How to sandbox `pip install` ?
Hi,
I have enjoyed writing a bit of python a long time ago but not got into the ecosystem.
A few years ago I have forbid myself to install python and pip on my laptop because of the security implications of full access to my /home.
Now I am missing out on a lot of good tools and often look for a solution but never found a solid answer:
-venv: I could never fully understand if it is a solid isolation mechanism
- distrobox: no, this is not a sandboxing/security solution https://github.com/89luca89/distrobox/issues/28
- docker: a bit the same problem, it make everything complicated, especially if you need to really secure it
- bubblewrap: maybe I couldn't find any good post on how to manage sandboxed python environment with it
- raw chroot: maybe
- there are a lot of repos on github / projects which pretend to do that, but with very few stars and I do / should not trust them.
To be clear I am not looking to develop anything in python, just installing an app.
Thank you for you help !