[StavrosK]

I kind of agree with both of you. I don't think Python deployment is that bad, as most modern managers get it right (I prefer Poetry nowadays). However something like letsencrypt-auto, which AFAIK installs its own dependencies, is not something I'd run. I've actually never used it precisely because it's too magical. Programs shouldn't install their own dependencies anywhere outside of a virtualenv.

[kalia35]

Does certbot do the same ? I don’t use either so I can’t tell.

I strongly agree that any python program must install its dependencies in a virtualenv. One could even argue that this principle could be extended to any software !

[jklehm]

Have you heard of our Lord and Savior pipx? Solves the python tool isolation issue nicely.

[StavrosK]

I haven't used it, I use virtualfish which does a great job as well.

[jklehm]

Virtualfish is new to me, will check it out thanks.

[StavrosK]

And it turned out that pipx wasn't what I thought it was, so thank you as well! Though virtualfish is only useful if you use the fish shell.