[issue46197] ensurepip bootstrap breaks out of isolated environment

[Guido van Rossum]

Change by Guido van Rossum :


--
nosy: +eric.snow, gvanrossum

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue46197] ensurepip bootstrap breaks out of isolated environment

[Éric Araujo]

Éric Araujo  added the comment:

Thanks for the report and PR.

The workflow would be to merge a fix to the main branch for 3.11, then there’s 
a bot that makes backports for active branches (3.10 and 3.9).

More info: https://devguide.python.org/

--
nosy: +eric.araujo

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue46197] ensurepip bootstrap breaks out of isolated environment

[Marc Mueller]

Change by Marc Mueller :


--
nosy: +cdce8p

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue46197] ensurepip bootstrap breaks out of isolated environment

[Ned Deily]

Change by Ned Deily :


--
nosy: +dstufft, ncoghlan, pradyunsg

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue46197] ensurepip bootstrap breaks out of isolated environment

[kcdodd]

Change by kcdodd :


--
keywords: +patch
pull_requests: +28520
stage:  -> patch review
pull_request: https://github.com/python/cpython/pull/30307

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue46197] ensurepip bootstrap breaks out of isolated environment

[kcdodd]

New submission from kcdodd :

A change in behavior was made to the `ensurepip` module in Python 3.8.7 that 
causes bootstrapping to break out of an isolated environment. This is relevant 
to the assumption made in the `venv` module, which ran ensurepip as a 
sub-process with the `-I` flag environment isolation to force installation in 
the virtual environment directory.

In Python <= 3.8.6, ensurepip ran the bootstrap within the current interpreter, 
so the environment remained isolated. But in Python >= 3.8.7 it creates a 
second subprocess without the `-I` flag, and the un-isolated environment 
appears to be restored for pip. This would then allow a search of any 
additional paths, and prevent installation of pip and setuptools from being 
installed in the venv environment directory if they are found somewhere else.

--
messages: 409334
nosy: kcdodd
priority: normal
severity: normal
status: open
title: ensurepip bootstrap breaks out of isolated environment
type: behavior
versions: Python 3.10, Python 3.11, Python 3.8, Python 3.9

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com