6 Comments
User's avatar
None's avatar

Is exactly why I wrote sandbox-venv: https://github.com/kernc/sandbox-venv

I'm not yet sure it's a good idea or implementation, but something secure and non-manual had to be done about it!

Expand full comment
Bite Code!'s avatar

Didn't know about bubblewrap. Although I don't think I will use it for venv, it seems very interesting to isolate AI coding agents

Expand full comment
Jeffrey Hulten's avatar

I largely agree with everything you have said here and I have the environment variables to prove it.

`export PIP_REQUIRE_VIRTUALENV=true` will force you to not install packages in the system site-packages.

Expand full comment
Adam's avatar

Great fragment about keeping things uniform. It helps so much and still is not established even amongst the biggest python projects.

Expand full comment
bjkeefe's avatar

>>> Brought to you by "/r/python answers are so bad I had to write this"

:D :D :D

Expand full comment
Giuseppe Santoro 🚢's avatar

Great article. UV is such a game changer. I use it for everything. It has replaced more than 5 different tools into 1.

Expand full comment