fix: Fixing compile pip requirements when running on an RBE

CHANGELOG.md

@@ -55,6 +55,7 @@ Unreleased changes template.
 * Bazel 6 support is dropped and Bazel 7.4.1 is the minimum supported
   version, per our Bazel support matrix. Earlier versions are not
   tested by CI, so functionality cannot be guaranteed.
+* In a suitably configured RBE, `pip_compile` will now be runnable.
 
 {#v0-0-0-fixed}
 ### Fixed

python/private/pypi/dependency_resolver/dependency_resolver.py

@@ -27,9 +27,9 @@
 
 from python.runfiles import runfiles
 
-# Replace the os.replace function with shutil.copy to work around os.replace not being able to
+# Replace the os.replace function with shutil.move to work around os.replace not being able to
 # replace or move files across filesystems.
-os.replace = shutil.copy
+os.replace = shutil.move
 
 # Next, we override the annotation_style_split and annotation_style_line functions to replace the
 # backslashes in the paths with forward slashes. This is so that we can have the same requirements

python/private/pypi/pip_compile.bzl

@@ -22,6 +22,8 @@ make it possible to have multiple tools inside the `pypi` directory
 load("//python:py_binary.bzl", _py_binary = "py_binary")
 load("//python:py_test.bzl", _py_test = "py_test")
 
+_TAGS_FOR_REMOTE_EXECUTION = ["no-sandbox", "no-remote-exec", "requires-network"]
+
 def pip_compile(
         name,
         srcs = None,
@@ -38,6 +40,7 @@ def pip_compile(
         requirements_windows = None,
         visibility = ["//visibility:private"],
         tags = None,
+        remoteable = True,
         **kwargs):
     """Generates targets for managing pip dependencies with pip-compile.
 
@@ -68,6 +71,7 @@ def pip_compile(
         extra_args: passed to pip-compile.
         extra_deps: extra dependencies passed to pip-compile.
         generate_hashes: whether to put hashes in the requirements_txt file.
+        remoteable: whether of not to add tags that support remote execution.
         py_binary: the py_binary rule to be used.
         py_test: the py_test rule to be used.
         requirements_in: file expressing desired dependencies. Deprecated, use src or srcs instead.
@@ -141,17 +145,19 @@ def pip_compile(
         Label("//python/runfiles:runfiles"),
     ] + extra_deps
 
-    tags = tags or []
-    tags.append("requires-network")
-    tags.append("no-remote-exec")
-    tags.append("no-sandbox")
+    tags_to_use = []
+    if tags:
+        tags_to_use += tags
+    if remoteable:
+        tags_to_use += _TAGS_FOR_REMOTE_EXECUTION
+
     attrs = {
         "args": args,
         "data": data,
         "deps": deps,
         "main": pip_compile,
         "srcs": [pip_compile],
-        "tags": tags,
+        "tags": tags_to_use,
         "visibility": visibility,
     }