Tips and tricks

Tips

Building Linux wheels for non-native archs using emulation

cibuildwheel supports building non-native architectures on Linux, via emulation through the binfmt_misc kernel feature. The easiest way to use this is via the docker/setup-qemu-action on GitHub Actions or tonistiigi/binfmt.

Check out the following config for an example of how to set it up on GitHub Actions. Once QEMU is set up and registered, you just need to set the CIBW_ARCHS_LINUX environment variable (or use the --archs option on Linux), and the other architectures are emulated automatically.

.github/workflows/build.yml

name: Build

on: [push, pull_request]

jobs:
  build_wheels:
    name: Build wheels on ${{ matrix.os }}
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
        # macos-13 is an intel runner, macos-14 is apple silicon
        os: [ubuntu-latest, ubuntu-24.04-arm, windows-latest, macos-13, macos-14]

    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        if: runner.os == 'Linux' && runner.arch == 'X64'
        uses: docker/setup-qemu-action@v3
        with:
          platforms: all

      - name: Build wheels
        uses: pypa/cibuildwheel@v3.0.0
        env:
          # configure cibuildwheel on Linux to build native archs ('auto'),
          # and to split the remaining architectures between the x86_64 and
          # ARM runners
          CIBW_ARCHS_LINUX: ${{ runner.arch == 'X64' && 'auto ppc64le s390x' || 'auto' }}

      - uses: actions/upload-artifact@v4
        with:
          name: cibw-wheels-${{ matrix.os }}-${{ strategy.job-index }}
          path: ./wheelhouse/*.whl

Building CPython ABI3 wheels (Limited API)

The CPython Limited API is a subset of the Python C Extension API that's declared to be forward-compatible, meaning you can compile wheels for one version of Python, and they'll be compatible with future versions. Wheels that use the Limited API are known as ABI3 wheels.

To create a package that builds ABI3 wheels, you'll need to configure your build backend to compile libraries correctly create wheels with the right tags. Check this repo for an example of how to do this with setuptools.

You could also consider running abi3audit against the produced wheels in order to check for abi3 violations or inconsistencies. You can run it alongside the default in your repair-wheel-command.

Packages with optional C extensions

cibuildwheel defines the environment variable CIBUILDWHEEL to the value 1 allowing projects for which the C extension is optional to make it mandatory when building wheels.

An easy way to do it in Python 3 is through the optional named argument of Extension constructor in your setup.py:

myextension = Extension(
    "myextension",
    ["myextension.c"],
    optional=os.environ.get('CIBUILDWHEEL', '0') != '1',
)

Building with NumPy

If using NumPy, there are a couple of things that can help.

First, if you require the numpy package at build-time (some binding tools, like pybind11 and nanobind, do not), then the backward compatibility for your build-backend.build-requires is a little complicated for Python <3.9:

  • NumPy <1.25: You must build with the oldest version of NumPy you want to support at runtime.
  • NumPy 1.25 and 1.26: Anything you build will be compatible with 1.19+ by default, and you can set the minimum target to, for example, 1.22 with #define NPY_TARGET_VERSION NPY_1_22_API_VERSION.
  • NumPy 2.x: You must build with NumPy 2 to support NumPy 2; otherwise the same as 1.25+.

So the rule is:

  • Python <3.8: Use the oldest supported NumPy (via helper oldest-supported-numpy if you want)
  • Python 3.9+: Use latest supported NumPy (2+).

Second, there might be platforms you want to ship for that NumPy (or some other scientific Python libraries) are not shipping yet for. This is often true for beta candidates of new Python releases, for example. To work with this, you can use the Scientific Python Nightly wheels. Here's an example, depending on what frontend you use:

pip based

For frontends like build (the default) and pip:

[tool.cibuildwheel]
environment.PIP_ONLY_BINARY = "numpy"
environment.PIP_PREFER_BINARY = "1"

[[tool.cibuildwheel.overrides]]
select = ["cp314*"]
inherit.environment = "append"
environment.PIP_EXTRA_INDEX_URL = "https://pypi.anaconda.org/scientific-python-nightly-wheels/simple/"
environment.PIP_PRERELEASE = "allow"

uv based

For frontends like build[uv]:

[tool.cibuildwheel]
environment.UV_ONLY_BINARY = "numpy"
environment.UV_PREFER_BINARY = "1"

[[tool.cibuildwheel.overrides]]
select = ["cp314*"]
inherit.environment = "append"
environment.UV_INDEX = "https://pypi.anaconda.org/scientific-python-nightly-wheels/simple/"
environment.UV_INDEX_STRATEGY = "unsafe-best-match"
environment.UV_PRERELEASE = "allow"

(Note the *_ONLY_BINARY variable also supports ":all:", and you don't need both that and *_PREFER_BINARY, you can use either one, depending on if you want a missing wheel to be a failure or an attempt to build in CI.)

Automatic updates using Dependabot

Selecting a moving target (like the latest release) is generally a bad idea in CI. If something breaks, you can't tell whether it was your code or an upstream update that caused the breakage, and in a worst-case scenario, it could occur during a release.

There are two suggested methods for keeping cibuildwheel up to date that instead involve scheduled pull requests using GitHub's Dependabot.

Option 1: GitHub Action

If you use GitHub Actions for builds, you can use cibuildwheel as an action:

uses: pypa/cibuildwheel@v3.0.0

This is a composite step that just runs cibuildwheel using pipx. You can set command-line options as with: parameters, and use env: as normal.

Then, your .github/dependabot.yml file could look like this:

version: 2
updates:
  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "weekly"

Option 2: Requirement files

The second option, and the only one that supports other CI systems, is using a requirements-*.txt file. The file should have a distinct name and have only one entry:

# requirements-cibw.txt
cibuildwheel==3.0.0

Then your install step would have python -m pip install -r requirements-cibw.txt in it. Your .github/dependabot.yml file could look like this:

version: 2
updates:
  - package-ecosystem: "pip"
    directory: "/"
    schedule:
      interval: "daily"

This will also try to update other pins in all requirement files, so be sure you want to do that. The only control you have over the files used is via the directory option.

Alternatives to cibuildwheel options

cibuildwheel provides lots of opportunities to configure the build environment. However, you might consider adding this build configuration into the package itself - in general, this is preferred, because users of your package 'sdist' will also benefit.

Missing build dependencies

If your build needs Python dependencies, rather than using before-build, it's best to add these to the build-system.requires section of your pyproject.toml. For example, if your project requires Cython to build, your pyproject.toml might include a section like this:

[build-system]
requires = [
    "setuptools>=42",
    "Cython",
]

build-backend = "setuptools.build_meta"

Actions you need to perform before building

You might need to run some other commands before building, like running a script that performs codegen or downloading some data that's not stored in your source tree.

Rather than using before-all or before-build, you could incorporate these steps into your package's build process. For example, if you're using setuptools, you can add steps to your package's setup.py using a structure like this:

import subprocess
import setuptools
import setuptools.command.build_py


class BuildPyCommand(setuptools.command.build_py.build_py):
    """Custom build command."""

    def run(self):
        # your custom build steps here
        # e.g.
        #   subprocess.run(['python', 'scripts/my_custom_script.py'], check=True)
        setuptools.command.build_py.build_py.run(self)


setuptools.setup(
    cmdclass={
        'build_py': BuildPyCommand,
    },
    # Usual setup() args.
    # ...
)

Compiler flags

Your build might need some compiler flags to be set through environment variables. Consider incorporating these into your package, for example, in setup.py using extra_compile_args or extra_link_args.

Troubleshooting

If your wheel didn't compile, you might have a mistake in your config.

To quickly test your config without doing a git push and waiting for your code to build on CI, you can test the Linux build in a local Docker container.

Missing dependencies

Sometimes a build will fail due to a missing dependency.

If the build is missing a Python package, you should add it to pyproject.toml.

If you need a build tool (e.g. cmake, automake, ninja), you can install it through a package manager like apt/yum, brew or choco, using the before-all option.

If your build is linking into a native library dependency, you can build/install that in before-all. However, on Linux, Mac (and Windows if you're using delvewheel), the library that you install will be bundled into the wheel in the repair step. So take care to ensure that

  • the bundled library doesn't accidentally increase the minimum system requirements (such as the minimum macOS version)
  • the bundled library matches the architecture of the wheel you're building when cross-compiling

This is particularly an issue on macOS, where de facto package manager Homebrew will install libraries that are compiled for the specific version of macOS that the build machine is running, rendering the wheels useless for any previous version. And brew will not install the right arch for cross compilation of Apple Silicon wheels.

For these reasons, it's strongly recommended to not use brew for native library dependencies. Instead, we recommend compiling the library yourself. If you compile in the before-all step, cibuildwheel will have already set the appropriate MACOSX_DEPLOYMENT_TARGET env var, so the library will target the correct version of macOS.

Tip

For build steps, Homebrew is still a great resource - you can look up the build formula and use that as a starting point.

Building Rust wheels

If you build Rust wheels, you need to download the Rust compilers in manylinux. If you support 32-bit Windows, you need to add this as a potential target. You can do this on GitHub Actions, for example, with:

CIBW_BEFORE_ALL_LINUX: curl -sSf https://sh.rustup.rs | sh -s -- -y
CIBW_BEFORE_ALL_WINDOWS: rustup target add i686-pc-windows-msvc
CIBW_ENVIRONMENT_LINUX: "PATH=$HOME/.cargo/bin:$PATH"

Rust's minimum macOS target is 10.12, while CPython supports 10.9 before Python 3.12, so you'll need to raise the minimum:

[tool.cibuildwheel.macos.environment]
MACOSX_DEPLOYMENT_TARGET = "10.12"

And Rust does not provide Cargo for musllinux 32-bit, so that needs to be skipped:

[tool.cibuildwheel]
skip = ["*-musllinux_i686"]

Also see maturin-action which is optimized for Rust wheels, builds the non-Python Rust modules once, and can cross-compile (and can build 32-bit musl, for example).

macOS: 'No module named XYZ' errors after running cibuildwheel

cibuildwheel on Mac installs the distributions from Python.org system-wide during its operation. This is necessary, but it can cause some confusing errors after cibuildwheel has finished.

Consider the build script:

python3 -m pip install twine cibuildwheel
python3 -m cibuildwheel --output-dir wheelhouse
python3 -m twine upload wheelhouse/*.whl
# error: no module named 'twine'

This doesn't work because while cibuildwheel was running, it installed a few new versions of 'python3', so the python3 run on line 3 isn't the same as the python3 that ran on line 1.

Solutions to this vary, but the simplest is to use pipx:

# most runners have pipx preinstalled, but in case you don't
python3 -m pip install pipx

pipx run cibuildwheel==3.0.0 --output-dir wheelhouse
pipx run twine upload wheelhouse/*.whl

macOS: Passing DYLD_LIBRARY_PATH to delocate

macOS has built-in System Integrity protections which limits the use of DYLD_LIBRARY_PATH and LD_LIBRARY_PATH so that it does not automatically pass to children processes. This means if you set DYLD_LIBRARY_PATH before running cibuildwheel, or even set it in environment, it will be stripped out of the environment before delocate is called.

To work around this, use a different environment variable such as REPAIR_LIBRARY_PATH to store the library path, and set DYLD_LIBRARY_PATH in macos.repair-wheel-command, like this:

Environment variables

CIBW_REPAIR_WHEEL_COMMAND_MACOS: >
    DYLD_LIBRARY_PATH=$REPAIR_LIBRARY_PATH delocate-wheel --require-archs {delocate_archs} -w {dest_dir} -v {wheel}

pyproject.toml

[tool.cibuildwheel.macos]
repair-wheel-command = """\
DYLD_LIBRARY_PATH=$REPAIR_LIBRARY_PATH delocate-wheel \
--require-archs {delocate_archs} -w {dest_dir} -v {wheel}\
"""

See #816, thanks to @phoerious for reporting.

macOS: Building CPython 3.8 wheels on arm64

If you're building on an arm64 runner, you might notice something strange about CPython 3.8 - unlike Python 3.9+, it's cross-compiled to arm64 from an x86_64 version of Python running under Rosetta emulation. This is because (despite the prevalence of arm64 versions of Python 3.8 from Apple and Homebrew) there is no officially supported Python.org installer of Python 3.8 for arm64.

This is fine for simple C extensions, but for more complicated builds on arm64 it becomes an issue.

So, if you want to build macOS arm64 wheels on an arm64 runner (e.g., macos-14) on Python 3.8, before invoking cibuildwheel, you should install a native arm64 Python 3.8 interpreter on the runner:

GitHub Actions

- uses: actions/setup-python@v5
  with:
    python-version: 3.8
  if: runner.os == 'macOS' && runner.arch == 'ARM64'

Generic

curl -o /tmp/Python38.pkg https://www.python.org/ftp/python/3.8.10/python-3.8.10-macos11.pkg
sudo installer -pkg /tmp/Python38.pkg -target /
sh "/Applications/Python 3.8/Install Certificates.command"

Then cibuildwheel will detect that it's installed and use it instead. However, you probably don't want to build x86_64 wheels on this Python, unless you're happy with them only supporting macOS 11+.

macOS: Library dependencies do not satisfy target MacOS

Since delocate 0.11.0 there is added verification that the library binary dependencies match the target macOS version. This is to prevent the situation where a wheel platform tag is lower than the actual minimum macOS version required by the library. To resolve this error you need to build the library to the same macOS version as the target wheel (for example using MACOSX_DEPLOYMENT_TARGET environment variable). Alternatively, you could set MACOSX_DEPLOYMENT_TARGET in environment to correctly label the wheel as incompatible with older macOS versions.

This error may happen when you install a library using a package manager like Homebrew, which compiles the library for the macOS version of the build machine. This is not suitable for wheels, as the library will only work on the same macOS version as the build machine. You should compile the library yourself, or use a precompiled binary that matches the target macOS version.

Windows: 'ImportError: DLL load failed: The specific module could not be found'

Visual Studio and MSVC link the compiled binary wheels to the Microsoft Visual C++ Runtime. Normally, the C parts of the runtime are included with Python, but the C++ components are not. When compiling modules using C++, it is possible users will run into problems on systems that do not have the full set of runtime libraries installed. The solution is to ask users to download the corresponding Visual C++ Redistributable from the Microsoft website and install it.

Additionally, Visual Studio 2019 started linking to an even newer DLL, VCRUNTIME140_1.dll, besides the VCRUNTIME140.dll that is included with recent Python versions (starting from Python 3.5; see here for more details on the corresponding Visual Studio & MSVC versions used to compile the different Python versions). To avoid this extra dependency on VCRUNTIME140_1.dll, the /d2FH4- flag can be added to the MSVC invocations (check out this issue for details and references). CPython 3.8.3 and all versions after it have this extra DLL, so it is only needed for 3.8 and earlier.

To add the /d2FH4- flag to a standard setup.py using setuptools, the extra_compile_args option can be used:

    ext_modules=[
        Extension(
            'c_module',
            sources=['extension.c'],
            extra_compile_args=['/d2FH4-'] if sys.platform == 'win32' else []
        )
    ],

To investigate the dependencies of a C extension (i.e., the .pyd file, a DLL in disguise) on Windows, Dependency Walker is a great tool. For diagnosing a failing import, the dlltracer tool may also provide additional details.