: Printer,
+    extra_dist_info: bool,
 ) -> anyhow::Result<EnvironmentUpdate> {
     warn_on_requirements_txt_setting(&spec, settings.as_ref().into());
 
@@ -1470,6 +1473,7 @@ pub(crate) async fn update_environment(
         install,
         dry_run,
         printer,
+        extra_dist_info,
     )
     .await?;
 

crates/uv/src/commands/project/remove.rs

@@ -50,6 +50,7 @@ pub(crate) async fn remove(
     no_config: bool,
     cache: &Cache,
     printer: Printer,
+    extra_dist_info: bool,
 ) -> Result<ExitStatus> {
     let target = if let Some(script) = script {
         // If we found a PEP 723 script and the user provided a project-only setting, warn.
@@ -271,6 +272,7 @@ pub(crate) async fn remove(
         allow_insecure_host,
         cache,
         printer,
+        extra_dist_info,
     )
     .await?;
 

crates/uv/src/commands/project/run.rs

@@ -84,6 +84,7 @@ pub(crate) async fn run(
     printer: Printer,
     env_file: Vec<PathBuf>,
     no_env_file: bool,
+    extra_dist_info: bool,
 ) -> anyhow::Result<ExitStatus> {
     // These cases seem quite complex because (in theory) they should change the "current package".
     // Let's ban them entirely for now.
@@ -294,6 +295,7 @@ pub(crate) async fn run(
                 allow_insecure_host,
                 cache,
                 printer,
+                extra_dist_info,
             )
             .await;
 
@@ -693,6 +695,7 @@ pub(crate) async fn run(
                     allow_insecure_host,
                     cache,
                     printer,
+                    extra_dist_info,
                 )
                 .await?;
 
@@ -826,6 +829,7 @@ pub(crate) async fn run(
                     allow_insecure_host,
                     cache,
                     printer,
+                    extra_dist_info,
                 )
                 .await;
 

crates/uv/src/commands/project/sync.rs

@@ -62,6 +62,7 @@ pub(crate) async fn sync(
     no_config: bool,
     cache: &Cache,
     printer: Printer,
+    extra_dist_info: bool,
 ) -> Result<ExitStatus> {
     // Identify the project.
     let project = if frozen {
@@ -217,6 +218,7 @@ pub(crate) async fn sync(
         allow_insecure_host,
         cache,
         printer,
+        extra_dist_info,
     )
     .await?;
 
@@ -241,6 +243,7 @@ pub(super) async fn do_sync(
     allow_insecure_host: &[TrustedHost],
     cache: &Cache,
     printer: Printer,
+    extra_dist_info: bool,
 ) -> Result<(), ProjectError> {
     // Use isolated state for universal resolution. When resolving, we don't enforce that the
     // prioritized distributions match the current platform. So if we lock here, then try to
@@ -427,6 +430,7 @@ pub(super) async fn do_sync(
         logger,
         dry_run,
         printer,
+        extra_dist_info,
     )
     .await?;
 

crates/uv/src/commands/tool/install.rs

@@ -35,6 +35,7 @@ use crate::printer::Printer;
 use crate::settings::ResolverInstallerSettings;
 
 /// Install a tool.
+#[allow(clippy::fn_params_excessive_bools)]
 pub(crate) async fn install(
     package: String,
     editable: bool,
@@ -52,6 +53,7 @@ pub(crate) async fn install(
     allow_insecure_host: &[TrustedHost],
     cache: Cache,
     printer: Printer,
+    extra_dist_info: bool,
 ) -> Result<ExitStatus> {
     let client_builder = BaseClientBuilder::new()
         .connectivity(connectivity)
@@ -361,6 +363,7 @@ pub(crate) async fn install(
             allow_insecure_host,
             &cache,
             printer,
+            extra_dist_info,
         )
         .await?
         .into_environment();
@@ -411,6 +414,7 @@ pub(crate) async fn install(
             allow_insecure_host,
             &cache,
             printer,
+            extra_dist_info,
         )
         .await
         .inspect_err(|_| {